Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/fkZxCslHSNuk5Y4uxf-g-nhaKfQ.roa
File: fkZxCslHSNuk5Y4uxf-g-nhaKfQ.roa (raw, json)
Hash identifier: VXWIuOIg87Xco/RMxXxMudFb+hHQnlpQvPCDV9Zd2ZA=
Subject key identifier: 7E:46:71:0A:C9:47:48:DB:A4:E5:8E:2E:C5:FF:A0:FA:78:5A:29:F4
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01925E578CD993335F5113031D76CA24C9CB
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/fkZxCslHSNuk5Y4uxf-g-nhaKfQ.roa
Signing time: Sat 05 Oct 2024 20:20:48 +0000
ROA not before: Sat 05 Oct 2024 20:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7106
IP address blocks: 45.141.15.0/24 maxlen: 24
93.177.108.0/24 maxlen: 24
93.177.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5e:57:8c:d9:93:33:5f:51:13:03:1d:76:ca:24:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 5 20:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e46710ac94748dba4e58e2ec5ffa0fa785a29f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:bd:0b:67:55:df:e6:5d:1d:1d:3d:3f:35:
64:1b:80:b9:6a:a9:ae:6f:9c:8f:ec:88:fb:e5:13:
e5:31:c2:e1:e9:cf:23:82:90:16:ae:70:34:f2:62:
04:03:e5:1b:2b:88:1f:46:0d:df:3f:61:25:bc:a6:
4d:af:30:85:9a:55:dd:1b:4c:67:1a:eb:f1:eb:30:
dd:20:55:13:f0:41:5d:ca:e7:9d:b4:56:56:bb:7f:
55:e6:09:71:69:06:dd:fe:1f:aa:75:7d:2c:36:61:
a6:68:2b:d3:f3:9d:c6:f6:a7:a1:c2:72:36:21:d2:
d5:62:69:86:3b:44:da:38:1d:4a:52:7b:ee:cd:7d:
9a:7d:9a:f5:38:66:9b:7c:a9:03:5b:aa:6c:93:9e:
33:c0:4d:ff:69:df:4a:46:c1:2a:55:20:16:8b:ab:
2f:ad:11:6d:24:0e:4e:52:45:99:d0:86:59:c3:70:
68:1c:ae:2a:7a:53:ae:1d:fa:1c:d9:27:09:46:97:
ba:9f:55:8c:46:fb:89:c7:d1:79:3c:94:e4:a5:8c:
c4:9d:3f:e1:78:12:ba:63:21:e8:80:cd:95:74:a3:
7a:6e:58:b7:32:b8:fe:50:82:47:db:9b:4e:f6:2e:
45:a5:81:d2:6a:25:a6:8e:d7:46:01:3e:b7:50:a1:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:71:0A:C9:47:48:DB:A4:E5:8E:2E:C5:FF:A0:FA:78:5A:29:F4
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/fkZxCslHSNuk5Y4uxf-g-nhaKfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.15.0/24
93.177.108.0/23
Signature Algorithm: sha256WithRSAEncryption
03:cf:5c:a2:aa:1e:8a:b8:7e:00:a7:bd:18:c9:d0:e3:f5:a5:
42:0d:2d:01:f8:b2:16:d7:5d:cf:27:4f:dd:e8:ad:1d:be:70:
20:9a:10:ac:4d:eb:cb:dc:06:fd:57:de:8e:69:ba:ce:f1:91:
b6:4e:c0:f6:2c:97:62:2d:c9:f5:4b:90:e8:34:e5:d2:dc:f6:
4b:fe:7a:bf:59:24:09:25:ab:01:0b:e3:42:73:c6:e9:ce:af:
57:71:14:23:4b:67:47:d6:a7:92:14:63:6b:5f:4e:a4:c1:81:
1f:2c:38:a3:cb:50:35:d7:5b:88:ac:3c:5c:3b:30:3e:34:19:
18:fe:16:7b:25:37:0d:c6:36:d7:52:a6:15:08:25:df:4f:f4:
ee:cc:95:5f:1b:ab:e0:8a:db:a1:ce:79:ac:10:6a:c0:11:54:
e0:22:01:c1:d7:1e:f4:96:df:4f:eb:5c:e6:c2:f2:ad:2a:0c:
4c:41:f2:54:d0:70:c8:d4:37:ed:63:1a:2f:02:6e:91:12:65:
38:3d:1c:b2:9c:0a:3d:63:e1:cd:23:7a:a2:74:e6:50:63:5e:
ab:f7:5c:a4:35:5f:f3:6c:e5:94:16:c1:15:e0:42:49:74:b2:
e4:80:79:21:53:3a:80:b1:a3:79:22:87:92:fb:ba:c1:f3:f5:
71:d3:10:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJeV4zZkzNfURMDHXbKJMnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjQxMDA1MjAyMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTQ2NzEwYWM5NDc0OGRiYTRlNThlMmVjNWZmYTBmYTc4NWEyOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI+9C2dV3+ZdHR09PzVkG4C5aqmu
b5yP7Ij75RPlMcLh6c8jgpAWrnA08mIEA+UbK4gfRg3fP2ElvKZNrzCFmlXdG0xn
Guvx6zDdIFUT8EFdyuedtFZWu39V5glxaQbd/h+qdX0sNmGmaCvT853G9qehwnI2
IdLVYmmGO0TaOB1KUnvuzX2afZr1OGabfKkDW6psk54zwE3/ad9KRsEqVSAWi6sv
rRFtJA5OUkWZ0IZZw3BoHK4qelOuHfoc2ScJRpe6n1WMRvuJx9F5PJTkpYzEnT/h
eBK6YyHogM2VdKN6bli3Mrj+UIJH25tO9i5FpYHSaiWmjtdGAT63UKEjBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH5GcQrJR0jbpOWOLsX/oPp4Win0MB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvZmtaeENzbEhTTnVrNVk0dXhmLWctbmhhS2ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY0PAwQB
XbFsMA0GCSqGSIb3DQEBCwUAA4IBAQADz1yiqh6KuH4Ap70YydDj9aVCDS0B+LIW
113PJ0/d6K0dvnAgmhCsTevL3Ab9V96OabrO8ZG2TsD2LJdiLcn1S5DoNOXS3PZL
/nq/WSQJJasBC+NCc8bpzq9XcRQjS2dH1qeSFGNrX06kwYEfLDijy1A111uIrDxc
OzA+NBkY/hZ7JTcNxjbXUqYVCCXfT/TuzJVfG6vgituhznmsEGrAEVTgIgHB1x70
lt9P61zmwvKtKgxMQfJU0HDI1DftYxovAm6REmU4PRyynAo9Y+HNI3qidOZQY16r
91ykNV/zbOWUFsEV4EJJdLLkgHkhUzqAsaN5IoeS+7rB8/Vx0xBf
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:10:39 2024 by rpki-client on console-fra.rpki-client.org