Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fOPSSb_8inRtRcPt9pf00jN8K44.roa
File: fOPSSb_8inRtRcPt9pf00jN8K44.roa (raw, json)
Hash identifier: K8Kja77iPQfpwRhIGDS/d4GNtjNyigb/HlDTE7ZT0ks=
Subject key identifier: 7C:E3:D2:49:BF:FC:8A:74:6D:45:C3:ED:F6:97:F4:D2:33:7C:2B:8E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A2E3AA1FE85E1869E8269ECD001FD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fOPSSb_8inRtRcPt9pf00jN8K44.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62008
IP address blocks: 92.38.36.0/23 maxlen: 24
146.120.208.0/22 maxlen: 24
2a02:128:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2e:3a:a1:fe:85:e1:86:9e:82:69:ec:d0:01:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ce3d249bffc8a746d45c3edf697f4d2337c2b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:3f:99:c2:8e:cb:a8:99:12:30:1f:40:d6:
b1:3b:a9:2c:32:03:a6:07:22:59:01:63:c7:84:b8:
fd:81:5a:a2:51:50:39:7c:ab:fc:70:95:96:70:2d:
58:4b:1a:b8:a0:66:2f:b9:18:93:33:06:83:74:e2:
51:eb:77:b9:eb:e3:74:39:05:3d:7b:5b:6d:c6:f9:
e5:04:5a:71:2a:41:0b:d1:82:f8:d1:ef:90:ef:17:
62:fc:05:6c:4c:ba:26:61:00:8d:98:0c:9f:7e:aa:
61:2e:a4:25:43:e6:70:d4:24:c6:48:ae:e0:68:4d:
b7:f7:94:0a:f2:96:90:77:0d:01:ef:6e:1b:98:bb:
28:72:e7:e4:7f:7d:a7:24:f4:92:da:63:58:d1:ad:
19:9b:80:e7:99:0c:84:8a:cd:39:f4:b0:5e:75:38:
85:f0:5a:a2:74:f2:51:49:3b:63:a7:c1:44:c4:fa:
0d:45:0f:91:3c:a2:4b:a2:55:76:42:46:fb:7b:07:
8a:d3:dc:0b:b8:4c:fc:6c:fe:4d:6e:35:4f:3e:27:
28:be:5b:e5:45:0a:bc:44:a3:86:24:b9:c6:b5:5e:
c2:78:73:eb:e4:a3:b4:b0:a4:0d:6d:2e:1e:c6:af:
df:48:be:68:74:de:78:65:0d:23:a9:74:bd:7f:02:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:D2:49:BF:FC:8A:74:6D:45:C3:ED:F6:97:F4:D2:33:7C:2B:8E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fOPSSb_8inRtRcPt9pf00jN8K44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.36.0/23
146.120.208.0/22
IPv6:
2a02:128:15::/48
Signature Algorithm: sha256WithRSAEncryption
9d:85:c9:15:a1:3a:fc:aa:dd:8b:fa:01:47:b6:99:33:05:39:
58:ce:13:a2:be:47:b0:73:dd:26:d1:c6:26:62:e9:44:3c:5f:
3a:dc:69:77:67:fd:37:03:9e:a9:76:9f:3c:b0:82:3e:4f:30:
01:bd:a3:ab:ab:71:01:80:46:c2:fe:ff:8d:b2:84:1a:52:83:
62:07:e0:02:3b:ed:c4:05:bc:fe:05:f5:5f:50:33:a9:77:dc:
c6:6f:84:bc:1f:c7:2f:56:39:9c:65:64:02:f0:cd:15:29:48:
89:37:23:a8:37:92:39:43:f3:16:56:b2:af:bd:a6:27:95:8a:
1c:9f:be:54:b5:1e:d2:7b:c4:6e:92:cf:3d:a4:52:52:08:f1:
ce:d9:a5:81:9b:5d:63:37:95:62:e1:72:b4:ee:c7:a4:81:0e:
18:28:35:7f:13:f1:e2:be:92:e7:a1:67:b6:02:19:fd:43:9b:
14:0c:76:f8:48:41:2c:85:ce:71:ff:e0:a4:6d:df:ae:16:f1:
ca:62:87:30:c0:c4:de:17:34:6d:d5:a4:62:bd:39:14:8a:41:
e7:63:66:ab:a1:68:78:2e:59:7c:0e:bd:8e:96:bb:ce:4b:ba:
55:88:73:f7:38:4b:2e:41:35:09:a8:d6:b2:fc:34:bf:61:6e:
f9:6e:a6:16
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzKKi46of6F4Yaegmns0AH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2UzZDI0OWJmZmM4YTc0NmQ0NWMzZWRmNjk3ZjRkMjMzN2MyYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRQ/mcKOy6iZEjAfQNaxO6ksMgOm
ByJZAWPHhLj9gVqiUVA5fKv8cJWWcC1YSxq4oGYvuRiTMwaDdOJR63e56+N0OQU9
e1ttxvnlBFpxKkEL0YL40e+Q7xdi/AVsTLomYQCNmAyffqphLqQlQ+Zw1CTGSK7g
aE2395QK8paQdw0B724bmLsocufkf32nJPSS2mNY0a0Zm4DnmQyEis059LBedTiF
8FqidPJRSTtjp8FExPoNRQ+RPKJLolV2Qkb7eweK09wLuEz8bP5NbjVPPicovlvl
RQq8RKOGJLnGtV7CeHPr5KO0sKQNbS4exq/fSL5odN54ZQ0jqXS9fwJKpQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHzj0km//Ip0bUXD7faX9NIzfCuOMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZk9QU1NiXzhpblJ0UmNQdDlwZjAwak44SzQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBXCYkAwQC
knjQMA8EAgACMAkDBwAqAgEoABUwDQYJKoZIhvcNAQELBQADggEBAJ2FyRWhOvyq
3Yv6AUe2mTMFOVjOE6K+R7Bz3SbRxiZi6UQ8XzrcaXdn/TcDnql2nzywgj5PMAG9
o6urcQGARsL+/42yhBpSg2IH4AI77cQFvP4F9V9QM6l33MZvhLwfxy9WOZxlZALw
zRUpSIk3I6g3kjlD8xZWsq+9pieVihyfvlS1HtJ7xG6Szz2kUlII8c7ZpYGbXWM3
lWLhcrTux6SBDhgoNX8T8eK+kuehZ7YCGf1DmxQMdvhIQSyFznH/4KRt364W8cpi
hzDAxN4XNG3VpGK9ORSKQedjZquhaHguWXwOvY6Wu85LulWIc/c4Sy5BNQmo1rL8
NL9hbvluphY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:13:21 2024 by rpki-client on console-fra.rpki-client.org