Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/FVpdVuEnsDRMHRWVu11uzU70gi0.roa
File: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (raw, json)
Hash identifier: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=
Subject key identifier: 15:5A:5D:56:E1:27:B0:34:4C:1D:15:95:BB:5D:6E:CD:4E:F4:82:2D
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0194266C299879B231873022FAF2545861D4
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/FVpdVuEnsDRMHRWVu11uzU70gi0.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51055
IP address blocks: 64.38.104.0/22 maxlen: 22
92.243.72.0/23 maxlen: 23
185.156.244.0/22 maxlen: 22
2a03:5b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:29:98:79:b2:31:87:30:22:fa:f2:54:58:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155a5d56e127b0344c1d1595bb5d6ecd4ef4822d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:90:cc:c8:58:e0:8e:89:f8:6c:6a:3a:0f:
05:b6:3d:b0:5a:87:4c:b1:8a:c5:bd:d1:93:23:f3:
57:66:c8:0b:7b:cc:33:d5:a4:a2:49:3c:05:0a:27:
77:fa:e0:7a:98:2e:9b:7a:37:be:49:ac:fa:02:55:
3e:d1:47:4b:e4:0a:46:5a:81:2d:4c:6b:bf:b9:b8:
2c:39:23:74:e0:7a:52:f8:91:bb:f8:d6:8f:b6:1b:
d2:a9:db:72:cd:56:70:ba:59:46:3f:e9:d3:a4:83:
04:e3:c1:a7:31:8f:63:f5:b7:f2:ea:8a:66:37:76:
4b:ce:fc:25:4e:4e:4b:b3:ca:0c:8e:82:ae:4c:a1:
7a:32:b6:d6:47:2f:ef:9d:99:fa:23:c8:c7:8e:ac:
49:ae:ee:0f:07:4f:fb:e7:48:51:6a:0c:67:5e:ee:
c3:fa:cc:69:58:be:d5:18:8b:b5:46:ed:01:10:31:
14:0d:7a:15:ba:d5:9b:4b:3c:4f:44:6f:8a:4b:ab:
20:65:e0:b7:b7:81:ec:b7:fd:c5:9d:b4:d3:ac:53:
32:1c:7d:93:a7:6b:d4:9c:57:5a:5d:07:a4:c3:69:
28:51:c3:5b:84:74:ee:ae:5c:98:7b:6a:e0:51:37:
8a:16:a0:eb:c1:d4:a4:98:58:de:af:9c:2f:bd:98:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:5D:56:E1:27:B0:34:4C:1D:15:95:BB:5D:6E:CD:4E:F4:82:2D
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/FVpdVuEnsDRMHRWVu11uzU70gi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.38.104.0/22
92.243.72.0/23
185.156.244.0/22
IPv6:
2a03:5b00::/32
Signature Algorithm: sha256WithRSAEncryption
d0:47:ff:e3:92:89:ec:fb:ca:56:a8:83:5c:67:df:32:92:28:
6e:c3:9d:19:f5:ff:2a:06:da:26:4a:3e:63:a3:00:bc:43:7f:
d6:a1:f2:ba:26:49:87:81:26:08:b5:50:3c:f6:fb:4c:77:58:
0c:46:9f:b4:89:78:58:d0:b3:50:44:73:7c:c0:ed:72:c1:6f:
80:32:db:74:e6:8c:b5:0d:70:b7:d6:0b:f9:08:6d:a8:fa:1b:
af:90:7e:db:88:69:0b:11:fa:d5:af:d7:6f:eb:ab:fc:a8:17:
67:c4:9b:b7:e7:79:d4:24:b6:a0:d1:20:f4:c7:89:22:f6:08:
73:f1:ac:98:52:77:80:e8:dd:20:b5:be:cf:3f:e4:82:d3:56:
8e:58:36:9b:b6:9a:d8:1f:f0:ab:3b:13:88:2c:2d:23:85:10:
3f:f8:4f:01:6b:b4:9e:61:45:ee:f6:e0:ea:b4:29:d6:75:77:
47:f5:82:0d:d1:a0:6e:85:43:f1:5d:32:6c:85:e8:f0:2c:55:
7e:80:94:66:a4:43:f8:05:ac:47:69:de:21:74:9b:ca:06:22:
76:26:e5:40:a0:d3:6c:82:d0:59:5d:e2:5c:36:f5:15:4d:44:
34:64:c0:bf:54:a1:1b:9e:cc:1e:64:b7:32:1d:ee:e5:0c:62:
50:01:8d:1c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQmbCmYebIxhzAi+vJUWGHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWM0MzIyMDgyMTkxYzc5ZTJkODZkYjRlMWJmOWQwNzE4
ZTI3ZTkwHhcNMjUwMTAyMDk1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTVhNWQ1NmUxMjdiMDM0NGMxZDE1OTViYjVkNmVjZDRlZjQ4MjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y6QzMhY4I6J+GxqOg8Ftj2wWodM
sYrFvdGTI/NXZsgLe8wz1aSiSTwFCid3+uB6mC6beje+Saz6AlU+0UdL5ApGWoEt
TGu/ubgsOSN04HpS+JG7+NaPthvSqdtyzVZwullGP+nTpIME48GnMY9j9bfy6opm
N3ZLzvwlTk5Ls8oMjoKuTKF6MrbWRy/vnZn6I8jHjqxJru4PB0/750hRagxnXu7D
+sxpWL7VGIu1Ru0BEDEUDXoVutWbSzxPRG+KS6sgZeC3t4Hst/3FnbTTrFMyHH2T
p2vUnFdaXQekw2koUcNbhHTurlyYe2rgUTeKFqDrwdSkmFjer5wvvZiYTwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBVaXVbhJ7A0TB0Vlbtdbs1O9IItMB8GA1UdIwQY
MBaAFEEcQyIIIZHHni2G204b+dBxjifpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMt
ZjM4MTBiZDcwMzc2LzEvRlZwZFZ1RW5zRFJNSFJXVnUxMXV6VTcwZ2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMtZjM4MTBiZDcwMzc2
LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCQCZoAwQB
XPNIAwQCuZz0MA0EAgACMAcDBQAqA1sAMA0GCSqGSIb3DQEBCwUAA4IBAQDQR//j
kons+8pWqINcZ98ykihuw50Z9f8qBtomSj5jowC8Q3/WofK6JkmHgSYItVA89vtM
d1gMRp+0iXhY0LNQRHN8wO1ywW+AMtt05oy1DXC31gv5CG2o+huvkH7biGkLEfrV
r9dv66v8qBdnxJu353nUJLag0SD0x4ki9ghz8ayYUneA6N0gtb7PP+SC01aOWDab
tprYH/CrOxOILC0jhRA/+E8Ba7SeYUXu9uDqtCnWdXdH9YIN0aBuhUPxXTJshejw
LFV+gJRmpEP4BaxHad4hdJvKBiJ2JuVAoNNsgtBZXeJcNvUVTUQ0ZMC/VKEbnswe
ZLcyHe7lDGJQAY0c
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:25 2025 by rpki-client