Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/iFx-19_9_s811V7pyc1n3ecM_Kc.roa
File: iFx-19_9_s811V7pyc1n3ecM_Kc.roa (raw, json)
Hash identifier: gU6LsqaMOkTmKD7/MwldCd3UH1/qFpJqcCpleiVuvNk=
Subject key identifier: 88:5C:7E:D7:DF:FD:FE:CF:35:D5:5E:E9:C9:CD:67:DD:E7:0C:FC:A7
Certificate issuer: /CN=f353c73f1fbf4bfb46d06750e25660cda1d801b1
Certificate serial: 018CC6B87928CF5C76852C80CCC8FB1CADD3
Authority key identifier: F3:53:C7:3F:1F:BF:4B:FB:46:D0:67:50:E2:56:60:CD:A1:D8:01:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81PHPx-_S_tG0GdQ4lZgzaHYAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/iFx-19_9_s811V7pyc1n3ecM_Kc.roa
Signing time: Mon 01 Jan 2024 20:30:27 +0000
ROA not before: Mon 01 Jan 2024 20:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 193.162.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/81PHPx-_S_tG0GdQ4lZgzaHYAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/81PHPx-_S_tG0GdQ4lZgzaHYAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/81PHPx-_S_tG0GdQ4lZgzaHYAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 07:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:79:28:cf:5c:76:85:2c:80:cc:c8:fb:1c:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f353c73f1fbf4bfb46d06750e25660cda1d801b1
Validity
Not Before: Jan 1 20:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=885c7ed7dffdfecf35d55ee9c9cd67dde70cfca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:0f:17:21:e9:46:cb:e8:f3:92:cc:93:06:
7a:ac:47:d0:71:c8:8f:db:b1:37:2f:c4:eb:50:68:
4b:6c:e1:b4:ae:9c:ee:08:fa:39:d8:60:b7:9b:b8:
0d:fb:48:24:8d:96:ce:4c:db:10:ac:d6:8a:0b:d8:
d9:e0:da:ce:92:89:d0:6f:01:f4:cb:07:ad:57:38:
4a:3d:1b:5e:e2:3f:1b:01:62:aa:81:0e:a7:5d:49:
c0:73:18:9b:41:5c:3c:f4:fd:ee:71:94:c0:34:75:
8c:0b:52:6d:0b:54:c0:cf:06:a1:47:a7:2b:25:e2:
08:f6:21:9c:6f:46:50:00:59:38:0b:39:ee:39:e1:
e9:fa:32:7a:ff:be:e9:fd:f1:8d:5c:6d:71:d7:2b:
d6:4e:29:22:23:9d:94:1f:a3:02:9c:04:ef:46:82:
20:69:24:c5:a4:7a:af:6f:29:2e:40:53:24:36:d3:
20:e6:8f:3d:48:64:b6:1a:69:bc:6b:dd:40:7e:72:
8e:3c:eb:3d:64:4d:fa:e2:f0:ec:62:4b:cb:8f:36:
11:97:4a:87:03:09:9c:88:a0:45:5b:dd:96:99:b2:
7f:76:7d:1d:84:0e:70:6c:31:65:99:b0:41:55:28:
b3:1f:34:57:5a:62:a2:c8:01:b9:3d:b5:94:f1:f5:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:7E:D7:DF:FD:FE:CF:35:D5:5E:E9:C9:CD:67:DD:E7:0C:FC:A7
X509v3 Authority Key Identifier:
keyid:F3:53:C7:3F:1F:BF:4B:FB:46:D0:67:50:E2:56:60:CD:A1:D8:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81PHPx-_S_tG0GdQ4lZgzaHYAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/iFx-19_9_s811V7pyc1n3ecM_Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31a837-952b-4341-bf6c-5e13ff3ef3e9/1/81PHPx-_S_tG0GdQ4lZgzaHYAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:23:bf:7c:7e:10:1c:57:66:78:77:5f:98:e1:f0:37:8d:e6:
