Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/FBP6pjj0D8i_VGbKBJXw7juuHm8.roa
File: FBP6pjj0D8i_VGbKBJXw7juuHm8.roa (raw, json)
Hash identifier: Aug1AfbuP2U0mKc5wWNhT/WfTskyEMWNzE9yWmiot4I=
Subject key identifier: 14:13:FA:A6:38:F4:0F:C8:BF:54:66:CA:04:95:F0:EE:3B:AE:1E:6F
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA1A3C5259E8CB9C3ED575DB26564
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/FBP6pjj0D8i_VGbKBJXw7juuHm8.roa
Signing time: Tue 02 Jan 2024 10:33:51 +0000
ROA not before: Tue 02 Jan 2024 10:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1146
IP address blocks: 145.100.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a1:a3:c5:25:9e:8c:b9:c3:ed:57:5d:b2:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1413faa638f40fc8bf5466ca0495f0ee3bae1e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:ea:e6:f2:da:5e:23:4a:d8:a4:68:48:96:
d0:ca:de:a3:6c:ef:06:8b:d6:bf:e0:4c:5a:87:d0:
be:d3:c6:6c:d6:a7:73:6f:7a:85:71:83:55:c2:1c:
4b:f1:90:4d:6b:47:9f:74:2c:d5:05:0c:aa:ec:c0:
a8:0b:41:6e:d1:aa:d1:7e:ed:6b:03:ac:0f:bd:10:
bc:dc:64:2b:f4:1e:3b:db:dd:63:06:29:b1:79:f8:
26:38:f7:4b:88:fc:f4:7b:55:30:1d:19:99:4c:e7:
62:1f:53:d3:ac:88:6d:46:1a:07:3c:e0:90:af:11:
48:f6:87:2f:2e:f2:5c:ea:87:21:e9:08:8d:89:78:
9c:7c:7d:da:78:32:92:57:b5:6a:3a:bf:9a:1e:b0:
b5:75:e3:45:ef:03:03:23:30:45:5e:b2:4d:3e:67:
2a:99:ed:18:6b:72:00:bb:b1:10:6a:df:ad:3a:b6:
ff:91:92:d5:10:29:e6:31:6a:14:2e:55:66:d1:9f:
1c:7f:8b:0e:21:68:62:76:05:f1:52:b4:62:1e:de:
fb:ca:eb:b7:f8:61:56:00:57:b3:7d:d9:2e:67:9c:
27:8b:0a:85:f7:f8:0c:a6:5e:4a:cb:5a:4f:a1:15:
f1:3f:0c:e4:24:b8:28:dc:a8:33:76:be:10:e0:bb:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:13:FA:A6:38:F4:0F:C8:BF:54:66:CA:04:95:F0:EE:3B:AE:1E:6F
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/FBP6pjj0D8i_VGbKBJXw7juuHm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.100.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:70:b0:c8:87:e8:23:bd:f0:8b:46:8b:0b:7a:7f:84:61:35:
19:be:bb:f0:24:cf:41:1a:38:3b:ac:38:68:7c:e2:31:a3:d6:
9e:db:63:4f:23:59:02:7f:2c:23:04:37:cf:c5:50:62:d0:98:
2f:72:fe:47:9e:b2:d8:a6:75:0d:f1:2a:3e:2a:cf:68:67:93:
05:b1:48:c7:d6:5c:19:0a:2d:02:32:2e:79:37:65:50:bc:4d:
23:55:62:c0:70:e9:ce:65:d6:55:f2:db:8a:ce:27:cb:8f:80:
9e:b6:1f:8b:08:60:41:3f:87:b3:f0:62:f6:32:75:fa:65:36:
bd:e6:39:1c:f1:b8:ad:b8:32:b0:04:c5:7a:d2:a3:6a:d8:e2:
71:0d:ca:cd:52:75:db:8c:ef:a5:e0:a1:f6:7a:bd:48:d1:44:
21:86:c0:14:35:b4:1a:4a:62:34:d5:40:61:ee:c8:64:81:a8:
31:6e:2d:3e:71:98:9b:0e:0f:c7:dd:10:59:4f:cb:a8:a1:e3:
93:86:43:e6:fa:e5:27:3a:14:32:dc:4f:a2:c9:cf:ad:3f:8f:
5e:7e:91:0d:25:3e:7b:44:3c:ed:e2:4f:2f:fa:b6:86:cf:bf:
e2:b0:b0:c2:2f:fe:4f:e6:56:1d:78:5e:6f:81:34:f5:19:10:
85:a7:74:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvKGjxSWejLnD7VddsmVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjQwMTAyMTAzMzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDEzZmFhNjM4ZjQwZmM4YmY1NDY2Y2EwNDk1ZjBlZTNiYWUxZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPLq5vLaXiNK2KRoSJbQyt6jbO8G
i9a/4Exah9C+08Zs1qdzb3qFcYNVwhxL8ZBNa0efdCzVBQyq7MCoC0Fu0arRfu1r
A6wPvRC83GQr9B47291jBimxefgmOPdLiPz0e1UwHRmZTOdiH1PTrIhtRhoHPOCQ
rxFI9ocvLvJc6och6QiNiXicfH3aeDKSV7VqOr+aHrC1deNF7wMDIzBFXrJNPmcq
me0Ya3IAu7EQat+tOrb/kZLVECnmMWoULlVm0Z8cf4sOIWhidgXxUrRiHt77yuu3
+GFWAFezfdkuZ5wniwqF9/gMpl5Ky1pPoRXxPwzkJLgo3Kgzdr4Q4LunfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQT+qY49A/Iv1RmygSV8O47rh5vMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvRkJQNnBqajBEOGlfVkdiS0JKWHc3anV1SG04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkWRlMA0G
CSqGSIb3DQEBCwUAA4IBAQCbcLDIh+gjvfCLRosLen+EYTUZvrvwJM9BGjg7rDho
fOIxo9ae22NPI1kCfywjBDfPxVBi0Jgvcv5HnrLYpnUN8So+Ks9oZ5MFsUjH1lwZ
Ci0CMi55N2VQvE0jVWLAcOnOZdZV8tuKzifLj4Ceth+LCGBBP4ez8GL2MnX6ZTa9
5jkc8bituDKwBMV60qNq2OJxDcrNUnXbjO+l4KH2er1I0UQhhsAUNbQaSmI01UBh
7shkgagxbi0+cZibDg/H3RBZT8uooeOThkPm+uUnOhQy3E+iyc+tP49efpENJT57
RDzt4k8v+raGz7/isLDCL/5P5lYdeF5vgTT1GRCFp3Ra
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:53 2024 by rpki-client on console-ams.rpki-client.org