Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FFRdY77Vy5YGdcvBDNp2H9pFSP4.roa
File: FFRdY77Vy5YGdcvBDNp2H9pFSP4.roa (raw, json)
Hash identifier: /exJpHpz+hSoL2uFCogcFP7IzS8LEzh2HNEkM5mptfA=
Subject key identifier: 14:54:5D:63:BE:D5:CB:96:06:75:CB:C1:0C:DA:76:1F:DA:45:48:FE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01934AD05EFAABB3FA2B35650BB91E6D9A82
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FFRdY77Vy5YGdcvBDNp2H9pFSP4.roa
Signing time: Wed 20 Nov 2024 18:23:10 +0000
ROA not before: Wed 20 Nov 2024 18:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62880
IP address blocks: 5.175.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4a:d0:5e:fa:ab:b3:fa:2b:35:65:0b:b9:1e:6d:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 20 18:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14545d63bed5cb960675cbc10cda761fda4548fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:69:3e:19:dd:a3:a2:89:77:fb:2b:9e:5e:10:
51:75:57:f3:58:2a:0e:05:0b:ee:c0:d1:c2:41:5c:
94:d6:62:8d:d1:70:10:85:46:f5:8d:66:ed:0e:51:
d6:2b:35:67:92:7c:68:6c:01:46:86:46:6b:5d:42:
fa:0d:0b:26:64:69:d6:ed:1e:36:8b:6a:90:f8:b0:
40:18:8e:7e:35:14:a5:18:f3:58:8d:1a:96:7d:a9:
9f:5e:96:6a:4e:b2:82:c9:26:2f:06:99:aa:76:49:
12:51:b0:a6:0b:a6:40:ad:23:81:8a:73:9c:c6:69:
17:77:1f:45:a1:e8:87:e7:66:ad:12:1b:4a:4c:81:
d1:02:c3:15:32:51:6f:d1:c6:c5:d3:33:55:4e:64:
9d:07:90:d6:f3:dc:53:b3:2b:8d:0c:e1:4d:39:ea:
25:14:48:9e:c6:b5:75:c3:6d:fc:2f:4e:35:45:9e:
a9:90:6d:20:2e:be:f6:ad:cc:02:4f:11:56:74:32:
36:a6:08:f7:19:d2:79:5e:c2:d4:26:d3:cf:55:e7:
21:6f:77:9e:40:03:c3:05:f2:88:87:de:7a:93:d3:
cb:8c:65:38:b0:93:16:87:c8:5c:9d:87:76:6b:87:
6f:80:dd:45:43:1f:fc:ba:15:10:4b:80:9d:41:33:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:5D:63:BE:D5:CB:96:06:75:CB:C1:0C:DA:76:1F:DA:45:48:FE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FFRdY77Vy5YGdcvBDNp2H9pFSP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f1:97:ad:5f:4d:b6:21:b0:c4:e9:a3:47:eb:de:be:ca:96:
f2:08:27:53:0b:bf:9a:a8:ad:c1:05:65:3e:66:a4:c7:28:38:
42:93:05:75:82:d9:55:d2:48:65:4a:18:c7:70:b9:62:98:c7:
90:48:16:89:b6:cb:52:ae:1f:e1:bd:3e:e9:e1:4a:69:2c:54:
36:62:b7:0e:98:2e:f6:b8:bc:19:b7:16:a4:98:6c:13:cf:32:
fa:42:2d:5d:95:e2:ba:8a:39:b5:46:14:47:8d:5d:5e:37:e2:
72:d2:e9:df:38:ad:4b:5b:3d:9d:68:a4:b3:d0:18:66:cb:9c:
7c:fd:54:46:f6:aa:3c:26:8d:b0:00:61:bf:2f:ee:c5:80:f1:
fd:31:fe:ef:58:c5:e9:a2:84:f6:10:61:20:89:b9:45:85:46:
4f:08:59:3a:58:8f:d2:b2:42:f7:87:04:c7:10:d6:31:01:ef:
aa:48:fc:a4:51:e2:57:89:11:7f:31:86:3c:16:1a:bb:b5:54:
0e:99:8a:ba:52:7f:46:24:f5:9b:ff:9c:97:6b:36:71:97:fe:
d4:b2:22:94:cd:3e:e9:2d:9b:35:8b:bb:09:62:eb:1b:03:cc:
26:92:d4:4d:91:be:97:eb:2e:09:a1:f7:72:9a:32:61:0a:fb:
0f:15:c8:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNK0F76q7P6KzVlC7kebZqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTIwMTgyMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDU0NWQ2M2JlZDVjYjk2MDY3NWNiYzEwY2RhNzYxZmRhNDU0OGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Wk+Gd2jool3+yueXhBRdVfzWCoO
BQvuwNHCQVyU1mKN0XAQhUb1jWbtDlHWKzVnknxobAFGhkZrXUL6DQsmZGnW7R42
i2qQ+LBAGI5+NRSlGPNYjRqWfamfXpZqTrKCySYvBpmqdkkSUbCmC6ZArSOBinOc
xmkXdx9FoeiH52atEhtKTIHRAsMVMlFv0cbF0zNVTmSdB5DW89xTsyuNDOFNOeol
FEiexrV1w238L041RZ6pkG0gLr72rcwCTxFWdDI2pgj3GdJ5XsLUJtPPVechb3ee
QAPDBfKIh956k9PLjGU4sJMWh8hcnYd2a4dvgN1FQx/8uhUQS4CdQTM/LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRUXWO+1cuWBnXLwQzadh/aRUj+MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRkZSZFk3N1Z5NVlHZGN2QkROcDJIOXBGU1A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/sMA0G
CSqGSIb3DQEBCwUAA4IBAQBX8ZetX022IbDE6aNH696+ypbyCCdTC7+aqK3BBWU+
ZqTHKDhCkwV1gtlV0khlShjHcLlimMeQSBaJtstSrh/hvT7p4UppLFQ2YrcOmC72
uLwZtxakmGwTzzL6Qi1dleK6ijm1RhRHjV1eN+Jy0unfOK1LWz2daKSz0Bhmy5x8
/VRG9qo8Jo2wAGG/L+7FgPH9Mf7vWMXpooT2EGEgiblFhUZPCFk6WI/SskL3hwTH
ENYxAe+qSPykUeJXiRF/MYY8Fhq7tVQOmYq6Un9GJPWb/5yXazZxl/7UsiKUzT7p
LZs1i7sJYusbA8wmktRNkb6X6y4JofdymjJhCvsPFci1
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org