Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/fqY0S0KoL6WfLkmmSRzp6HTD9Lk.roa
File: fqY0S0KoL6WfLkmmSRzp6HTD9Lk.roa (raw, json)
Hash identifier: 9MEbRg3kVGrIgZjIiWNIT72ahNPk1/TouSsH/DlsMiM=
Subject key identifier: 7E:A6:34:4B:42:A8:2F:A5:9F:2E:49:A6:49:1C:E9:E8:74:C3:F4:B9
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 018DC1A488F74BD213C6795663D70EBCE715
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/fqY0S0KoL6WfLkmmSRzp6HTD9Lk.roa
Signing time: Mon 19 Feb 2024 13:53:22 +0000
ROA not before: Mon 19 Feb 2024 13:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216383
IP address blocks: 91.132.165.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:a4:88:f7:4b:d2:13:c6:79:56:63:d7:0e:bc:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: Feb 19 13:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ea6344b42a82fa59f2e49a6491ce9e874c3f4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:03:3b:c2:e1:c0:3f:b0:ec:11:97:7d:00:
dc:f6:8c:47:f8:6a:ee:0b:a8:1f:26:b8:c3:29:a9:
40:c3:63:cc:c4:df:ce:bd:b2:b8:da:37:ba:d3:44:
94:05:db:ca:af:4a:2a:3b:a8:b4:96:61:fc:b8:72:
ac:f8:76:ef:cd:35:9c:7a:3e:d9:60:03:55:4e:cc:
d1:39:09:f1:3b:a6:1e:2d:ff:ac:7c:39:54:bb:95:
06:74:9c:be:25:03:2a:25:d3:be:ff:19:93:99:a6:
de:99:68:8c:30:1a:a7:c8:ff:02:70:3e:77:d8:2a:
57:d0:e9:cb:21:c8:a3:8f:95:c8:51:3c:d1:65:a8:
cd:34:2c:d5:c8:e9:71:0b:f4:4d:95:16:40:4f:3d:
ec:f3:63:a0:28:3f:af:7b:37:14:df:36:88:4c:c1:
60:3a:eb:39:23:f5:16:38:b7:02:f5:19:f4:0a:94:
b9:ae:d4:55:e7:22:d2:71:c3:a0:56:c5:7a:c8:bd:
a9:84:9b:14:9b:8a:19:b3:0d:96:2e:e5:3d:b7:4b:
4d:1e:e8:5a:fc:81:36:50:35:0a:9c:83:ed:ad:30:
c1:af:2d:5a:1a:6e:65:98:75:fe:e4:08:4f:16:b2:
44:2f:6e:df:1e:98:35:75:a2:af:a4:a1:49:7e:13:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:34:4B:42:A8:2F:A5:9F:2E:49:A6:49:1C:E9:E8:74:C3:F4:B9
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/fqY0S0KoL6WfLkmmSRzp6HTD9Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.165.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:a9:94:ed:67:41:21:cf:21:be:e1:28:36:99:bf:1e:12:
ee:ef:b8:b2:e4:35:e5:ea:59:0b:c4:d0:72:96:24:69:a4:46:
43:2b:15:3c:87:7b:c3:20:99:27:c3:8b:18:9b:67:fe:b5:33:
bc:54:ae:13:38:9e:1d:f5:62:1a:8b:04:68:b5:59:16:58:6b:
23:63:02:4b:4e:70:4a:7a:bd:58:fe:57:e3:8a:8c:0f:82:23:
45:7e:ae:8c:31:f5:e4:51:06:cf:1b:86:e5:59:8c:c1:fc:1f:
dd:9e:25:ba:c3:51:8a:ca:c1:28:9c:df:7a:36:45:8a:8e:77:
f2:ee:55:1f:a5:eb:65:0d:1f:2c:36:db:f9:14:8e:65:b9:b1:
75:90:c7:ae:b7:b6:2e:af:56:af:7b:d6:f3:c1:59:0a:f4:47:
09:81:4e:1a:68:48:a6:c0:01:78:8a:d5:85:cc:db:57:f1:cf:
95:a8:b8:57:b7:9f:ee:28:77:c7:66:47:2e:0d:0c:4a:bb:f1:
02:c0:68:f1:c7:b5:d9:b0:a3:ff:ff:9c:23:62:74:28:9d:4f:
c6:89:06:0d:0d:2b:1a:42:6c:e6:c6:8e:c5:bb:49:2f:7c:a8:
7a:9a:4a:54:0f:10:73:e4:aa:f2:b6:90:d5:1b:e0:fc:22:e6:
39:85:8f:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3BpIj3S9ITxnlWY9cOvOcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDUwYzYzNzY2NTVlZWMxZGQyZGE0YmQyMWQ1ZjEwNGE5
NmQ5MDQwHhcNMjQwMjE5MTM1MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWE2MzQ0YjQyYTgyZmE1OWYyZTQ5YTY0OTFjZTllODc0YzNmNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+QDO8LhwD+w7BGXfQDc9oxH+Gru
C6gfJrjDKalAw2PMxN/OvbK42je600SUBdvKr0oqO6i0lmH8uHKs+HbvzTWcej7Z
YANVTszROQnxO6YeLf+sfDlUu5UGdJy+JQMqJdO+/xmTmabemWiMMBqnyP8CcD53
2CpX0OnLIcijj5XIUTzRZajNNCzVyOlxC/RNlRZATz3s82OgKD+vezcU3zaITMFg
Ous5I/UWOLcC9Rn0CpS5rtRV5yLSccOgVsV6yL2phJsUm4oZsw2WLuU9t0tNHuha
/IE2UDUKnIPtrTDBry1aGm5lmHX+5AhPFrJEL27fHpg1daKvpKFJfhMOzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6mNEtCqC+lny5Jpkkc6eh0w/S5MB8GA1UdIwQY
MBaAFPVFDGN2ZV7sHdLaS9IdXxBKltkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgt
NmQxZjYwNTQzZTljLzEvZnFZMFMwS29MNldmTGttbVNSenA2SFREOUxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgtNmQxZjYwNTQzZTlj
LzEvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4SlMA0G
CSqGSIb3DQEBCwUAA4IBAQCDlKmU7WdBIc8hvuEoNpm/HhLu77iy5DXl6lkLxNBy
liRppEZDKxU8h3vDIJknw4sYm2f+tTO8VK4TOJ4d9WIaiwRotVkWWGsjYwJLTnBK
er1Y/lfjiowPgiNFfq6MMfXkUQbPG4blWYzB/B/dniW6w1GKysEonN96NkWKjnfy
7lUfpetlDR8sNtv5FI5lubF1kMeut7Yur1ave9bzwVkK9EcJgU4aaEimwAF4itWF
zNtX8c+VqLhXt5/uKHfHZkcuDQxKu/ECwGjxx7XZsKP//5wjYnQonU/GiQYNDSsa
Qmzmxo7Fu0kvfKh6mkpUDxBz5KrytpDVG+D8IuY5hY9i
-----END CERTIFICATE-----
Generated at Fri May 24 09:40:36 2024 by rpki-client on console-fra.rpki-client.org