Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/FJpt9xfzFZSpxfTYQ1ehX8sXZw0.roa
File: FJpt9xfzFZSpxfTYQ1ehX8sXZw0.roa (raw, json)
Hash identifier: El9ztVdKqnNbjDw7SF1Fizq7FRIhiGxVQn0tO455W+A=
Subject key identifier: 14:9A:6D:F7:17:F3:15:94:A9:C5:F4:D8:43:57:A1:5F:CB:17:67:0D
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0190BF5C4AA03263EC512BFFC45986B53A1D
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/FJpt9xfzFZSpxfTYQ1ehX8sXZw0.roa
Signing time: Wed 17 Jul 2024 06:23:34 +0000
ROA not before: Wed 17 Jul 2024 06:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48108
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:5c:4a:a0:32:63:ec:51:2b:ff:c4:59:86:b5:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jul 17 06:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=149a6df717f31594a9c5f4d84357a15fcb17670d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:8d:94:81:13:2a:0d:52:fd:54:7c:e3:cf:
46:9f:3c:fc:57:9c:34:c9:be:61:ef:dd:a6:f6:c0:
68:36:f2:01:fe:2f:52:48:76:a2:3a:1d:40:d4:93:
49:0f:21:bb:01:00:19:59:26:ce:df:97:f3:aa:6c:
7e:44:e6:7c:26:be:4e:18:e5:dc:a0:cf:d3:ac:19:
c7:4a:f3:f8:b2:97:25:17:6e:27:77:90:a2:b0:dd:
2d:2d:0b:cd:b7:5c:3b:be:39:17:27:64:52:68:a1:
62:87:ca:ee:d7:13:81:bc:29:92:f7:46:14:30:09:
5e:9b:b9:a6:8c:63:67:60:01:9d:4d:93:da:ad:e9:
1a:df:e5:4b:33:3a:ec:89:b6:b8:c6:7a:76:03:ff:
62:87:80:53:f0:ca:a5:c8:4b:ab:86:d2:e0:69:44:
da:70:fc:81:bd:33:6b:d9:55:70:76:62:78:49:89:
f0:c5:0b:aa:2b:34:ba:be:db:e3:86:87:8f:77:86:
65:03:ef:63:42:6f:1c:30:93:0e:34:3e:f4:93:6e:
26:3c:8d:31:a3:9e:96:64:bd:d3:ef:2d:ce:c5:f2:
ad:4b:cc:56:86:0b:f4:50:40:ad:50:6e:99:a0:b4:
e3:51:bf:75:09:6e:8c:0a:6a:5a:d3:68:2c:4a:83:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9A:6D:F7:17:F3:15:94:A9:C5:F4:D8:43:57:A1:5F:CB:17:67:0D
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/FJpt9xfzFZSpxfTYQ1ehX8sXZw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0-185.120.58.255
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
59:20:df:27:d5:78:7e:b2:2c:c6:45:6e:68:33:3e:cd:6e:4c:
b7:80:11:5b:68:bd:65:a3:56:2d:8b:b5:f1:57:84:56:5d:49:
47:61:79:3b:15:c6:fb:e4:33:1d:82:a9:3e:bb:79:00:30:3c:
c4:25:1c:61:eb:a3:83:58:08:03:1a:78:06:8c:77:b6:38:e9:
c4:b8:f5:21:ae:b5:f1:17:e2:17:c2:5a:ad:d4:99:86:2e:89:
66:27:6a:81:11:7f:3e:56:70:94:d1:d6:47:0d:02:4a:0c:a1:
65:e4:4b:e5:dc:b2:6b:ef:d6:c5:bc:60:75:96:c0:53:d5:a8:
b0:97:0c:1a:ec:69:ca:f0:0b:1c:a2:d3:c9:37:f1:27:67:65:
6f:4e:43:c4:27:4f:40:9b:57:16:cb:1c:ed:fb:97:bf:ea:a3:
83:2a:e9:c8:1d:7a:45:aa:14:cd:cc:52:30:75:ae:f1:15:7f:
1b:1f:e6:2c:60:7a:93:27:4b:1d:32:90:ee:8c:0f:ec:6a:bf:
61:31:9c:52:6b:be:11:7a:ef:b7:1f:97:69:8e:9d:4d:0a:6e:
43:32:d4:e5:a5:0e:df:8d:f6:c6:90:c8:06:03:f9:ec:19:4c:
fa:bb:d5:ff:b3:c1:e5:32:6a:86:8c:8f:7e:c3:27:64:c1:63:
f1:4f:bc:64
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZC/XEqgMmPsUSv/xFmGtTodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQwNzE3MDYyMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDlhNmRmNzE3ZjMxNTk0YTljNWY0ZDg0MzU3YTE1ZmNiMTc2NzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpyNlIETKg1S/VR8489Gnzz8V5w0
yb5h792m9sBoNvIB/i9SSHaiOh1A1JNJDyG7AQAZWSbO35fzqmx+ROZ8Jr5OGOXc
oM/TrBnHSvP4spclF24nd5CisN0tLQvNt1w7vjkXJ2RSaKFih8ru1xOBvCmS90YU
MAlem7mmjGNnYAGdTZPareka3+VLMzrsiba4xnp2A/9ih4BT8MqlyEurhtLgaUTa
cPyBvTNr2VVwdmJ4SYnwxQuqKzS6vtvjhoePd4ZlA+9jQm8cMJMOND70k24mPI0x
o56WZL3T7y3OxfKtS8xWhgv0UECtUG6ZoLTjUb91CW6MCmpa02gsSoNX3QIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFBSabfcX8xWUqcX02ENXoV/LF2cNMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvRkpwdDl4ZnpGWlNweGZUWVExZWhYOHNYWncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgMAwDBAO5eDgD
BAC5eDoDBADUFkADBADUFksDBADUFk0wDwQCAAIwCQMHACoGw8AAATANBgkqhkiG
9w0BAQsFAAOCAQEAWSDfJ9V4frIsxkVuaDM+zW5Mt4ARW2i9ZaNWLYu18VeEVl1J
R2F5OxXG++QzHYKpPrt5ADA8xCUcYeujg1gIAxp4Box3tjjpxLj1Ia618RfiF8Ja
rdSZhi6JZidqgRF/PlZwlNHWRw0CSgyhZeRL5dyya+/WxbxgdZbAU9WosJcMGuxp
yvALHKLTyTfxJ2dlb05DxCdPQJtXFssc7fuXv+qjgyrpyB16RaoUzcxSMHWu8RV/
Gx/mLGB6kydLHTKQ7owP7Gq/YTGcUmu+EXrvtx+XaY6dTQpuQzLU5aUO3432xpDI
BgP57BlM+rvV/7PB5TJqhoyPfsMnZMFj8U+8ZA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:54 2024 by rpki-client on console-fra.rpki-client.org