Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fwD56SZ2Cn77w41L2gP4PimvJSY.roa
File: fwD56SZ2Cn77w41L2gP4PimvJSY.roa (raw, json)
Hash identifier: sftPiWsQQpx9iLezUU54SBg8l8CZewR1og0agSTgVzc=
Subject key identifier: 7F:00:F9:E9:26:76:0A:7E:FB:C3:8D:4B:DA:03:F8:3E:29:AF:25:26
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018DF5EDF326F9EA208EAFF4BB7A5D410D21
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fwD56SZ2Cn77w41L2gP4PimvJSY.roa
Signing time: Thu 29 Feb 2024 17:33:48 +0000
ROA not before: Thu 29 Feb 2024 17:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.108.0/22 maxlen: 24
88.216.60.0/22 maxlen: 24
88.216.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:ed:f3:26:f9:ea:20:8e:af:f4:bb:7a:5d:41:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 29 17:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f00f9e926760a7efbc38d4bda03f83e29af2526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:89:ef:70:0d:2a:b8:63:35:4a:cb:19:91:
dc:8d:7a:71:dc:0f:74:e1:91:41:92:4f:fa:1b:07:
34:16:a1:0a:fe:29:06:5f:aa:d0:15:1d:d7:aa:a6:
01:fc:c9:ad:58:74:88:31:26:14:ac:80:3b:d2:9e:
2e:fb:fa:6c:3f:3b:ec:31:d0:9b:8b:60:7d:58:06:
37:b7:a4:5f:74:56:8d:e3:6a:cb:a7:38:7f:f3:51:
c5:32:75:8c:ee:1d:c3:2e:9c:7f:40:a0:c5:87:38:
01:b8:95:aa:4c:3a:9a:89:0c:08:98:a7:b6:18:77:
5b:9d:f3:67:bd:f0:03:96:7d:85:6e:1a:25:21:02:
cd:0f:0e:8e:7a:30:d4:31:fa:72:7e:97:4a:06:40:
37:b1:d5:fc:2b:ff:d9:1c:24:c9:04:ab:12:57:12:
c1:9e:96:37:61:40:18:ab:84:67:da:48:4d:95:70:
c3:24:80:dd:a4:29:02:6f:93:c9:54:c1:b0:1f:9c:
65:0e:b1:19:ba:64:b7:69:ef:f0:f5:2e:58:fd:b9:
4c:e3:4e:67:8a:b5:e6:79:a9:35:c5:77:1a:26:5c:
8e:33:3b:81:7e:e0:c3:55:6a:09:3c:5c:8a:89:29:
5c:e4:35:08:cd:42:ca:98:ed:b5:a1:b5:25:1c:34:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:00:F9:E9:26:76:0A:7E:FB:C3:8D:4B:DA:03:F8:3E:29:AF:25:26
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fwD56SZ2Cn77w41L2gP4PimvJSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.108.0/22
88.216.60.0/22
88.216.224.0/22
Signature Algorithm: sha256WithRSAEncryption
96:01:83:12:72:92:86:00:d5:c5:b9:4b:62:27:59:e3:58:e7:
ec:fb:4f:bc:17:43:f7:9d:7e:e6:c2:cd:4a:92:74:41:4c:5f:
43:b5:3f:1b:ac:d1:66:0c:8c:05:6a:7b:02:24:38:6d:cd:e6:
68:d1:3e:5e:b3:2a:6c:f6:47:83:80:bc:6c:74:3e:66:98:c1:
c9:16:53:49:d0:2b:3c:d5:5e:94:6b:7b:e4:8e:7a:bb:e2:06:
f3:c1:60:55:d8:f8:3a:98:59:5d:ab:69:79:3f:68:59:1e:2e:
aa:8d:52:a2:7e:0d:2e:a6:5a:f0:0e:6b:67:cf:ca:27:5f:2d:
bd:ec:51:af:29:02:a2:20:0a:73:27:a5:f3:8c:40:2b:3f:f6:
b1:70:03:06:c4:ec:e2:a7:e9:b5:a6:45:ae:53:7c:0c:54:ee:
a8:73:89:80:b3:ea:f3:4f:17:17:eb:6f:43:13:b2:2a:f3:d0:
f3:a4:53:40:6a:f9:17:10:2e:a3:1c:1e:b8:ec:4d:6e:d6:68:
e2:27:8e:b2:92:43:76:6f:43:76:b2:be:67:41:a0:9e:fc:0a:
86:3c:ca:cd:17:df:fc:40:27:a3:d9:35:a9:2e:26:f3:70:c8:
3d:73:23:92:04:fe:c6:63:f1:ba:6b:33:6a:ec:f3:7d:cd:27:
71:c4:42:8f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY317fMm+eogjq/0u3pdQQ0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwMjI5MTczMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjAwZjllOTI2NzYwYTdlZmJjMzhkNGJkYTAzZjgzZTI5YWYyNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq+J73ANKrhjNUrLGZHcjXpx3A90
4ZFBkk/6Gwc0FqEK/ikGX6rQFR3XqqYB/MmtWHSIMSYUrIA70p4u+/psPzvsMdCb
i2B9WAY3t6RfdFaN42rLpzh/81HFMnWM7h3DLpx/QKDFhzgBuJWqTDqaiQwImKe2
GHdbnfNnvfADln2FbholIQLNDw6OejDUMfpyfpdKBkA3sdX8K//ZHCTJBKsSVxLB
npY3YUAYq4Rn2khNlXDDJIDdpCkCb5PJVMGwH5xlDrEZumS3ae/w9S5Y/blM405n
irXmeak1xXcaJlyOMzuBfuDDVWoJPFyKiSlc5DUIzULKmO21obUlHDROVwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH8A+ekmdgp++8ONS9oD+D4pryUmMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZndENTZTWjJDbjc3dzQxTDJnUDRQaW12SlNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCVCAwAwQC
VCBsAwQCWNg8AwQCWNjgMA0GCSqGSIb3DQEBCwUAA4IBAQCWAYMScpKGANXFuUti
J1njWOfs+0+8F0P3nX7mws1KknRBTF9DtT8brNFmDIwFansCJDhtzeZo0T5esyps
9keDgLxsdD5mmMHJFlNJ0Cs81V6Ua3vkjnq74gbzwWBV2Pg6mFldq2l5P2hZHi6q
jVKifg0uplrwDmtnz8onXy297FGvKQKiIApzJ6XzjEArP/axcAMGxOzip+m1pkWu
U3wMVO6oc4mAs+rzTxcX629DE7Iq89DzpFNAavkXEC6jHB647E1u1mjiJ46ykkN2
b0N2sr5nQaCe/AqGPMrNF9/8QCej2TWpLibzcMg9cyOSBP7GY/G6azNq7PN9zSdx
xEKP
-----END CERTIFICATE-----
Generated at Tue May 7 21:44:39 2024 by rpki-client on console-ams.rpki-client.org