5b:c5:16:e9:6b:75:34:03:46:da:ee:f2:1a:a4:ea:82:7c:e0:
b7:8c:7c:85:50:09:25:50:94:4c:ac:2e:9f:8f:ca:0d:6f:a2:
98:20:c5:f9:9b:55:a4:c6:4e:6c:82:4c:fd:fc:66:ce:68:a3:
cc:22:f7:52:26:69:02:59:f5:bd:e7:d2:ef:82:63:2e:3d:5a:
12:47:ec:e2:78:da:5e:ca:87:fd:3b:29:e2:5f:9d:e8:66:9a:
54:b9:0e:b7:19:7e:f7:18:90:84:00:fe:9f:2a:17:95:6b:ff:
33:4e:44:e7:4d:8f:3e:45:16:da:ca:b7:af:84:bb:8b:cc:b8:
d2:04:ac:22:87:76:00:21:0a:91:2e:f2:4c:30:ee:33:a1:7e:
79:53:a0:31:08:55:8c:e5:4e:c5:07:b5:b8:1a:4c:2b:90:11:
42:d5:6d:b7:c7:5c:43:70:94:ae:74:6a:b5:d9:96:c6:b8:a9:
a1:f0:8a:0d:34:65:3c:1b:db:29:5a:a8:a9:d6:a2:1a:f3:ea:
fa:5c:f4:de:3a:63:b8:f3:b6:74:40:99:58:3e:a5:1e:db:11:
7c:4f:b1:ff:21:8e:25:14:dd:b6:0f:75:9e:da:9c:e6:77:3e:
6d:d5:dc:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuHkoz1x2hSyAzMj7HK3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTNjNzNmMWZiZjRiZmI0NmQwNjc1MGUyNTY2MGNkYTFk
ODAxYjEwHhcNMjQwMTAxMjAzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODVjN2VkN2RmZmRmZWNmMzVkNTVlZTljOWNkNjdkZGU3MGNmY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgYPFyHpRsvo85LMkwZ6rEfQcciP
27E3L8TrUGhLbOG0rpzuCPo52GC3m7gN+0gkjZbOTNsQrNaKC9jZ4NrOkonQbwH0
ywetVzhKPRte4j8bAWKqgQ6nXUnAcxibQVw89P3ucZTANHWMC1JtC1TAzwahR6cr
JeII9iGcb0ZQAFk4CznuOeHp+jJ6/77p/fGNXG1x1yvWTikiI52UH6MCnATvRoIg
aSTFpHqvbykuQFMkNtMg5o89SGS2Gmm8a91AfnKOPOs9ZE364vDsYkvLjzYRl0qH
AwmciKBFW92WmbJ/dn0dhA5wbDFlmbBBVSizHzRXWmKiyAG5PbWU8fWwxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhcftff/f7PNdVe6cnNZ93nDPynMB8GA1UdIwQY
MBaAFPNTxz8fv0v7RtBnUOJWYM2h2AGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFQSFB4LV9TX3RHMEdkUTRsWmd6YUhZQWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zMWE4MzctOTUyYi00MzQxLWJmNmMt
NWUxM2ZmM2VmM2U5LzEvaUZ4LTE5XzlfczgxMVY3cHljMW4zZWNNX0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zMWE4MzctOTUyYi00MzQxLWJmNmMtNWUxM2ZmM2VmM2U5
LzEvODFQSFB4LV9TX3RHMEdkUTRsWmd6YUhZQWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaIjMA0G
CSqGSIb3DQEBCwUAA4IBAQBrI798fhAcV2Z4d1+Y4fA3jeZbxRbpa3U0A0ba7vIa
pOqCfOC3jHyFUAklUJRMrC6fj8oNb6KYIMX5m1Wkxk5sgkz9/GbOaKPMIvdSJmkC
WfW959LvgmMuPVoSR+zieNpeyof9OyniX53oZppUuQ63GX73GJCEAP6fKheVa/8z
TkTnTY8+RRbayrevhLuLzLjSBKwih3YAIQqRLvJMMO4zoX55U6AxCFWM5U7FB7W4
GkwrkBFC1W23x1xDcJSudGq12ZbGuKmh8IoNNGU8G9spWqip1qIa8+r6XPTeOmO4
87Z0QJlYPqUe2xF8T7H/IY4lFN22D3We2pzmdz5t1dyo
-----END CERTIFICATE-----
Generated at Sat May 11 13:17:51 2024 by rpki-client on console-ams.rpki-client.org