Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/Fq4lwSRX5s7fL138-NpAJ1y-jB4.roa
File: Fq4lwSRX5s7fL138-NpAJ1y-jB4.roa (raw, json)
Hash identifier: 7bFb5rSS85mjLjTwLyUwcPa3mtHlWoj7ytXtbYExE+s=
Subject key identifier: 16:AE:25:C1:24:57:E6:CE:DF:2F:5D:FC:F8:DA:40:27:5C:BE:8C:1E
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 018F96559EED10901A28A54E9B3A3D888B65
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/Fq4lwSRX5s7fL138-NpAJ1y-jB4.roa
Signing time: Mon 20 May 2024 14:09:04 +0000
ROA not before: Mon 20 May 2024 14:09:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60540
IP address blocks: 185.155.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:55:9e:ed:10:90:1a:28:a5:4e:9b:3a:3d:88:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: May 20 14:09:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16ae25c12457e6cedf2f5dfcf8da40275cbe8c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:01:51:b9:7c:bf:a7:ad:88:db:53:e1:93:
48:dc:bf:d5:98:1d:52:50:6a:6d:50:8c:bd:b8:2a:
a0:90:d6:93:16:35:8c:03:6d:5e:4f:98:fe:c6:a0:
fb:7f:0b:3f:69:49:a1:be:33:5f:38:56:1f:8f:ac:
00:06:a3:5e:f7:11:19:c0:0f:48:47:ab:17:02:58:
df:89:3b:57:f4:3a:d0:85:ee:00:11:03:48:9c:fa:
b6:68:ba:1f:45:09:02:90:ac:06:7c:61:44:4f:a6:
2a:33:5e:06:85:9b:80:34:c9:eb:55:22:df:0c:f3:
38:9e:83:ef:fd:18:b2:3c:a5:52:9a:ef:57:98:97:
20:7e:06:ed:2e:d0:ed:d8:e1:de:e4:e0:47:f1:75:
f8:0b:07:8f:cc:ba:26:48:6a:bb:11:df:00:f4:5b:
a7:35:c7:07:17:96:5f:9a:23:18:ee:a2:6e:32:1c:
6e:a2:b6:6e:5f:2f:ca:1e:36:8d:e9:d6:f8:0f:2e:
e9:a7:2e:4d:12:81:41:1f:0e:6a:41:2a:7a:0f:25:
5f:26:91:cc:7f:9a:d4:21:e9:64:65:5f:0d:ea:59:
0c:20:59:a1:87:61:99:59:9a:2a:12:34:71:2e:81:
80:61:c3:8e:2e:23:e6:ac:49:49:70:3c:a9:08:df:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:25:C1:24:57:E6:CE:DF:2F:5D:FC:F8:DA:40:27:5C:BE:8C:1E
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/Fq4lwSRX5s7fL138-NpAJ1y-jB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:67:2c:e7:a1:a5:90:05:45:d9:38:81:73:95:01:8d:cc:61:
d8:e6:59:18:fc:a9:1c:3b:28:48:e2:8a:66:68:74:d6:30:92:
a5:f9:2e:80:d6:b8:37:7b:cc:8f:c7:cd:56:f4:1a:c0:2e:4b:
c7:1b:a5:c0:fc:56:69:8a:25:ab:f9:08:60:80:18:47:d3:a0:
5c:03:3d:00:f6:d6:ee:e9:59:fd:48:ef:10:02:d7:e8:a4:df:
e8:a2:b9:69:ba:cb:91:d7:46:4f:b1:7d:22:b0:40:8a:64:21:
0a:a5:93:66:70:b3:ef:c1:e6:71:1e:e3:a5:5e:de:86:4a:26:
07:c7:b0:5f:1d:ba:8d:7d:99:d3:7c:17:fc:9e:cd:9f:30:1e:
e4:d7:c3:95:d3:71:95:fa:52:00:f9:12:6d:7e:20:b3:7b:bc:
4f:05:13:97:c7:52:4e:1f:72:db:19:61:41:2e:73:1d:d1:58:
6d:40:20:9d:01:dc:fb:52:f6:81:91:5f:11:b3:be:95:ca:30:
18:1f:de:8f:ae:7d:ad:21:1c:86:71:4b:47:9b:33:6a:87:7c:
c6:09:b5:89:c8:ec:2d:b0:40:42:96:78:1a:ec:eb:a0:59:6a:
50:c5:5b:29:a9:ee:59:9e:3c:25:b0:12:ae:43:2e:70:76:87:
0b:9c:d4:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+WVZ7tEJAaKKVOmzo9iItlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4
M2MzOWEwHhcNMjQwNTIwMTQwOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmFlMjVjMTI0NTdlNmNlZGYyZjVkZmNmOGRhNDAyNzVjYmU4YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9cBUbl8v6etiNtT4ZNI3L/VmB1S
UGptUIy9uCqgkNaTFjWMA21eT5j+xqD7fws/aUmhvjNfOFYfj6wABqNe9xEZwA9I
R6sXAljfiTtX9DrQhe4AEQNInPq2aLofRQkCkKwGfGFET6YqM14GhZuANMnrVSLf
DPM4noPv/RiyPKVSmu9XmJcgfgbtLtDt2OHe5OBH8XX4CwePzLomSGq7Ed8A9Fun
NccHF5ZfmiMY7qJuMhxuorZuXy/KHjaN6db4Dy7ppy5NEoFBHw5qQSp6DyVfJpHM
f5rUIelkZV8N6lkMIFmhh2GZWZoqEjRxLoGAYcOOLiPmrElJcDypCN9D7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBauJcEkV+bO3y9d/PjaQCdcvoweMB8GA1UdIwQY
MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt
NDk3YmVkZDcxZWI5LzEvRnE0bHdTUlg1czdmTDEzOC1OcEFKMXktakI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5
LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZudMA0G
CSqGSIb3DQEBCwUAA4IBAQCjZyznoaWQBUXZOIFzlQGNzGHY5lkY/KkcOyhI4opm
aHTWMJKl+S6A1rg3e8yPx81W9BrALkvHG6XA/FZpiiWr+QhggBhH06BcAz0A9tbu
6Vn9SO8QAtfopN/oorlpusuR10ZPsX0isECKZCEKpZNmcLPvweZxHuOlXt6GSiYH
x7BfHbqNfZnTfBf8ns2fMB7k18OV03GV+lIA+RJtfiCze7xPBROXx1JOH3LbGWFB
LnMd0VhtQCCdAdz7UvaBkV8Rs76VyjAYH96Prn2tIRyGcUtHmzNqh3zGCbWJyOwt
sEBClnga7OugWWpQxVspqe5ZnjwlsBKuQy5wdocLnNTt
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:25 2024 by rpki-client on console-fra.rpki-client.org