Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_sMvMcAEwUQcFjehUpfAJV5g0yM.roa
File: _sMvMcAEwUQcFjehUpfAJV5g0yM.roa (raw, json)
Hash identifier: T6pgTdFpv6PbU32zdtzueaz6sGiZjFxskXv86l5Top8=
Subject key identifier: FE:C3:2F:31:C0:04:C1:44:1C:16:37:A1:52:97:C0:25:5E:60:D3:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019055A165A8F9052DA9C6CCDADBD32C17BF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_sMvMcAEwUQcFjehUpfAJV5g0yM.roa
Signing time: Wed 26 Jun 2024 17:39:18 +0000
ROA not before: Wed 26 Jun 2024 17:39:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 92.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:55:a1:65:a8:f9:05:2d:a9:c6:cc:da:db:d3:2c:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 26 17:39:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec32f31c004c1441c1637a15297c0255e60d323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:d6:d8:20:2c:b0:f1:d4:b0:f0:03:b9:5b:
fa:90:c6:ec:60:14:58:2f:68:87:64:b5:8d:6a:56:
bb:ba:ee:d9:9e:9b:d2:d9:91:55:b9:27:ac:c1:42:
41:23:6c:b8:42:7f:cd:35:5c:71:53:f8:fa:0b:c9:
67:66:33:11:2e:73:7b:6d:dc:95:f8:9e:b1:03:c7:
08:65:3c:38:fb:61:58:f0:f2:e6:91:08:a2:6c:88:
93:d4:81:eb:1f:af:7c:f0:c5:fe:8e:41:55:10:b0:
de:74:51:bc:d6:21:ea:2a:29:61:55:3a:6e:93:50:
89:44:8d:62:d6:fe:37:a7:1e:3b:a6:f1:5c:54:a1:
f4:8d:21:53:de:7d:0b:99:40:99:b4:9e:74:de:51:
c7:ea:c8:c8:d3:f9:e9:f8:b6:9f:84:59:26:d8:8c:
aa:fa:06:8b:7a:b4:b8:ba:b3:80:30:c6:19:5d:6a:
0d:8d:d0:77:99:96:a4:30:a7:a6:eb:16:8a:79:bf:
b5:63:d6:ed:e1:2f:0d:54:20:43:11:57:cf:e7:e7:
04:82:92:ba:0f:cb:61:cd:41:f7:96:e2:30:de:d6:
5c:dc:6e:17:23:db:d7:89:b0:19:a0:d0:ae:57:53:
6c:a5:6a:15:ca:7f:6a:29:7c:63:84:7f:a4:61:63:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C3:2F:31:C0:04:C1:44:1C:16:37:A1:52:97:C0:25:5E:60:D3:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_sMvMcAEwUQcFjehUpfAJV5g0yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
70:87:26:0c:63:fa:69:7d:e5:ec:ed:53:a6:d6:db:bd:c2:65:
c7:59:7a:a9:f9:a3:d1:32:98:0c:5c:a0:a4:c3:60:ec:4a:48:
89:e1:be:50:10:2d:09:6e:77:67:c2:d8:99:e2:6c:75:43:b9:
73:a9:ee:f8:7f:87:a4:52:00:c6:57:59:6e:bd:d5:8c:27:61:
81:f3:78:11:06:eb:51:fc:4c:93:96:a2:85:1d:e6:60:5d:2e:
4e:8a:6e:0a:85:fd:65:be:02:5f:b5:42:ac:e2:9b:c4:15:f1:
2e:1e:1a:b7:1d:04:63:1f:d0:79:e4:d9:45:b7:02:a2:b4:26:
a5:0a:ee:12:f3:1d:1d:52:d1:fb:71:54:59:c4:4e:8d:a4:bb:
0a:bd:83:ec:12:77:90:31:89:7b:6f:3e:9f:32:6e:d9:2e:c7:
9f:b1:8a:1d:ce:a6:96:f4:6f:12:3b:76:e5:8c:70:0a:71:0c:
c3:7a:72:6b:a3:db:07:0b:38:72:99:bf:bb:60:30:5f:8b:ec:
a8:7e:be:e0:69:67:89:a4:d9:ca:7a:38:cf:1c:b9:ee:f0:db:
99:1c:e4:bf:7f:bc:16:5f:e7:07:29:1b:e2:f9:09:b4:0e:db:
c7:9b:26:e0:27:ff:90:75:c6:c2:eb:17:a0:d7:6d:4c:4a:0f:
d8:f1:a7:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBVoWWo+QUtqcbM2tvTLBe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNjI2MTczOTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWMzMmYzMWMwMDRjMTQ0MWMxNjM3YTE1Mjk3YzAyNTVlNjBkMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A/W2CAssPHUsPADuVv6kMbsYBRY
L2iHZLWNala7uu7ZnpvS2ZFVuSeswUJBI2y4Qn/NNVxxU/j6C8lnZjMRLnN7bdyV
+J6xA8cIZTw4+2FY8PLmkQiibIiT1IHrH6988MX+jkFVELDedFG81iHqKilhVTpu
k1CJRI1i1v43px47pvFcVKH0jSFT3n0LmUCZtJ503lHH6sjI0/np+LafhFkm2Iyq
+gaLerS4urOAMMYZXWoNjdB3mZakMKem6xaKeb+1Y9bt4S8NVCBDEVfP5+cEgpK6
D8thzUH3luIw3tZc3G4XI9vXibAZoNCuV1NspWoVyn9qKXxjhH+kYWP9qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7DLzHABMFEHBY3oVKXwCVeYNMjMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvX3NNdk1jQUV3VVFjRmplaFVwZkFKVjVnMHlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHIgMA0G
CSqGSIb3DQEBCwUAA4IBAQBwhyYMY/ppfeXs7VOm1tu9wmXHWXqp+aPRMpgMXKCk
w2DsSkiJ4b5QEC0JbndnwtiZ4mx1Q7lzqe74f4ekUgDGV1luvdWMJ2GB83gRButR
/EyTlqKFHeZgXS5Oim4Khf1lvgJftUKs4pvEFfEuHhq3HQRjH9B55NlFtwKitCal
Cu4S8x0dUtH7cVRZxE6NpLsKvYPsEneQMYl7bz6fMm7ZLsefsYodzqaW9G8SO3bl
jHAKcQzDenJro9sHCzhymb+7YDBfi+yofr7gaWeJpNnKejjPHLnu8NuZHOS/f7wW
X+cHKRvi+Qm0DtvHmybgJ/+QdcbC6xeg121MSg/Y8adn
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:06:47 2024 by rpki-client on console-ams.rpki-client.org