Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/FJ308QhbiMBDZ0Yk_8dSFWdxPW4.roa
File: FJ308QhbiMBDZ0Yk_8dSFWdxPW4.roa (raw, json)
Hash identifier: /xntKNrRhwKyA2ZXe71nuRZ3YKvOI4feREjsM86t/2Y=
Subject key identifier: 14:9D:F4:F1:08:5B:88:C0:43:67:46:24:FF:C7:52:15:67:71:3D:6E
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 01923DF1CA5ED9FC1E1262508A4711F2A4AA
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/FJ308QhbiMBDZ0Yk_8dSFWdxPW4.roa
Signing time: Sun 29 Sep 2024 13:21:48 +0000
ROA not before: Sun 29 Sep 2024 13:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 77.93.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3d:f1:ca:5e:d9:fc:1e:12:62:50:8a:47:11:f2:a4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Sep 29 13:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=149df4f1085b88c043674624ffc7521567713d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:73:33:23:84:ba:62:39:e7:ce:c6:ec:fe:
68:eb:2d:68:14:37:38:1e:8e:92:a4:56:06:73:39:
28:e4:8d:0b:86:e1:ec:0f:d0:0b:9b:52:80:cb:97:
df:d0:ee:5d:3f:3c:64:61:ce:14:0c:54:1d:0d:c4:
e4:4b:9e:b2:e0:e7:31:5c:e2:5b:c2:47:31:90:8a:
5a:9a:c8:1e:dc:7b:c6:75:5a:55:75:d6:fa:4c:2f:
96:3c:a2:ad:ab:75:0f:9b:24:df:fe:b3:9e:c7:43:
ca:e1:17:e1:aa:24:4f:bc:0a:e2:c4:82:24:8a:5b:
d3:00:0d:4e:71:d6:03:20:25:9d:1d:b2:c6:15:1d:
d6:68:99:4e:38:20:cc:bd:96:33:78:07:00:21:b3:
ae:72:b5:bc:06:2b:52:a8:da:92:22:ac:2f:a2:fd:
ff:e5:68:ce:b9:f6:9b:16:af:e5:cd:aa:43:85:6b:
39:b0:45:c2:22:64:e4:94:81:b2:5b:ce:40:08:28:
dd:93:0f:9f:a3:f3:57:3b:ec:94:5b:ac:b9:6b:f6:
a5:42:bb:32:01:04:ef:e8:64:fe:12:2a:84:11:09:
12:e1:59:06:c2:6b:41:c7:a1:c4:1c:51:92:ad:05:
59:f8:07:28:60:98:22:5a:17:2d:f8:c0:79:87:fe:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:F4:F1:08:5B:88:C0:43:67:46:24:FF:C7:52:15:67:71:3D:6E
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/FJ308QhbiMBDZ0Yk_8dSFWdxPW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:5b:30:4e:17:10:49:fd:34:a5:7a:21:a0:88:98:01:bf:0b:
14:21:ed:34:81:07:c9:76:d5:84:2e:5d:72:9f:c2:f5:18:4b:
40:0c:86:3a:d1:52:a1:f8:e0:a7:c4:d8:c7:bf:f8:f1:d3:40:
d4:ec:1b:4e:4a:01:fd:ba:ab:4d:16:63:0a:3d:36:cc:2a:70:
af:7f:8c:49:2b:9a:d4:c9:76:a6:88:4b:6e:3e:0b:16:f0:ec:
4a:4c:65:56:97:b8:67:c3:40:f1:8c:74:7f:9c:7a:2f:8e:da:
e3:14:19:b9:90:bf:15:cd:96:36:24:d5:f4:f5:95:ea:94:fe:
e7:e9:6f:23:5e:b2:90:60:42:d3:62:6d:f8:d6:4b:20:48:84:
c6:cc:0a:01:65:4f:a5:c9:6b:da:3d:aa:0d:cc:80:1c:a8:53:
07:91:c6:a4:3f:e6:c7:86:9a:34:67:1a:8e:22:1e:18:51:06:
e5:f1:31:d0:40:04:8b:b4:9c:6f:ab:36:24:a5:27:85:47:0e:
78:79:9a:e5:06:aa:24:0f:43:1d:a4:90:c3:79:76:bd:98:77:
80:73:e2:b1:da:8a:df:a1:a8:ec:1c:88:b0:98:c5:3e:94:05:
06:19:ea:d9:5a:b5:c0:f8:88:db:53:8c:04:87:71:fa:60:a5:
f3:76:26:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZI98cpe2fweEmJQikcR8qSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEzNDE3ZmJlMjVjMmU0NjdjMTg0ODVjMTgxYTc3NzZm
OTZmZjQwHhcNMjQwOTI5MTMyMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDlkZjRmMTA4NWI4OGMwNDM2NzQ2MjRmZmM3NTIxNTY3NzEzZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQlzMyOEumI5587G7P5o6y1oFDc4
Ho6SpFYGczko5I0LhuHsD9ALm1KAy5ff0O5dPzxkYc4UDFQdDcTkS56y4OcxXOJb
wkcxkIpamsge3HvGdVpVddb6TC+WPKKtq3UPmyTf/rOex0PK4RfhqiRPvArixIIk
ilvTAA1OcdYDICWdHbLGFR3WaJlOOCDMvZYzeAcAIbOucrW8BitSqNqSIqwvov3/
5WjOufabFq/lzapDhWs5sEXCImTklIGyW85ACCjdkw+fo/NXO+yUW6y5a/alQrsy
AQTv6GT+EiqEEQkS4VkGwmtBx6HEHFGSrQVZ+AcoYJgiWhct+MB5h/7KAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSd9PEIW4jAQ2dGJP/HUhVncT1uMB8GA1UdIwQY
MBaAFIpaNBf74lwuRnwYSFwYGnd2+W/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYt
ZDdhYmNkMGVmNjRhLzEvRkozMDhRaGJpTUJEWjBZa184ZFNGV2R4UFc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YzZlMDctNjkzZi00NmNlLTg2NDYtZDdhYmNkMGVmNjRh
LzEvaWxvMEZfdmlYQzVHZkJoSVhCZ2FkM2I1Yl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTV2KMA0G
CSqGSIb3DQEBCwUAA4IBAQAqWzBOFxBJ/TSleiGgiJgBvwsUIe00gQfJdtWELl1y
n8L1GEtADIY60VKh+OCnxNjHv/jx00DU7BtOSgH9uqtNFmMKPTbMKnCvf4xJK5rU
yXamiEtuPgsW8OxKTGVWl7hnw0DxjHR/nHovjtrjFBm5kL8VzZY2JNX09ZXqlP7n
6W8jXrKQYELTYm341ksgSITGzAoBZU+lyWvaPaoNzIAcqFMHkcakP+bHhpo0ZxqO
Ih4YUQbl8THQQASLtJxvqzYkpSeFRw54eZrlBqokD0MdpJDDeXa9mHeAc+Kx2orf
oajsHIiwmMU+lAUGGerZWrXA+IjbU4wEh3H6YKXzdiZw
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:29:56 2024 by rpki-client on console-fra.rpki-client.org