Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Fbo57RYEGOhsZTHnRFHd4SE44i0.roa
File: Fbo57RYEGOhsZTHnRFHd4SE44i0.roa (raw, json)
Hash identifier: /7sO8iyHBGnTR8BBRwHCVM0UMyQuv49b8t8+d4++RfQ=
Subject key identifier: 15:BA:39:ED:16:04:18:E8:6C:65:31:E7:44:51:DD:E1:21:38:E2:2D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79551E4052BECD9C9975597776876BD
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Fbo57RYEGOhsZTHnRFHd4SE44i0.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49496
IP address blocks: 86.104.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:51:e4:05:2b:ec:d9:c9:97:55:97:77:68:76:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15ba39ed160418e86c6531e74451dde12138e22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d8:a4:b6:38:fe:36:24:c4:29:2d:0e:a7:38:
af:76:c8:ce:40:49:ff:97:1d:94:49:a5:ed:0a:37:
bd:6f:b6:bf:69:fb:19:53:fb:c9:8c:fc:b6:32:30:
c7:02:29:1a:11:c9:b8:00:4d:6f:76:bb:8e:03:fb:
48:de:97:89:7d:3d:63:b6:f0:2b:6c:6f:70:e6:01:
3f:b9:75:0e:57:55:fd:55:dd:bf:3a:19:f7:0d:12:
88:8c:3d:9c:54:6f:1a:78:7a:08:f5:0f:73:23:1c:
23:68:97:f5:89:9e:b9:d9:cf:6a:cb:01:71:51:31:
e2:9b:42:da:e7:4b:1c:cb:b5:21:27:8c:e2:69:49:
c7:73:25:55:d1:91:98:6e:29:0b:d3:6a:c7:64:50:
29:9b:47:bf:cc:d0:71:78:fc:7b:cc:45:97:95:73:
90:bd:5a:c3:fc:31:e2:fe:d3:1e:fd:38:ac:a3:8f:
75:12:47:88:08:51:11:26:fe:fa:41:c4:37:74:17:
b0:2d:cf:88:07:1d:c3:dd:07:59:5c:dd:d5:49:80:
49:a6:5a:a0:42:41:3a:06:51:b9:b5:93:5f:13:3d:
02:c7:c1:34:cc:8a:aa:6b:19:58:61:c0:d6:c6:d6:
11:93:5d:aa:e8:1a:b1:a5:f7:ae:55:7d:45:d9:92:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BA:39:ED:16:04:18:E8:6C:65:31:E7:44:51:DD:E1:21:38:E2:2D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Fbo57RYEGOhsZTHnRFHd4SE44i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7a:11:35:97:45:5d:21:e4:9c:c0:f2:e5:eb:a9:b3:87:d3:
46:1d:dd:76:0b:24:eb:a5:45:45:02:02:1d:13:44:08:91:0a:
1b:c4:ed:a3:48:5c:e9:03:50:a0:c9:20:27:44:e3:d0:1b:a6:
2e:b3:37:3d:f7:fa:f2:43:97:31:a8:4e:9a:b6:19:54:60:51:
32:43:66:fe:bd:e6:62:17:30:37:17:1a:05:6c:33:ec:e4:43:
37:6e:6e:6f:c3:86:a1:0b:f7:64:fc:da:1e:d9:ea:c3:a3:35:
44:35:ed:c5:37:b8:ee:e3:f0:ed:8a:6b:dd:ff:d0:f5:65:8a:
90:69:77:ea:a6:92:7d:1d:cb:0f:71:17:c9:f8:92:a1:5b:1c:
11:eb:7a:91:9e:b8:6f:05:00:2f:ff:e2:fa:f2:ab:80:a0:ab:
35:c4:f0:59:f8:21:48:7e:41:91:6b:5f:97:fd:32:a9:7e:a0:
3b:ac:eb:f3:c2:e4:f3:f7:73:09:6a:25:2e:8c:51:52:19:71:
26:29:11:75:63:92:e4:31:00:b0:4c:1e:d4:c9:67:03:80:51:
2f:b0:f8:6a:14:9a:d6:83:62:ff:a1:32:c1:5c:5c:b5:67:4c:
a0:f2:6d:dc:f2:b6:0e:ff:88:44:da:cb:d7:84:10:5c:e0:16:
68:cb:f0:ea
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlVHkBSvs2cmXVZd3aHa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWJhMzllZDE2MDQxOGU4NmM2NTMxZTc0NDUxZGRlMTIxMzhlMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79iktjj+NiTEKS0OpzivdsjOQEn/
lx2USaXtCje9b7a/afsZU/vJjPy2MjDHAikaEcm4AE1vdruOA/tI3peJfT1jtvAr
bG9w5gE/uXUOV1X9Vd2/Ohn3DRKIjD2cVG8aeHoI9Q9zIxwjaJf1iZ652c9qywFx
UTHim0La50scy7UhJ4ziaUnHcyVV0ZGYbikL02rHZFApm0e/zNBxePx7zEWXlXOQ
vVrD/DHi/tMe/Tiso491EkeICFERJv76QcQ3dBewLc+IBx3D3QdZXN3VSYBJplqg
QkE6BlG5tZNfEz0Cx8E0zIqqaxlYYcDWxtYRk12q6BqxpfeuVX1F2ZKWrQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBW6Oe0WBBjobGUx50RR3eEhOOItMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0ZibzU3UllFR09oc1pUSG5SRkhkNFNFNDRpMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWaBIw
DQYJKoZIhvcNAQELBQADggEBAG56ETWXRV0h5JzA8uXrqbOH00Yd3XYLJOulRUUC
Ah0TRAiRChvE7aNIXOkDUKDJICdE49Abpi6zNz33+vJDlzGoTpq2GVRgUTJDZv69
5mIXMDcXGgVsM+zkQzdubm/DhqEL92T82h7Z6sOjNUQ17cU3uO7j8O2Ka93/0PVl
ipBpd+qmkn0dyw9xF8n4kqFbHBHrepGeuG8FAC//4vryq4CgqzXE8Fn4IUh+QZFr
X5f9Mql+oDus6/PC5PP3cwlqJS6MUVIZcSYpEXVjkuQxALBMHtTJZwOAUS+w+GoU
mtaDYv+hMsFcXLVnTKDybdzytg7/iETay9eEEFzgFmjL8Oo=
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:40:06 2024 by rpki-client on console-ams.rpki-client.org