Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/fLZP3QfrU5hDk-2GmvBYunpW1OA.roa
File: fLZP3QfrU5hDk-2GmvBYunpW1OA.roa (raw, json)
Hash identifier: L9tuD4D6iqQ783qad+M8kpNGAkjUJKqqE7JoGCnNRBI=
Subject key identifier: 7C:B6:4F:DD:07:EB:53:98:43:93:ED:86:9A:F0:58:BA:7A:56:D4:E0
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 018CC795512EDE8CEF537F9A484B87C51F48
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/fLZP3QfrU5hDk-2GmvBYunpW1OA.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44322
IP address blocks: 185.162.12.0/22 maxlen: 22
2a07:c940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:51:2e:de:8c:ef:53:7f:9a:48:4b:87:c5:1f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cb64fdd07eb53984393ed869af058ba7a56d4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:55:3c:74:ed:17:a3:d8:9a:f7:16:b6:f4:
88:72:2a:79:26:3a:90:28:6d:fd:b6:e4:d5:b0:59:
69:9a:48:fa:45:7d:5b:52:ce:b2:65:a8:2f:08:56:
ee:2f:0e:2e:a9:85:b2:1f:64:38:4d:9b:1f:b1:51:
95:53:92:4a:82:77:5c:d3:d5:c9:06:87:81:29:91:
f0:b1:84:14:c9:9d:72:9e:19:eb:f8:b7:0e:3e:a1:
e6:b3:01:de:95:42:ee:44:5f:f7:b3:a9:56:37:8c:
77:83:f6:47:f5:49:77:32:1d:14:60:e1:16:f5:24:
c2:a4:e7:c4:67:17:36:3b:04:4b:89:49:4d:69:ec:
31:1d:20:16:54:f9:ff:09:a2:91:c6:40:62:42:c3:
75:ba:7d:12:06:96:45:77:f6:06:83:6d:fb:d5:15:
fe:6f:80:0b:3e:49:4c:b9:cf:4a:0f:8f:26:d6:3b:
07:15:e1:bc:55:90:1a:24:14:1d:bd:8a:b8:06:fc:
6b:e0:7e:3d:7c:6e:5d:c3:78:f0:25:c2:2e:dc:97:
de:23:b0:6d:2c:e6:4a:97:92:02:ba:2d:13:52:8e:
59:d8:2d:2c:65:8f:2d:13:3e:70:b0:3e:49:f8:a6:
d3:20:75:3e:16:c5:0f:85:d1:56:85:5e:5e:3a:78:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:4F:DD:07:EB:53:98:43:93:ED:86:9A:F0:58:BA:7A:56:D4:E0
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/fLZP3QfrU5hDk-2GmvBYunpW1OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.12.0/22
IPv6:
2a07:c940::/29
Signature Algorithm: sha256WithRSAEncryption
31:9f:71:2e:17:b3:d8:e2:43:0b:99:7a:05:11:3b:ca:28:2b:
85:6b:45:8c:64:4b:53:e2:11:8d:f8:47:e5:12:d9:15:85:56:
9a:6d:15:31:d0:2a:f9:11:51:99:43:3a:3b:c8:e5:42:7a:af:
3c:1e:cf:c1:4f:a4:4e:2a:b3:89:0e:d3:ca:65:19:cd:7c:43:
e5:8c:0b:42:b4:55:88:ac:eb:5a:0f:21:ba:6e:91:5b:42:23:
2b:9a:41:85:7f:65:c4:22:df:5d:e7:04:a8:78:b7:49:4b:21:
e1:fe:54:64:42:a8:19:19:4d:1e:9f:26:1d:e4:6a:fd:14:d1:
d7:0f:e2:d1:59:29:8d:57:cb:a7:37:6a:15:06:c2:fe:6f:17:
69:2b:11:26:46:5c:e7:62:5e:fb:57:a7:41:78:4a:0b:1b:bf:
ee:3e:2b:d6:41:50:fa:31:60:d1:c1:f3:f0:66:65:4a:a5:2d:
49:e2:09:60:f6:06:1f:e6:ba:0c:64:9e:bf:29:7e:d2:6e:5b:
61:f9:e0:40:9c:63:a9:78:04:59:af:0b:74:6b:f6:11:60:74:
f3:ff:4b:d5:c2:26:62:4b:6f:2a:e0:ea:79:58:41:40:0a:66:
cd:0c:8a:68:9a:4b:fa:e0:b5:07:96:8e:38:e5:47:32:fb:8e:
e2:55:56:d4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHlVEu3ozvU3+aSEuHxR9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzZmZDkxZDJhNDM2NWQzZGMxNjcyMWZlZGY2OTIxNzJi
YjMwNzMwHhcNMjQwMTAyMDAzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2I2NGZkZDA3ZWI1Mzk4NDM5M2VkODY5YWYwNThiYTdhNTZkNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2hVPHTtF6PYmvcWtvSIcip5JjqQ
KG39tuTVsFlpmkj6RX1bUs6yZagvCFbuLw4uqYWyH2Q4TZsfsVGVU5JKgndc09XJ
BoeBKZHwsYQUyZ1ynhnr+LcOPqHmswHelULuRF/3s6lWN4x3g/ZH9Ul3Mh0UYOEW
9STCpOfEZxc2OwRLiUlNaewxHSAWVPn/CaKRxkBiQsN1un0SBpZFd/YGg2371RX+
b4ALPklMuc9KD48m1jsHFeG8VZAaJBQdvYq4Bvxr4H49fG5dw3jwJcIu3JfeI7Bt
LOZKl5ICui0TUo5Z2C0sZY8tEz5wsD5J+KbTIHU+FsUPhdFWhV5eOnj6hQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHy2T90H61OYQ5PthprwWLp6VtTgMB8GA1UdIwQY
MBaAFD7G/ZHSpDZdPcFnIf7faSFyuzBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQt
YmVmMzU2MDViY2Q0LzEvZkxaUDNRZnJVNWhEay0yR212Qll1bnBXMU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQtYmVmMzU2MDViY2Q0
LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaIMMA0E
AgACMAcDBQMqB8lAMA0GCSqGSIb3DQEBCwUAA4IBAQAxn3EuF7PY4kMLmXoFETvK
KCuFa0WMZEtT4hGN+EflEtkVhVaabRUx0Cr5EVGZQzo7yOVCeq88Hs/BT6ROKrOJ
DtPKZRnNfEPljAtCtFWIrOtaDyG6bpFbQiMrmkGFf2XEIt9d5wSoeLdJSyHh/lRk
QqgZGU0enyYd5Gr9FNHXD+LRWSmNV8unN2oVBsL+bxdpKxEmRlznYl77V6dBeEoL
G7/uPivWQVD6MWDRwfPwZmVKpS1J4glg9gYf5roMZJ6/KX7Sblth+eBAnGOpeARZ
rwt0a/YRYHTz/0vVwiZiS28q4Op5WEFACmbNDIpomkv64LUHlo445Ucy+47iVVbU
-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:09 2024 by rpki-client on console-fra.rpki-client.org