Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/f28TCHkGl7rkIny32uMHBjB25h8.roa
File: f28TCHkGl7rkIny32uMHBjB25h8.roa (raw, json)
Hash identifier: PN9FBzsqIGCVYmyuW944DVdpTPp6ivNFIwY0HT8dliw=
Subject key identifier: 7F:6F:13:08:79:06:97:BA:E4:22:7C:B7:DA:E3:07:06:30:76:E6:1F
Certificate issuer: /CN=54fb44eecad8d07f84ed34e0a22b671e70f16ae0
Certificate serial: 018CCA2A2C4CF981E00A723E4987323121AF
Authority key identifier: 54:FB:44:EE:CA:D8:D0:7F:84:ED:34:E0:A2:2B:67:1E:70:F1:6A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPtE7srY0H-E7TTgoitnHnDxauA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/f28TCHkGl7rkIny32uMHBjB25h8.roa
Signing time: Tue 02 Jan 2024 12:33:30 +0000
ROA not before: Tue 02 Jan 2024 12:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8530
IP address blocks: 185.159.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPtE7srY0H-E7TTgoitnHnDxauA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2c:4c:f9:81:e0:0a:72:3e:49:87:32:31:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54fb44eecad8d07f84ed34e0a22b671e70f16ae0
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f6f1308790697bae4227cb7dae307063076e61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:6a:f3:39:88:b7:a1:1c:5d:be:59:1f:4c:
2e:7b:cd:05:94:e9:39:89:bc:72:7a:65:b7:fb:42:
54:2c:4b:11:dc:81:46:ab:61:d8:97:25:8f:75:9e:
a6:83:3f:07:ed:d4:5c:f0:c4:29:24:2e:21:c6:7c:
21:0e:71:b3:de:d3:1e:74:56:ee:9f:88:6a:d3:65:
90:7e:b8:47:5f:5b:b3:10:63:4a:4f:0f:1b:3b:46:
f2:e5:cc:8d:72:9f:43:4c:87:b7:6d:5f:40:7c:72:
6a:9e:75:5a:bb:f9:7d:e0:0e:a1:d7:ee:96:29:cc:
89:66:0b:81:16:d4:97:fa:6c:fc:2d:c0:18:9b:91:
b9:54:9d:cc:9a:bc:23:25:d6:fa:2d:cd:47:5b:41:
28:96:2f:0f:e2:a4:d7:03:e1:07:ef:1f:5a:09:a7:
4f:c5:0b:2f:0e:f8:15:c5:87:12:81:7b:d9:ed:ca:
d6:a3:f8:1d:95:4b:ca:b5:d2:b9:5f:de:65:f7:f4:
76:55:63:4b:39:5a:01:ae:5b:36:a1:1f:0d:34:15:
4d:fc:57:09:e6:32:52:c4:05:2b:84:6c:96:21:9c:
c5:68:c6:36:b6:1f:55:a1:76:43:e8:04:98:92:dc:
5d:de:ca:76:51:18:5a:09:b0:86:19:bb:bd:65:b3:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:13:08:79:06:97:BA:E4:22:7C:B7:DA:E3:07:06:30:76:E6:1F
X509v3 Authority Key Identifier:
keyid:54:FB:44:EE:CA:D8:D0:7F:84:ED:34:E0:A2:2B:67:1E:70:F1:6A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPtE7srY0H-E7TTgoitnHnDxauA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/f28TCHkGl7rkIny32uMHBjB25h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bcc899-7a55-4c5c-a9ed-e5e02ef15126/1/VPtE7srY0H-E7TTgoitnHnDxauA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.91.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c4:15:41:5c:fc:03:63:f9:b1:b7:0e:b1:99:be:67:0c:05:
