Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/F5QuvxZ0GEKpU8bFzQ0MtRFMNLk.roa
File: F5QuvxZ0GEKpU8bFzQ0MtRFMNLk.roa (raw, json)
Hash identifier: Yc7dZIJ40juTPJKt//ahlhqlb6vPoi1L+ockIw1NXv4=
Subject key identifier: 17:94:2E:BF:16:74:18:42:A9:53:C6:C5:CD:0D:0C:B5:11:4C:34:B9
Certificate issuer: /CN=9e6834ae35630a04c78f277605252678fb645c45
Certificate serial: 018CC8DE6E40AC6A94045D3AD9BE68B10C7E
Authority key identifier: 9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/F5QuvxZ0GEKpU8bFzQ0MtRFMNLk.roa
Signing time: Tue 02 Jan 2024 06:31:09 +0000
ROA not before: Tue 02 Jan 2024 06:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212616
IP address blocks: 212.46.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6e:40:ac:6a:94:04:5d:3a:d9:be:68:b1:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6834ae35630a04c78f277605252678fb645c45
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17942ebf16741842a953c6c5cd0d0cb5114c34b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:e3:a9:7b:82:db:80:de:29:15:a4:b5:d9:
be:36:e8:58:8a:7d:42:ff:dc:58:5b:e2:70:7f:ef:
29:cd:4e:fd:1b:a5:33:e2:55:bc:66:3f:bd:1a:6e:
0e:0c:f0:2d:7d:5b:6a:28:8e:91:d7:3d:07:d6:e5:
7f:cc:2a:a3:54:69:39:df:09:b7:24:54:3f:08:83:
de:8e:4f:db:1e:2a:a8:97:dc:b0:bd:cf:5e:82:8b:
b4:bc:90:a5:3a:64:a6:2e:1e:54:a3:10:b5:13:ff:
95:a4:90:35:60:dd:1f:c3:86:cd:22:ae:b6:9d:5b:
db:a6:90:23:60:56:32:06:c4:3e:64:50:b4:f0:16:
e6:c7:5b:8e:73:0c:dc:dd:a5:39:00:35:d4:19:bd:
9b:d5:a3:7a:4d:90:ad:82:ec:96:76:c2:24:0c:cd:
90:47:dc:8c:e4:80:52:e0:c6:1f:a3:91:ea:6c:d2:
d6:7f:45:67:33:27:4c:8f:a3:09:08:e6:ef:9d:3e:
28:cd:7c:56:1e:03:33:b5:ed:ff:1a:06:33:4e:d1:
48:9c:58:ab:ab:3d:26:b3:88:e4:19:57:a0:a0:b0:
42:0b:aa:ff:2d:c9:88:87:bb:cd:ec:e2:39:44:bf:
1c:2b:b4:2f:48:f6:eb:b3:62:76:ed:b1:43:09:61:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:2E:BF:16:74:18:42:A9:53:C6:C5:CD:0D:0C:B5:11:4C:34:B9
X509v3 Authority Key Identifier:
keyid:9E:68:34:AE:35:63:0A:04:C7:8F:27:76:05:25:26:78:FB:64:5C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmg0rjVjCgTHjyd2BSUmePtkXEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/F5QuvxZ0GEKpU8bFzQ0MtRFMNLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3b97c8-9576-4247-96e6-527984fc1181/1/nmg0rjVjCgTHjyd2BSUmePtkXEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.40.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fb:4f:9f:dd:27:fb:ac:0b:aa:9e:f6:2b:05:06:5c:99:0b:
