Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FoCdbe_8Uyzcvey__VnyrWpr9P4.roa
File: FoCdbe_8Uyzcvey__VnyrWpr9P4.roa (raw, json)
Hash identifier: FQyneaaF2f3mtWbD3KL1ttKvhuwlqBQ4mWpTwLdFOHk=
Subject key identifier: 16:80:9D:6D:EF:FC:53:2C:DC:BD:EC:BF:FD:59:F2:AD:6A:6B:F4:FE
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3743DE52BE6A73EC0D1035350ECC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FoCdbe_8Uyzcvey__VnyrWpr9P4.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53340
IP address blocks: 45.10.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 13:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:37:43:de:52:be:6a:73:ec:0d:10:35:35:0e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16809d6deffc532cdcbdecbffd59f2ad6a6bf4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:2d:d8:67:67:8e:41:98:aa:c2:65:aa:f1:
6e:93:ca:cc:e7:55:c7:7c:7b:ee:94:b6:1d:d0:d9:
63:6b:7d:9d:1a:4f:c9:88:d1:dd:a6:76:e0:26:64:
8c:7d:ea:fe:de:ed:34:8d:c6:11:e8:ab:bb:36:14:
00:bd:b6:55:db:7d:d7:60:21:ac:ca:fd:03:9b:1f:
65:5c:f4:46:63:29:f8:54:6a:39:8a:27:4c:f5:09:
8a:de:09:8b:46:6c:c7:b9:dd:1d:7a:a6:ee:34:37:
44:07:60:fd:a4:bb:45:40:03:ba:d6:40:00:90:02:
86:1d:b8:25:76:bd:30:2b:d4:f4:85:2e:82:d4:8c:
26:7b:28:4c:2f:a8:c5:1e:21:01:fc:11:b0:f6:24:
75:59:1e:9e:66:3b:45:2f:cf:df:19:80:ba:9d:c3:
1b:10:d3:3d:4e:2b:d9:f0:03:09:d0:89:04:60:9a:
43:87:16:d4:2d:38:2b:c2:8f:93:7f:2b:3a:c4:d3:
2d:ee:4d:29:c2:56:5e:88:7e:4e:d1:9f:55:bc:06:
5e:11:c5:d1:9c:29:d6:e2:50:10:ea:d8:4b:c2:11:
8f:03:b5:dd:e7:c9:5f:aa:6b:fd:04:ad:95:43:49:
2f:33:70:ff:50:8c:f5:af:f3:95:9b:ae:66:bd:8a:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:9D:6D:EF:FC:53:2C:DC:BD:EC:BF:FD:59:F2:AD:6A:6B:F4:FE
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FoCdbe_8Uyzcvey__VnyrWpr9P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.22.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ca:63:d3:1d:90:42:22:3f:b1:be:2c:6f:a8:ed:11:a9:7a:
d6:eb:10:0a:42:a0:f9:ac:1d:cd:7c:8e:fc:fa:d5:c4:7d:e9:
9f:35:20:46:34:3f:41:3b:ba:31:72:c1:33:d5:c6:12:08:ea:
a5:a8:62:a2:7a:c0:98:ff:36:26:81:97:e1:94:48:71:21:9a:
02:09:4c:4e:82:c2:a8:58:be:7b:36:90:be:ce:5c:97:be:a2:
75:98:11:d0:81:72:70:de:b9:07:fd:25:bf:11:fa:19:b0:31:
19:35:56:b5:f8:a7:d6:27:e0:88:8d:98:19:58:92:51:43:2b:
2f:83:71:22:d7:ec:00:56:ac:ed:8d:9e:dd:f0:0b:f7:ec:e5:
b4:bd:f9:b0:8c:cc:6e:e9:78:34:13:18:6a:49:6d:64:32:2f:
48:83:a2:10:b3:7d:7e:9d:6e:11:ca:5d:1f:44:cc:e5:bd:c5:
9a:01:62:06:16:6a:d6:cc:1c:09:49:19:97:50:d2:a6:5e:1d:
99:d6:61:af:31:63:28:0b:8b:5f:01:45:0d:e4:56:7f:95:7b:
7c:b4:bd:75:b8:4b:08:11:35:d0:a8:64:45:93:4e:d1:1e:49:
64:ba:79:3f:3d:ee:fb:f4:a7:25:33:39:11:ca:3a:1f:d5:10:
22:a6:1e:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTjdD3lK+anPsDRA1NQ7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTAyMDgzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjgwOWQ2ZGVmZmM1MzJjZGNiZGVjYmZmZDU5ZjJhZDZhNmJmNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltEt2GdnjkGYqsJlqvFuk8rM51XH
fHvulLYd0Nlja32dGk/JiNHdpnbgJmSMfer+3u00jcYR6Ku7NhQAvbZV233XYCGs
yv0Dmx9lXPRGYyn4VGo5iidM9QmK3gmLRmzHud0deqbuNDdEB2D9pLtFQAO61kAA
kAKGHbgldr0wK9T0hS6C1IwmeyhML6jFHiEB/BGw9iR1WR6eZjtFL8/fGYC6ncMb
ENM9TivZ8AMJ0IkEYJpDhxbULTgrwo+Tfys6xNMt7k0pwlZeiH5O0Z9VvAZeEcXR
nCnW4lAQ6thLwhGPA7Xd58lfqmv9BK2VQ0kvM3D/UIz1r/OVm65mvYroXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBaAnW3v/FMs3L3sv/1Z8q1qa/T+MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvRm9DZGJlXzhVeXpjdmV5X19WbnlyV3ByOVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQoWMA0G
CSqGSIb3DQEBCwUAA4IBAQBWymPTHZBCIj+xvixvqO0RqXrW6xAKQqD5rB3NfI78
+tXEfemfNSBGND9BO7oxcsEz1cYSCOqlqGKiesCY/zYmgZfhlEhxIZoCCUxOgsKo
WL57NpC+zlyXvqJ1mBHQgXJw3rkH/SW/EfoZsDEZNVa1+KfWJ+CIjZgZWJJRQysv
g3Ei1+wAVqztjZ7d8Av37OW0vfmwjMxu6Xg0ExhqSW1kMi9Ig6IQs31+nW4Ryl0f
RMzlvcWaAWIGFmrWzBwJSRmXUNKmXh2Z1mGvMWMoC4tfAUUN5FZ/lXt8tL11uEsI
ETXQqGRFk07RHklkunk/Pe779KclMzkRyjof1RAiph7L
-----END CERTIFICATE-----
Generated at Tue Apr 30 21:46:08 2024 by rpki-client on console-fra.rpki-client.org