Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/ftaRvlSk6Fcv_4FumQeGtFgM2x8.roa
File: ftaRvlSk6Fcv_4FumQeGtFgM2x8.roa (raw, json)
Hash identifier: OBZmXJ3vcjd15ZykaewsDps1gDorOpdeRY5hkiu/RiI=
Subject key identifier: 7E:D6:91:BE:54:A4:E8:57:2F:FF:81:6E:99:07:86:B4:58:0C:DB:1F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 018CC56EE177AAB5E1FADE588639BD0F5717
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/ftaRvlSk6Fcv_4FumQeGtFgM2x8.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25297
IP address blocks: 195.234.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e1:77:aa:b5:e1:fa:de:58:86:39:bd:0f:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ed691be54a4e8572fff816e990786b4580cdb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:0a:7a:e3:c1:be:b0:d6:f5:2d:06:b8:87:
e0:1d:7e:bf:ee:d2:26:0d:9c:3b:14:8e:64:fa:02:
81:1c:61:d2:d2:42:30:19:d5:f6:6e:c8:e0:b6:ec:
47:be:70:fd:3f:0f:2a:63:08:0e:ee:aa:9e:d6:e9:
10:38:c1:d2:38:c9:c1:01:9c:ea:f1:c7:fa:1e:08:
67:9b:b1:58:8a:73:f3:be:04:46:6f:7f:b5:35:1a:
b2:37:6c:38:4c:75:98:cb:10:6f:40:37:1d:86:d2:
7d:1a:53:cb:e4:a0:7e:dc:85:70:42:42:be:5b:af:
5e:49:91:8a:b1:ac:18:28:06:8d:e2:00:d7:d5:48:
67:5d:1c:72:12:93:1d:64:6c:e5:d3:dd:13:ba:d6:
30:ce:39:28:f2:e9:98:7e:38:1f:f6:68:9e:d4:74:
b8:7c:3f:55:0e:62:77:39:8e:22:58:fc:d3:c1:9d:
05:65:ae:07:a2:ec:95:3d:a7:a1:9a:fd:8a:64:22:
35:f6:24:db:fc:a3:48:cb:2d:37:97:d7:c4:57:85:
72:f8:0d:d0:9e:13:d1:28:56:eb:c4:d7:94:94:eb:
d5:88:50:67:79:63:22:dc:53:2d:49:a8:00:88:cc:
3e:52:a1:65:61:b5:59:74:5f:76:a5:2b:60:01:9c:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:91:BE:54:A4:E8:57:2F:FF:81:6E:99:07:86:B4:58:0C:DB:1F
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/ftaRvlSk6Fcv_4FumQeGtFgM2x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.167.0/24
Signature Algorithm: sha256WithRSAEncryption
65:39:6f:61:e6:6d:a2:db:4d:7d:59:b3:a4:d3:0f:26:f5:0d:
9a:77:23:d3:10:82:c1:de:5a:8e:95:9d:ff:5d:3e:29:a2:00:
68:9d:79:08:26:32:0c:5f:d1:12:fd:1f:a6:d8:b4:4c:7a:90:
08:e4:ff:f4:fe:a1:37:09:74:26:a8:a8:70:60:5c:56:e7:a8:
ca:b5:af:e4:74:64:e1:fe:03:a4:ab:56:a9:d7:12:3d:f7:98:
29:68:a6:28:b3:a2:30:fa:3b:02:b4:80:b1:39:23:d4:db:49:
5b:cb:58:5d:27:cc:42:41:b8:19:65:11:af:30:6d:73:02:fa:
b3:d2:43:58:92:e9:c1:3b:52:02:5b:b7:db:0a:fb:b1:e0:67:
b6:61:af:10:30:6b:bc:6e:78:7a:af:d4:49:29:5f:43:d9:c2:
22:56:a0:ad:4a:97:2c:c7:24:54:0d:3b:c7:db:58:29:9f:2e:
22:c2:9a:0e:5f:ba:72:67:08:6b:b1:ae:aa:cd:d7:5a:fe:98:
7c:26:b0:1a:05:4f:0e:e4:06:b3:11:89:69:4e:63:df:36:d0:
71:06:83:80:b9:01:61:3d:07:84:14:74:aa:ab:39:7b:df:cc:
27:86:e3:45:dc:ea:93:1e:3c:17:53:ff:9e:3b:de:06:f1:c8:
49:01:ea:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbuF3qrXh+t5Yhjm9D1cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDQxMTY5NzVkM2U4N2JkOGEyOGU2NDNjNjlhMzA4MWRl
MDAxOWYwHhcNMjQwMTAxMTQzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWQ2OTFiZTU0YTRlODU3MmZmZjgxNmU5OTA3ODZiNDU4MGNkYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqkKeuPBvrDW9S0GuIfgHX6/7tIm
DZw7FI5k+gKBHGHS0kIwGdX2bsjgtuxHvnD9Pw8qYwgO7qqe1ukQOMHSOMnBAZzq
8cf6Hghnm7FYinPzvgRGb3+1NRqyN2w4THWYyxBvQDcdhtJ9GlPL5KB+3IVwQkK+
W69eSZGKsawYKAaN4gDX1UhnXRxyEpMdZGzl090TutYwzjko8umYfjgf9mie1HS4
fD9VDmJ3OY4iWPzTwZ0FZa4HouyVPaehmv2KZCI19iTb/KNIyy03l9fEV4Vy+A3Q
nhPRKFbrxNeUlOvViFBneWMi3FMtSagAiMw+UqFlYbVZdF92pStgAZz71QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7Wkb5UpOhXL/+BbpkHhrRYDNsfMB8GA1UdIwQY
MBaAFPLUEWl10+h72KKOZDxpowgd4AGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAt
ZmFhYjljYWUxZTgxLzEvZnRhUnZsU2s2RmN2XzRGdW1RZUd0RmdNMng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAtZmFhYjljYWUxZTgx
LzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qnMA0G
CSqGSIb3DQEBCwUAA4IBAQBlOW9h5m2i2019WbOk0w8m9Q2adyPTEILB3lqOlZ3/
XT4pogBonXkIJjIMX9ES/R+m2LRMepAI5P/0/qE3CXQmqKhwYFxW56jKta/kdGTh
/gOkq1ap1xI995gpaKYos6Iw+jsCtICxOSPU20lby1hdJ8xCQbgZZRGvMG1zAvqz
0kNYkunBO1ICW7fbCvux4Ge2Ya8QMGu8bnh6r9RJKV9D2cIiVqCtSpcsxyRUDTvH
21gpny4iwpoOX7pyZwhrsa6qzdda/ph8JrAaBU8O5AazEYlpTmPfNtBxBoOAuQFh
PQeEFHSqqzl738wnhuNF3OqTHjwXU/+eO94G8chJAeqf
-----END CERTIFICATE-----
Generated at Thu May 30 14:30:39 2024 by rpki-client on console-fra.rpki-client.org