fe:d4:8b:f1:6f:f5:94:15:c7:d3:57:70:35:05:24:eb:b0:f9:
85:98:ca:02:d5:ef:f5:a1:a5:52:9b:55:52:cf:c1:f4:3a:cf:
52:9f:2a:12:ff:1e:d2:51:0a:39:e3:ea:ca:4d:66:38:21:85:
3f:5a:23:ad:a0:c1:9d:ce:6f:65:75:a1:3d:9b:7f:67:a1:da:
1b:32:19:24:65:8e:11:ce:51:04:4f:2f:e8:f8:d4:ca:5e:28:
a3:60:2b:8c:bb:b1:7f:1f:a9:b5:e7:b8:d3:57:e3:7b:8a:e4:
e1:0e:77:23:e5:33:0f:ab:59:df:f9:41:f4:37:69:b3:6c:ed:
dc:45:27:4a:f2:66:f3:11:10:98:2c:a6:ae:45:21:5c:55:e8:
3a:95:f4:2b:2b:d4:16:03:d8:c0:68:32:72:4a:c4:fa:90:23:
ff:6b:ab:e9:77:2e:fb:a0:b5:bf:af:43:23:b5:d1:e5:66:ba:
e6:a6:d1:ce:df:b3:a4:e8:af:7d:9d:e3:48:03:3c:3a:de:c9:
f4:f3:ee:c8:9d:13:07:c1:fb:20:07:ac:1c:21:98:a4:56:b5:
69:fd:b5:e8:03:90:f0:78:04:a2:34:65:f6:35:5c:45:9f:e1:
97:73:c1:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3m5ArGqUBF062b5osQx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjgzNGFlMzU2MzBhMDRjNzhmMjc3NjA1MjUyNjc4ZmI2
NDVjNDUwHhcNMjQwMTAyMDYzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzk0MmViZjE2NzQxODQyYTk1M2M2YzVjZDBkMGNiNTExNGMzNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0zjqXuC24DeKRWktdm+NuhYin1C
/9xYW+Jwf+8pzU79G6Uz4lW8Zj+9Gm4ODPAtfVtqKI6R1z0H1uV/zCqjVGk53wm3
JFQ/CIPejk/bHiqol9ywvc9egou0vJClOmSmLh5UoxC1E/+VpJA1YN0fw4bNIq62
nVvbppAjYFYyBsQ+ZFC08Bbmx1uOcwzc3aU5ADXUGb2b1aN6TZCtguyWdsIkDM2Q
R9yM5IBS4MYfo5HqbNLWf0VnMydMj6MJCObvnT4ozXxWHgMzte3/GgYzTtFInFir
qz0ms4jkGVegoLBCC6r/LcmIh7vN7OI5RL8cK7QvSPbrs2J27bFDCWFG9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeULr8WdBhCqVPGxc0NDLURTDS5MB8GA1UdIwQY
MBaAFJ5oNK41YwoEx48ndgUlJnj7ZFxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYt
NTI3OTg0ZmMxMTgxLzEvRjVRdXZ4WjBHRUtwVThiRnpRME10UkZNTkxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYjk3YzgtOTU3Ni00MjQ3LTk2ZTYtNTI3OTg0ZmMxMTgx
LzEvbm1nMHJqVmpDZ1RIanlkMkJTVW1lUHRrWEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4oMA0G
CSqGSIb3DQEBCwUAA4IBAQBC+0+f3Sf7rAuqnvYrBQZcmQv+1Ivxb/WUFcfTV3A1
BSTrsPmFmMoC1e/1oaVSm1VSz8H0Os9SnyoS/x7SUQo54+rKTWY4IYU/WiOtoMGd
zm9ldaE9m39nodobMhkkZY4RzlEETy/o+NTKXiijYCuMu7F/H6m157jTV+N7iuTh
Dncj5TMPq1nf+UH0N2mzbO3cRSdK8mbzERCYLKauRSFcVeg6lfQrK9QWA9jAaDJy
SsT6kCP/a6vpdy77oLW/r0MjtdHlZrrmptHO37Ok6K99neNIAzw63sn08+7InRMH
wfsgB6wcIZikVrVp/bXoA5DweASiNGX2NVxFn+GXc8GC
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:15:51 2024 by rpki-client on console-ams.rpki-client.org