Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/fALxq4E_X1Tfz94ZW5hLl8eyk3E.roa
File: fALxq4E_X1Tfz94ZW5hLl8eyk3E.roa (raw, json)
Hash identifier: efFHf04DDGAKp+3rIoMON05dVik5apotrLIw1tCDp3E=
Subject key identifier: 7C:02:F1:AB:81:3F:5F:54:DF:CF:DE:19:5B:98:4B:97:C7:B2:93:71
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 018CC3B729862CA859631E9248EBD8C940AD
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/fALxq4E_X1Tfz94ZW5hLl8eyk3E.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 178.213.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:29:86:2c:a8:59:63:1e:92:48:eb:d8:c9:40:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c02f1ab813f5f54dfcfde195b984b97c7b29371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:e9:cc:dd:07:66:70:ac:6c:d5:d7:20:4c:
5f:3d:aa:08:73:b7:25:85:da:0c:f3:93:ee:c4:04:
9a:5d:cd:79:c8:2b:22:63:53:ce:ed:21:f5:89:85:
d4:0d:5a:4b:3b:82:50:42:66:01:12:29:a8:a4:52:
89:06:1e:2c:d9:c4:55:9d:76:00:4e:b9:88:94:d4:
cd:9f:7f:15:b0:23:8d:c0:4a:47:63:23:bb:1b:dc:
94:d6:b3:e2:f7:06:c9:42:ea:cb:56:fe:c4:ef:04:
7e:91:13:13:7d:18:76:e6:d0:15:83:36:38:29:78:
15:03:5b:c4:47:3e:3e:c1:c7:f5:0d:5d:34:4a:32:
c4:81:27:be:ec:34:75:be:29:99:d2:be:93:ce:39:
3c:11:15:f0:eb:6e:c0:a4:a2:4f:27:10:7e:a9:98:
31:8c:0d:97:9c:25:3e:a8:8a:f2:e9:53:e7:3c:d9:
03:e3:cb:c9:50:90:28:12:ce:49:4e:53:f8:5b:c0:
69:1f:03:cb:b3:9a:5b:c8:f8:ea:51:bb:06:f9:62:
ae:76:1a:68:a8:b1:b1:d9:b1:35:e7:ec:85:0d:88:
18:b0:37:74:ee:33:f9:d3:1d:7a:4c:f8:9b:e1:10:
1b:e8:83:15:f6:39:a3:d2:e7:0d:08:6c:2e:e5:07:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:02:F1:AB:81:3F:5F:54:DF:CF:DE:19:5B:98:4B:97:C7:B2:93:71
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/fALxq4E_X1Tfz94ZW5hLl8eyk3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.75.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e0:34:97:6c:2e:88:9c:36:d8:53:f8:f1:39:74:24:59:3a:
b7:7c:3e:85:80:95:72:09:9c:3c:a5:38:ab:b7:56:6a:d5:9c:
58:8a:92:ef:c7:3f:e7:f9:7c:0a:c5:e8:e2:42:27:7f:77:7f:
bb:3d:26:5c:86:0b:ae:6b:c9:8f:a2:d4:89:e3:2a:a5:b7:a8:
09:a0:ea:8b:29:2e:71:7a:e6:aa:40:1e:8b:41:be:26:e6:30:
be:33:55:14:3a:a3:35:cd:52:94:a9:7f:b6:83:03:32:91:e2:
88:96:12:e2:db:15:9d:92:be:70:6e:b6:a7:11:18:59:a5:10:
d5:f3:78:3e:23:30:2e:62:81:c6:bd:a6:66:60:16:af:de:4d:
d0:9e:27:f6:82:65:d7:62:03:b0:49:f8:be:c9:19:5f:b9:d3:
56:79:02:64:b3:ef:56:86:1b:cf:f2:8e:42:5a:43:c4:1d:e6:
11:ff:15:7b:c3:fa:3a:55:db:fd:2b:cc:a0:63:3f:ed:2a:cb:
cc:52:dd:fa:a3:a0:b3:ef:2e:13:a5:3d:dc:da:3a:a7:3e:66:
24:01:b5:97:96:64:34:eb:bb:40:bb:81:c0:d7:e4:35:ed:5f:
51:c4:47:c3:e7:8f:33:01:24:b7:5f:fe:d7:78:4b:f7:ac:48:
52:f6:62:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtymGLKhZYx6SSOvYyUCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTI5N2Y4Y2ZhMWNlNmQzZmUyYzUyNjkxMWM0NjhhOWE2
MzE4ZDAwHhcNMjQwMTAxMDYzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzAyZjFhYjgxM2Y1ZjU0ZGZjZmRlMTk1Yjk4NGI5N2M3YjI5MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6rpzN0HZnCsbNXXIExfPaoIc7cl
hdoM85PuxASaXc15yCsiY1PO7SH1iYXUDVpLO4JQQmYBEimopFKJBh4s2cRVnXYA
TrmIlNTNn38VsCONwEpHYyO7G9yU1rPi9wbJQurLVv7E7wR+kRMTfRh25tAVgzY4
KXgVA1vERz4+wcf1DV00SjLEgSe+7DR1vimZ0r6Tzjk8ERXw627ApKJPJxB+qZgx
jA2XnCU+qIry6VPnPNkD48vJUJAoEs5JTlP4W8BpHwPLs5pbyPjqUbsG+WKudhpo
qLGx2bE15+yFDYgYsDd07jP50x16TPib4RAb6IMV9jmj0ucNCGwu5Qfc0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwC8auBP19U38/eGVuYS5fHspNxMB8GA1UdIwQY
MBaAFAiil/jPoc5tP+LFJpEcRoqaYxjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjct
OTcxMTM5NTE0YmIxLzEvZkFMeHE0RV9YMVRmejk0Wlc1aExsOGV5azNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjctOTcxMTM5NTE0YmIx
LzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstVLMA0G
CSqGSIb3DQEBCwUAA4IBAQAA4DSXbC6InDbYU/jxOXQkWTq3fD6FgJVyCZw8pTir
t1Zq1ZxYipLvxz/n+XwKxejiQid/d3+7PSZchguua8mPotSJ4yqlt6gJoOqLKS5x
euaqQB6LQb4m5jC+M1UUOqM1zVKUqX+2gwMykeKIlhLi2xWdkr5wbranERhZpRDV
83g+IzAuYoHGvaZmYBav3k3Qnif2gmXXYgOwSfi+yRlfudNWeQJks+9WhhvP8o5C
WkPEHeYR/xV7w/o6Vdv9K8ygYz/tKsvMUt36o6Cz7y4TpT3c2jqnPmYkAbWXlmQ0
67tAu4HA1+Q17V9RxEfD548zASS3X/7XeEv3rEhS9mL7
-----END CERTIFICATE-----
Generated at Thu May 2 01:59:07 2024 by rpki-client on console-fra.rpki-client.org