Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_fe0xChk4EYGIeYo-jhKGuTcYiU.roa
File: _fe0xChk4EYGIeYo-jhKGuTcYiU.roa (raw, json)
Hash identifier: L6ufk0qmXRvK+7Gl3v+7wJYYzZ3LxNLBs4N0Nbph2c4=
Subject key identifier: FD:F7:B4:C4:28:64:E0:46:06:21:E6:28:FA:38:4A:1A:E4:DC:62:25
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB3A8E412B55820D51866F2A8C684F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_fe0xChk4EYGIeYo-jhKGuTcYiU.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209375
IP address blocks: 89.33.135.0/24 maxlen: 24
193.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3a:8e:41:2b:55:82:0d:51:86:6f:2a:8c:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdf7b4c42864e0460621e628fa384a1ae4dc6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:39:ea:02:b5:b5:25:cc:df:fb:5d:37:8a:
a0:10:e8:43:72:b4:5f:1c:45:f1:50:cb:22:c6:a0:
b5:ad:5f:90:4a:65:22:df:f0:fa:28:3c:d4:1c:9c:
f0:87:3a:70:78:cd:1b:cc:f6:07:b3:83:ce:98:e3:
39:84:fb:6c:96:1e:50:c8:50:33:5a:e5:25:a7:6c:
f0:cf:93:27:a9:96:98:b6:75:b0:a6:02:90:04:78:
48:5c:c7:fe:dc:66:10:27:b1:58:1b:55:ba:fc:67:
a5:0c:9b:7d:7b:85:dd:ee:2e:8c:f9:3c:3a:53:ea:
05:70:82:72:32:9f:06:b7:fa:2e:1c:70:fb:58:fd:
48:28:67:1d:52:a9:4e:46:a1:33:1b:33:0d:2f:00:
65:6d:f3:aa:76:47:ae:eb:4f:22:40:7d:64:62:bf:
e0:ea:09:9a:07:d1:55:9a:3a:2a:6f:fd:d5:49:b1:
7a:ca:67:1b:bf:79:27:3b:cd:55:d1:42:0c:35:54:
0d:f3:36:f3:57:ef:87:54:07:b7:c0:52:62:80:f6:
1a:19:ac:9c:4f:7e:c6:15:e5:37:c8:e9:a6:86:67:
72:ac:dd:8e:dd:7e:5f:18:ce:ec:a2:37:ec:12:5c:
de:ea:9f:e2:e5:fa:98:c1:fa:92:f3:7d:32:3f:b6:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:B4:C4:28:64:E0:46:06:21:E6:28:FA:38:4A:1A:E4:DC:62:25
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_fe0xChk4EYGIeYo-jhKGuTcYiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.135.0/24
193.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d8:53:98:2d:f9:e9:50:63:d6:6f:d4:3f:e3:68:e4:78:c9:
82:43:c4:8b:5b:14:4a:f6:7e:11:01:23:e1:b0:37:f1:57:55:
f1:b3:30:31:ba:4f:11:cc:8f:94:1f:a7:7f:18:15:08:2c:0e:
da:a3:cd:38:25:29:f2:36:99:02:ee:74:2b:e8:15:94:8c:c9:
06:4d:79:db:73:61:03:49:a1:d4:27:fe:ee:6c:c9:91:d8:a0:
0e:c0:a9:1b:c9:b5:8c:bc:6b:4e:68:7f:93:91:ce:35:a9:84:
9f:7d:63:6b:eb:ba:08:0c:b2:9e:9e:7b:01:0a:f1:89:fc:9f:
46:ea:9a:77:29:be:9e:a7:20:17:24:87:84:1c:1f:04:cf:d7:
76:65:c0:a6:47:03:05:b2:72:a5:a5:52:87:38:95:6b:4f:14:
a0:5f:81:6a:e2:23:11:d0:11:3e:5b:fe:86:f4:b9:d1:00:03:
be:a1:f6:97:db:ec:a5:b0:df:a0:18:c8:cf:c1:e5:3c:de:2f:
13:26:51:96:1a:19:dd:59:d3:4d:4f:0f:2e:31:50:d4:a5:e5:
85:6e:88:57:75:63:d1:d1:a9:92:59:19:56:3b:f2:1a:0d:b4:
e2:c8:7f:58:e7:36:9b:95:49:9b:e8:4b:20:4c:fc:a2:e9:27:
37:f0:11:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2zqOQStVgg1Rhm8qjGhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwMTAxMDIyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGY3YjRjNDI4NjRlMDQ2MDYyMWU2MjhmYTM4NGExYWU0ZGM2MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ056gK1tSXM3/tdN4qgEOhDcrRf
HEXxUMsixqC1rV+QSmUi3/D6KDzUHJzwhzpweM0bzPYHs4POmOM5hPtslh5QyFAz
WuUlp2zwz5MnqZaYtnWwpgKQBHhIXMf+3GYQJ7FYG1W6/GelDJt9e4Xd7i6M+Tw6
U+oFcIJyMp8Gt/ouHHD7WP1IKGcdUqlORqEzGzMNLwBlbfOqdkeu608iQH1kYr/g
6gmaB9FVmjoqb/3VSbF6ymcbv3knO81V0UIMNVQN8zbzV++HVAe3wFJigPYaGayc
T37GFeU3yOmmhmdyrN2O3X5fGM7sojfsElze6p/i5fqYwfqS830yP7bN8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP33tMQoZOBGBiHmKPo4Shrk3GIlMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvX2ZlMHhDaGs0RVlHSWVZby1qaEtHdVRjWWlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSGHAwQA
wamvMA0GCSqGSIb3DQEBCwUAA4IBAQCO2FOYLfnpUGPWb9Q/42jkeMmCQ8SLWxRK
9n4RASPhsDfxV1XxszAxuk8RzI+UH6d/GBUILA7ao804JSnyNpkC7nQr6BWUjMkG
TXnbc2EDSaHUJ/7ubMmR2KAOwKkbybWMvGtOaH+Tkc41qYSffWNr67oIDLKennsB
CvGJ/J9G6pp3Kb6epyAXJIeEHB8Ez9d2ZcCmRwMFsnKlpVKHOJVrTxSgX4Fq4iMR
0BE+W/6G9LnRAAO+ofaX2+ylsN+gGMjPweU83i8TJlGWGhndWdNNTw8uMVDUpeWF
bohXdWPR0amSWRlWO/IaDbTiyH9Y5zablUmb6EsgTPyi6Sc38BGJ
-----END CERTIFICATE-----
Generated at Sat May 4 08:46:23 2024 by rpki-client on console-fra.rpki-client.org