Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/_r6M_xbZNmjJF_UNgUFvnKHb2AM.roa
File: _r6M_xbZNmjJF_UNgUFvnKHb2AM.roa (raw, json)
Hash identifier: qmnfsJbzD3wGitM1QKSGgmMqu5kWcXcy7YR2ZbY6XvM=
Subject key identifier: FE:BE:8C:FF:16:D9:36:68:C9:17:F5:0D:81:41:6F:9C:A1:DB:D8:03
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E8BF1D2FABA0B5356B40618DF44BD
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/_r6M_xbZNmjJF_UNgUFvnKHb2AM.roa
Signing time: Mon 01 Jan 2024 14:30:05 +0000
ROA not before: Mon 01 Jan 2024 14:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46436
IP address blocks: 83.126.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8b:f1:d2:fa:ba:0b:53:56:b4:06:18:df:44:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=febe8cff16d93668c917f50d81416f9ca1dbd803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:0e:f6:05:41:67:9d:13:e9:c2:a0:36:a4:
93:38:d0:08:4d:0e:c6:7b:3a:bb:90:31:b0:38:1a:
df:ef:0f:33:5b:3b:02:e5:b0:b4:94:17:26:8d:f4:
35:9e:d7:f3:da:cf:25:f3:64:c2:ce:70:f7:21:28:
97:7f:ce:95:e4:29:7b:a5:72:ee:7b:96:49:09:56:
07:e0:47:45:6f:76:3a:1a:8f:eb:f1:51:a3:9b:29:
13:2f:5b:c7:f4:b4:50:ba:83:77:2f:89:28:6a:2d:
3b:01:3a:40:ec:76:77:15:06:40:40:8a:51:d6:90:
5f:5d:17:e9:86:60:5a:cc:e5:5a:88:d3:ff:ca:39:
73:ce:9d:9c:ae:bf:22:7f:4f:01:e3:ee:70:48:72:
82:8b:55:b1:ce:2b:9d:95:90:cd:48:a2:d5:cd:ee:
35:f8:8f:d1:b6:7b:78:25:32:29:2c:d5:49:d3:4d:
c6:c6:00:bd:fa:d8:5e:cd:84:eb:73:b2:f2:ba:90:
99:10:84:25:95:d2:8b:5d:0f:6c:d1:a6:f9:db:d3:
75:a5:95:fc:88:c8:86:0b:85:02:2e:6c:7b:f6:6d:
e0:60:09:13:29:aa:7f:ec:39:11:77:1c:c0:28:23:
63:ad:02:9c:83:4c:64:52:d6:7e:dc:53:07:4a:63:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BE:8C:FF:16:D9:36:68:C9:17:F5:0D:81:41:6F:9C:A1:DB:D8:03
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/_r6M_xbZNmjJF_UNgUFvnKHb2AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.54.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2b:0b:1d:9e:e3:a4:56:f7:42:73:f0:88:d9:e3:23:3a:3a:
3c:c7:fe:f5:31:7d:06:ae:1c:bb:69:39:60:69:7f:77:37:3f:
cd:66:11:f6:6b:20:b4:56:6b:76:ae:99:17:d3:be:78:51:8a:
17:ab:e6:f5:69:87:24:f1:8a:64:0b:fc:0c:25:0a:fd:75:2f:
61:df:27:cc:46:8b:41:ca:5e:92:43:29:e3:9e:03:8b:d1:b9:
c6:41:7c:6d:b3:48:4c:f7:1e:13:00:d9:7e:42:2d:0f:44:ec:
c5:3e:46:7c:7f:40:81:17:b2:76:0c:54:2a:21:be:c8:43:c3:
ae:57:8d:64:43:34:cf:de:9e:f3:77:c5:65:35:a9:c1:7c:1a:
a4:55:6c:1a:c8:61:fa:e1:04:4d:69:2a:e6:54:4f:1e:ba:eb:
35:36:1b:ac:29:33:fb:10:13:26:82:b1:ff:8a:19:ea:7e:ee:
32:41:0c:8b:65:51:d5:a0:a0:ac:1d:43:56:ad:ec:39:76:ee:
ed:88:d2:13:cc:17:d2:c4:2b:9f:67:fe:17:ec:d2:1f:ed:17:
34:e1:ca:4a:cf:df:5f:1d:d1:c0:73:62:fa:12:fa:26:77:84:
f2:19:54:81:3e:08:b2:b8:48:2b:5a:29:be:a0:07:e7:bc:13:
9b:f7:ce:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbovx0vq6C1NWtAYY30S9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjQwMTAxMTQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWJlOGNmZjE2ZDkzNjY4YzkxN2Y1MGQ4MTQxNmY5Y2ExZGJkODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vUO9gVBZ50T6cKgNqSTONAITQ7G
ezq7kDGwOBrf7w8zWzsC5bC0lBcmjfQ1ntfz2s8l82TCznD3ISiXf86V5Cl7pXLu
e5ZJCVYH4EdFb3Y6Go/r8VGjmykTL1vH9LRQuoN3L4koai07ATpA7HZ3FQZAQIpR
1pBfXRfphmBazOVaiNP/yjlzzp2crr8if08B4+5wSHKCi1WxziudlZDNSKLVze41
+I/Rtnt4JTIpLNVJ003GxgC9+thezYTrc7LyupCZEIQlldKLXQ9s0ab529N1pZX8
iMiGC4UCLmx79m3gYAkTKap/7DkRdxzAKCNjrQKcg0xkUtZ+3FMHSmPznwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6+jP8W2TZoyRf1DYFBb5yh29gDMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvX3I2TV94YlpObWpKRl9VTmdVRnZuS0hiMkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU342MA0G
CSqGSIb3DQEBCwUAA4IBAQAiKwsdnuOkVvdCc/CI2eMjOjo8x/71MX0Grhy7aTlg
aX93Nz/NZhH2ayC0Vmt2rpkX0754UYoXq+b1aYck8YpkC/wMJQr9dS9h3yfMRotB
yl6SQynjngOL0bnGQXxts0hM9x4TANl+Qi0PROzFPkZ8f0CBF7J2DFQqIb7IQ8Ou
V41kQzTP3p7zd8VlNanBfBqkVWwayGH64QRNaSrmVE8euus1NhusKTP7EBMmgrH/
ihnqfu4yQQyLZVHVoKCsHUNWrew5du7tiNITzBfSxCufZ/4X7NIf7Rc04cpKz99f
HdHAc2L6Evomd4TyGVSBPgiyuEgrWim+oAfnvBOb987e
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:04 2024 by rpki-client on console-fra.rpki-client.org