Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/FSE4noHxiX_iuGjsOxO3zdU3iNY.roa
File: FSE4noHxiX_iuGjsOxO3zdU3iNY.roa (raw, json)
Hash identifier: acrC4lW+Cim/BZPcvNMfsAcsNywWX7FN7hkFsvesDZA=
Subject key identifier: 15:21:38:9E:81:F1:89:7F:E2:B8:68:EC:3B:13:B7:CD:D5:37:88:D6
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936A4E5DEE599919EA7195EFD6B480
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/FSE4noHxiX_iuGjsOxO3zdU3iNY.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 141.98.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6a:4e:5d:ee:59:99:19:ea:71:95:ef:d6:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1521389e81f1897fe2b868ec3b13b7cdd53788d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:4d:c4:19:d3:1d:17:6c:f5:3a:99:78:15:
a3:4a:c8:80:9e:a0:3f:cd:82:ac:e3:87:db:50:b5:
33:3f:68:75:7c:03:4d:5e:e7:64:c4:13:de:48:3f:
c2:75:6d:8a:48:30:00:78:60:0e:68:c6:56:53:80:
f9:7f:30:33:9d:87:d4:b0:bf:06:26:db:f6:62:07:
c8:2b:fd:35:f6:2d:47:a1:2f:cf:85:2c:6b:b0:aa:
e1:09:84:e9:21:87:6e:dc:c2:59:a3:7f:90:58:c9:
8c:dc:16:91:f6:0a:5d:32:5f:50:b2:c3:3a:ea:bc:
49:b2:48:88:00:38:70:b8:fd:49:fb:b1:30:94:92:
c1:bf:a0:74:8d:40:a2:7c:0f:e9:06:e5:a8:f9:b7:
d4:94:42:0e:72:30:c5:53:f0:bd:b5:f1:91:54:ef:
d7:c8:61:fe:d0:a6:c7:d6:7e:c6:25:97:42:48:2c:
2f:23:de:58:6f:2d:b6:7e:98:43:7c:35:c8:3d:00:
1a:9a:81:a3:9b:52:4e:0c:d8:da:9e:b0:5c:5e:de:
47:ee:d7:80:54:11:2a:d5:1b:e2:61:a5:0d:80:a4:
26:94:13:d2:08:0f:d8:56:1b:16:6c:a1:b3:c5:0b:
b7:7d:1d:35:5e:66:12:02:bd:38:3d:df:d9:17:71:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:21:38:9E:81:F1:89:7F:E2:B8:68:EC:3B:13:B7:CD:D5:37:88:D6
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/FSE4noHxiX_iuGjsOxO3zdU3iNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.44.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7f:14:52:18:08:c4:99:8f:f5:12:ce:fc:0b:e2:17:42:cf:
4a:e2:74:ab:a9:c4:a3:e7:a6:fb:42:ee:21:81:6c:a9:d6:66:
ad:78:3e:ea:6f:6a:ac:21:0a:af:e1:c1:9a:fd:76:2d:1e:03:
cb:51:e7:94:bd:33:4d:5a:7d:c4:e6:0d:3d:86:3b:56:a3:dc:
90:ac:f2:ff:a8:cd:d0:68:2d:61:97:de:40:a0:c4:e5:ea:87:
a1:39:0d:cd:de:fa:07:0f:da:84:83:fa:c4:d6:1d:00:96:82:
a4:58:f8:ad:e3:27:64:86:e6:40:97:6c:5a:f6:64:47:c4:1a:
d5:5e:9b:62:bc:85:b2:fb:07:93:d0:b2:a5:b7:5f:12:60:26:
12:8c:ba:0a:3e:be:09:b7:7b:ca:e8:bd:dd:3b:78:55:09:b4:
3e:d1:c8:3f:28:50:53:af:02:7f:76:99:47:ae:40:75:f3:b4:
f1:46:b1:78:83:f8:10:1b:ef:62:5a:fe:05:27:ca:87:99:f7:
d7:e6:30:83:ff:a4:ee:77:e0:c5:f1:1a:32:34:c3:20:45:00:
37:88:15:86:97:f8:d1:6b:65:ce:ea:08:8d:45:9e:1c:23:65:
fa:27:98:a1:47:bc:de:a9:89:3a:f7:6b:a1:65:5f:5a:a2:18:
b2:57:a7:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk2pOXe5ZmRnqcZXv1rSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjQwMTAxMTAzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTIxMzg5ZTgxZjE4OTdmZTJiODY4ZWMzYjEzYjdjZGQ1Mzc4OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtBNxBnTHRds9TqZeBWjSsiAnqA/
zYKs44fbULUzP2h1fANNXudkxBPeSD/CdW2KSDAAeGAOaMZWU4D5fzAznYfUsL8G
Jtv2YgfIK/019i1HoS/PhSxrsKrhCYTpIYdu3MJZo3+QWMmM3BaR9gpdMl9QssM6
6rxJskiIADhwuP1J+7EwlJLBv6B0jUCifA/pBuWo+bfUlEIOcjDFU/C9tfGRVO/X
yGH+0KbH1n7GJZdCSCwvI95Yby22fphDfDXIPQAamoGjm1JODNjanrBcXt5H7teA
VBEq1RviYaUNgKQmlBPSCA/YVhsWbKGzxQu3fR01XmYSAr04Pd/ZF3HtjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBUhOJ6B8Yl/4rho7DsTt83VN4jWMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvRlNFNG5vSHhpWF9pdUdqc094TzN6ZFUzaU5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIsMA0G
CSqGSIb3DQEBCwUAA4IBAQAzfxRSGAjEmY/1Es78C+IXQs9K4nSrqcSj56b7Qu4h
gWyp1mateD7qb2qsIQqv4cGa/XYtHgPLUeeUvTNNWn3E5g09hjtWo9yQrPL/qM3Q
aC1hl95AoMTl6oehOQ3N3voHD9qEg/rE1h0AloKkWPit4ydkhuZAl2xa9mRHxBrV
XptivIWy+weT0LKlt18SYCYSjLoKPr4Jt3vK6L3dO3hVCbQ+0cg/KFBTrwJ/dplH
rkB187TxRrF4g/gQG+9iWv4FJ8qHmffX5jCD/6Tud+DF8RoyNMMgRQA3iBWGl/jR
a2XO6giNRZ4cI2X6J5ihR7zeqYk692uhZV9aohiyV6fj
-----END CERTIFICATE-----
Generated at Mon May 13 05:19:22 2024 by rpki-client on console-fra.rpki-client.org