Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FkoYIoWSBeZ8a-nhQtN6839TOmI.roa
File: FkoYIoWSBeZ8a-nhQtN6839TOmI.roa (raw, json)
Hash identifier: sM5/eVFWfDuC35aDtRHxRHtxJltL5PpOmwYrAlidLAU=
Subject key identifier: 16:4A:18:22:85:92:05:E6:7C:6B:E9:E1:42:D3:7A:F3:7F:53:3A:62
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019428241AA7DFE00B6D57A10598ACDD753C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FkoYIoWSBeZ8a-nhQtN6839TOmI.roa
Signing time: Thu 02 Jan 2025 17:50:42 +0000
ROA not before: Thu 02 Jan 2025 17:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398779
IP address blocks: 92.114.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:1a:a7:df:e0:0b:6d:57:a1:05:98:ac:dd:75:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164a1822859205e67c6be9e142d37af37f533a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:64:32:ff:66:8e:17:b9:60:a0:4b:f5:75:
85:1e:0f:e9:ea:be:92:10:da:ff:59:38:d4:ed:8f:
6a:a1:0f:60:64:82:58:46:c9:e9:ec:00:c1:53:87:
6c:a6:3d:4c:71:a8:e6:07:e1:18:ab:b4:2c:b8:63:
22:d4:5d:56:8c:63:dc:9e:e2:d6:e7:68:df:ea:3f:
2c:24:82:12:ca:25:6d:f4:8b:c2:26:a4:ec:f2:78:
dc:c7:a1:2f:06:c8:b2:ac:bb:fe:d0:a5:6e:f7:2a:
78:4c:59:e6:58:41:64:f1:34:c8:27:df:6b:5d:a8:
af:59:d6:b7:e2:13:5c:07:94:e7:8c:1b:de:84:e1:
0b:68:0e:13:d2:b9:61:ce:10:ce:77:1e:4f:07:55:
36:e4:a6:2f:26:98:6e:2a:ea:9d:b4:85:50:40:0a:
bc:20:b4:b2:26:51:f8:e5:b6:2b:05:2d:b0:17:bd:
10:a3:7e:56:a9:2c:91:7e:4a:fc:13:d9:5d:32:80:
cb:1e:46:57:d6:01:d4:5a:9a:95:84:c0:06:3c:e5:
9d:a0:65:3b:f1:86:6a:3b:2e:63:63:12:f8:93:91:
dd:12:60:d6:50:df:02:6a:28:b6:04:c2:ec:d6:4c:
2a:10:e4:81:c3:bb:d5:a5:d5:c7:f9:dd:f6:c5:09:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:18:22:85:92:05:E6:7C:6B:E9:E1:42:D3:7A:F3:7F:53:3A:62
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FkoYIoWSBeZ8a-nhQtN6839TOmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
37:e1:7a:4e:7c:d3:5e:fd:0c:93:e7:5c:a1:ce:97:da:80:21:
20:e9:4e:ab:ca:ef:87:95:18:b8:9c:b3:e8:27:d4:9f:f5:73:
0d:1e:de:2a:b7:02:5c:f1:01:a3:4a:70:0d:55:74:51:f4:be:
f1:bb:8a:3e:bd:e4:d9:22:84:cf:08:c0:5f:a6:c9:8e:5e:61:
3d:83:d3:00:6c:4d:28:6d:cc:58:85:21:13:88:ce:7f:b8:8f:
a4:21:85:a7:83:15:86:b6:c8:c7:02:f6:0a:d5:60:93:ec:f2:
e7:df:72:3a:6d:18:1e:03:b7:60:1e:ff:35:c7:68:62:af:e8:
65:d5:2c:58:88:13:49:9c:b6:cb:51:2d:a3:29:12:6a:f0:7c:
33:4c:ed:f7:92:c0:cd:01:41:b0:7d:f5:4b:30:e9:24:e1:0a:
07:b3:86:43:22:26:7d:f9:a4:f2:db:1d:ec:34:7f:d3:7e:6c:
ac:af:99:54:07:74:69:8a:46:e0:30:a6:a6:80:6c:0f:c1:11:
9f:91:e5:19:82:12:23:b3:58:da:4b:ba:f5:eb:a2:c9:8e:02:
01:e4:c1:b2:28:5c:93:dc:e7:25:94:5c:0f:10:0a:2b:25:a7:
57:3c:0b:58:6d:48:ef:9c:08:c2:02:96:80:1b:ce:e2:76:00:
67:92:8b:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJBqn3+ALbVehBZis3XU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUwMTAyMTc1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRhMTgyMjg1OTIwNWU2N2M2YmU5ZTE0MmQzN2FmMzdmNTMzYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuhkMv9mjhe5YKBL9XWFHg/p6r6S
ENr/WTjU7Y9qoQ9gZIJYRsnp7ADBU4dspj1McajmB+EYq7QsuGMi1F1WjGPcnuLW
52jf6j8sJIISyiVt9IvCJqTs8njcx6EvBsiyrLv+0KVu9yp4TFnmWEFk8TTIJ99r
XaivWda34hNcB5TnjBvehOELaA4T0rlhzhDOdx5PB1U25KYvJphuKuqdtIVQQAq8
ILSyJlH45bYrBS2wF70Qo35WqSyRfkr8E9ldMoDLHkZX1gHUWpqVhMAGPOWdoGU7
8YZqOy5jYxL4k5HdEmDWUN8Caii2BMLs1kwqEOSBw7vVpdXH+d32xQnYDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZKGCKFkgXmfGvp4ULTevN/UzpiMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvRmtvWUlvV1NCZVo4YS1uaFF0TjY4MzlUT21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHIoMA0G
CSqGSIb3DQEBCwUAA4IBAQA34XpOfNNe/QyT51yhzpfagCEg6U6ryu+HlRi4nLPo
J9Sf9XMNHt4qtwJc8QGjSnANVXRR9L7xu4o+veTZIoTPCMBfpsmOXmE9g9MAbE0o
bcxYhSETiM5/uI+kIYWngxWGtsjHAvYK1WCT7PLn33I6bRgeA7dgHv81x2hir+hl
1SxYiBNJnLbLUS2jKRJq8HwzTO33ksDNAUGwffVLMOkk4QoHs4ZDIiZ9+aTy2x3s
NH/Tfmysr5lUB3RpikbgMKamgGwPwRGfkeUZghIjs1jaS7r166LJjgIB5MGyKFyT
3OcllFwPEAorJadXPAtYbUjvnAjCApaAG87idgBnkovl
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:16 2025 by rpki-client