04:b0:87:2f:aa:f1:3e:08:34:ac:8f:f9:c7:25:15:be:89:b6:
a2:dc:3a:df:cc:d5:4b:81:85:0a:54:df:3d:61:39:23:83:ee:
a6:c1:ae:03:a8:ba:3b:3b:ca:d5:51:65:cc:c5:f3:e3:09:b7:
64:a5:c8:9f:2c:7c:77:2f:a0:15:ad:cf:14:5a:e3:1b:52:26:
18:0c:94:fa:53:49:1d:52:cf:df:37:09:3a:43:46:b7:0d:b8:
3c:10:39:a5:06:37:54:74:a9:ea:c3:53:5d:b8:3e:93:ea:3c:
77:34:0d:0e:a8:02:cb:99:f5:60:17:53:17:d9:2c:7b:51:2a:
94:6f:96:21:53:a4:72:55:e2:e0:83:9e:de:a7:28:92:9b:13:
c7:fa:52:96:71:45:71:6a:95:8a:67:00:e8:da:92:92:03:a0:
39:67:16:87:b6:48:7c:3e:d6:36:2e:44:59:47:45:0a:84:1d:
07:00:41:96:a6:69:2c:80:b8:a8:1f:55:62:cf:37:04:04:c1:
fd:14:b2:7e:34:18:5e:b2:b5:b4:81:21:a0:c3:f7:ba:d1:af:
60:77:16:9f:b3:11:86:22:85:26:dd:37:d3:69:ff:09:b4:39:
4c:08:e2:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKixM+YHgCnI+SYcyMSGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZmI0NGVlY2FkOGQwN2Y4NGVkMzRlMGEyMmI2NzFlNzBm
MTZhZTAwHhcNMjQwMTAyMTIzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjZmMTMwODc5MDY5N2JhZTQyMjdjYjdkYWUzMDcwNjMwNzZlNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn9q8zmIt6EcXb5ZH0wue80FlOk5
ibxyemW3+0JULEsR3IFGq2HYlyWPdZ6mgz8H7dRc8MQpJC4hxnwhDnGz3tMedFbu
n4hq02WQfrhHX1uzEGNKTw8bO0by5cyNcp9DTIe3bV9AfHJqnnVau/l94A6h1+6W
KcyJZguBFtSX+mz8LcAYm5G5VJ3MmrwjJdb6Lc1HW0Eoli8P4qTXA+EH7x9aCadP
xQsvDvgVxYcSgXvZ7crWo/gdlUvKtdK5X95l9/R2VWNLOVoBrls2oR8NNBVN/FcJ
5jJSxAUrhGyWIZzFaMY2th9VoXZD6ASYktxd3sp2URhaCbCGGbu9ZbNniwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9vEwh5Bpe65CJ8t9rjBwYwduYfMB8GA1UdIwQY
MBaAFFT7RO7K2NB/hO004KIrZx5w8WrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlB0RTdzclkwSC1FN1RUZ29pdG5IbkR4YXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iY2M4OTktN2E1NS00YzVjLWE5ZWQt
ZTVlMDJlZjE1MTI2LzEvZjI4VENIa0dsN3JrSW55MzJ1TUhCakIyNWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iY2M4OTktN2E1NS00YzVjLWE5ZWQtZTVlMDJlZjE1MTI2
LzEvVlB0RTdzclkwSC1FN1RUZ29pdG5IbkR4YXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ9bMA0G
CSqGSIb3DQEBCwUAA4IBAQBmxBVBXPwDY/mxtw6xmb5nDAUEsIcvqvE+CDSsj/nH
JRW+ibai3DrfzNVLgYUKVN89YTkjg+6mwa4DqLo7O8rVUWXMxfPjCbdkpcifLHx3
L6AVrc8UWuMbUiYYDJT6U0kdUs/fNwk6Q0a3Dbg8EDmlBjdUdKnqw1NduD6T6jx3
NA0OqALLmfVgF1MX2Sx7USqUb5YhU6RyVeLgg57epyiSmxPH+lKWcUVxapWKZwDo
2pKSA6A5ZxaHtkh8PtY2LkRZR0UKhB0HAEGWpmksgLioH1VizzcEBMH9FLJ+NBhe
srW0gSGgw/e60a9gdxafsxGGIoUm3TfTaf8JtDlMCOLX
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:43:45 2024 by rpki-client on console-fra.rpki-client.org