Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/fF7tTJPl_mJG9Y-lGolCWgWd-CA.roa
File: fF7tTJPl_mJG9Y-lGolCWgWd-CA.roa (raw, json)
Hash identifier: FC0NWwOfgJoyhD+jfXwMEttQusjdD7xlYjlM0KJrMZU=
Subject key identifier: 7C:5E:ED:4C:93:E5:FE:62:46:F5:8F:A5:1A:89:42:5A:05:9D:F8:20
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 018D459B915A2594C953FF4E9F2C7DE41D69
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/fF7tTJPl_mJG9Y-lGolCWgWd-CA.roa
Signing time: Fri 26 Jan 2024 11:50:39 +0000
ROA not before: Fri 26 Jan 2024 11:50:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.35.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:9b:91:5a:25:94:c9:53:ff:4e:9f:2c:7d:e4:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jan 26 11:50:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c5eed4c93e5fe6246f58fa51a89425a059df820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:1e:fc:5a:2f:11:a7:1a:41:ca:de:7e:19:
96:9d:68:8f:d9:32:b3:84:58:2f:34:f2:64:83:1b:
34:eb:a9:b3:2a:a6:c9:14:3c:2e:f2:34:7d:33:1d:
ec:53:e6:2d:df:87:ed:7d:53:f8:99:31:08:9d:5c:
17:a7:05:5a:f7:da:1a:a2:0b:36:53:09:2d:d7:d2:
79:6c:40:63:cd:cd:14:34:29:78:3f:0a:bf:2d:70:
e6:be:36:a1:7e:0a:21:0a:f3:7d:75:88:ee:2e:03:
6e:4e:28:f0:e1:54:f3:17:80:bb:e7:6b:88:89:a9:
66:40:f4:b9:c6:9c:6f:dd:44:2b:47:0e:e2:d2:2c:
0f:df:ca:06:15:b2:4d:19:43:b5:f3:96:01:93:8d:
83:84:bf:de:38:d6:0f:b1:2c:30:77:52:76:ef:cd:
ad:5d:e8:ca:cb:3c:ed:9f:af:c5:43:fc:8a:d4:b0:
81:3a:86:44:ae:1e:38:56:04:a5:c5:8a:49:d4:0b:
cd:dc:a2:c5:92:5c:bc:db:43:6e:d9:c8:96:9f:be:
d1:d8:ae:e5:08:37:8c:06:b3:52:84:1c:50:e5:a7:
da:2d:f7:4a:06:7a:c2:62:78:9c:47:74:bd:14:df:
d1:5f:4c:cb:69:08:0b:1f:32:7c:a8:ba:ec:3f:81:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5E:ED:4C:93:E5:FE:62:46:F5:8F:A5:1A:89:42:5A:05:9D:F8:20
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/fF7tTJPl_mJG9Y-lGolCWgWd-CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.157.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:ee:08:51:8d:54:57:06:c7:6d:f7:22:93:26:91:9f:2a:
78:d6:39:4d:5d:04:c6:b4:b6:50:05:ad:56:37:95:66:d2:9a:
78:06:b6:38:4f:7f:35:5e:80:fb:47:72:9f:54:63:90:aa:1a:
2c:2d:f1:fd:0d:7d:80:27:9d:4a:e4:79:9e:d1:37:df:39:ec:
49:6f:96:0d:4e:f0:fb:7d:d5:49:2f:97:92:53:61:c0:0e:00:
4a:d2:e1:9b:34:cd:9e:12:3d:7f:d2:6a:cf:6d:5f:ed:19:88:
28:09:f6:94:6c:a9:9e:90:04:ac:e0:2a:57:fe:a5:55:f0:47:
c5:6f:50:5f:af:df:3c:61:b8:07:ff:26:fa:54:82:89:59:7c:
9d:4a:10:63:c1:9d:6d:ca:9a:1a:28:75:8b:4c:40:16:18:49:
ce:d9:07:8f:25:f4:6a:55:fa:6e:68:8f:ca:89:60:d8:15:a6:
67:7d:8a:df:d6:3c:51:2f:57:9d:05:79:7f:a5:99:fd:33:f5:
d0:87:e8:e2:0c:6f:e0:ed:18:72:48:b5:d2:f3:fc:3c:c3:39:
f6:82:9c:39:c7:1a:91:7f:86:7f:5c:5d:a0:97:2c:9a:b5:1e:
42:4e:6c:6d:36:76:3e:6e:2e:02:a0:d6:f2:33:12:23:1c:54:
57:c8:47:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1Fm5FaJZTJU/9Onyx95B1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Mzg5NDdkZGI4OTJmNWYzYTQ4YTY5YWY5N2E4ZmI1MjEw
M2EwZDYwHhcNMjQwMTI2MTE1MDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzVlZWQ0YzkzZTVmZTYyNDZmNThmYTUxYTg5NDI1YTA1OWRmODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZIe/FovEacaQcrefhmWnWiP2TKz
hFgvNPJkgxs066mzKqbJFDwu8jR9Mx3sU+Yt34ftfVP4mTEInVwXpwVa99oaogs2
Uwkt19J5bEBjzc0UNCl4Pwq/LXDmvjahfgohCvN9dYjuLgNuTijw4VTzF4C752uI
ialmQPS5xpxv3UQrRw7i0iwP38oGFbJNGUO185YBk42DhL/eONYPsSwwd1J2782t
XejKyzztn6/FQ/yK1LCBOoZErh44VgSlxYpJ1AvN3KLFkly820Nu2ciWn77R2K7l
CDeMBrNShBxQ5afaLfdKBnrCYnicR3S9FN/RX0zLaQgLHzJ8qLrsP4HzfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxe7UyT5f5iRvWPpRqJQloFnfggMB8GA1UdIwQY
MBaAFPY4lH3biS9fOkimmvl6j7UhA6DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMt
NjFkMjY2MDNjMzdjLzEvZkY3dFRKUGxfbUpHOVktbEdvbENXZ1dkLUNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMtNjFkMjY2MDNjMzdj
LzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSOdMA0G
CSqGSIb3DQEBCwUAA4IBAQBky+4IUY1UVwbHbfcikyaRnyp41jlNXQTGtLZQBa1W
N5Vm0pp4BrY4T381XoD7R3KfVGOQqhosLfH9DX2AJ51K5Hme0TffOexJb5YNTvD7
fdVJL5eSU2HADgBK0uGbNM2eEj1/0mrPbV/tGYgoCfaUbKmekASs4CpX/qVV8EfF
b1Bfr988YbgH/yb6VIKJWXydShBjwZ1typoaKHWLTEAWGEnO2QePJfRqVfpuaI/K
iWDYFaZnfYrf1jxRL1edBXl/pZn9M/XQh+jiDG/g7RhySLXS8/w8wzn2gpw5xxqR
f4Z/XF2glyyatR5CTmxtNnY+bi4CoNbyMxIjHFRXyEfQ
-----END CERTIFICATE-----
Generated at Wed May 1 22:50:23 2024 by rpki-client on console-fra.rpki-client.org