Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FWlpr36UsfF17Z2QrFjIzOrD-v4.roa
File: FWlpr36UsfF17Z2QrFjIzOrD-v4.roa (raw, json)
Hash identifier: aIAtDYem8JRxqgJPAX7CVgzGVTTJIiFKXleyLKznHBg=
Subject key identifier: 15:69:69:AF:7E:94:B1:F1:75:ED:9D:90:AC:58:C8:CC:EA:C3:FA:FE
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018EBCA4652E409216E330A9357C1C50F0E0
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FWlpr36UsfF17Z2QrFjIzOrD-v4.roa
Signing time: Mon 08 Apr 2024 07:37:54 +0000
ROA not before: Mon 08 Apr 2024 07:37:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 62.112.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:a4:65:2e:40:92:16:e3:30:a9:35:7c:1c:50:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Apr 8 07:37:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=156969af7e94b1f175ed9d90ac58c8cceac3fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:ed:2a:26:32:c2:61:11:8b:54:c3:32:12:
b7:4c:60:fb:1b:d9:c7:e9:e9:97:5e:ae:d2:4f:ae:
4a:ee:54:13:b8:4d:e3:08:9d:39:15:c9:5a:01:a2:
93:f2:89:c8:0b:f4:be:24:78:61:a2:eb:92:80:83:
fc:59:94:aa:4a:15:b4:61:a4:d0:7b:de:75:b6:c2:
56:73:60:9b:c5:47:7f:1a:68:e7:64:7b:aa:65:26:
00:97:58:50:8b:fb:d5:96:4f:e6:f3:ab:7c:49:c9:
dd:de:87:b0:14:c2:95:e3:88:56:92:b7:4b:11:c8:
8f:aa:f5:9c:07:0c:d6:2d:40:c8:27:97:ef:27:1e:
4b:51:46:44:71:fb:fa:b4:9a:53:7f:bc:9b:f9:fc:
18:d0:da:3f:0e:16:1a:29:11:52:1b:ff:d0:42:3c:
5b:4a:78:00:bc:6a:f0:a9:a8:af:1c:f9:20:ea:73:
4a:13:7b:da:f4:85:ff:06:92:f3:90:85:46:71:94:
cd:91:58:9c:46:f9:ce:03:5c:0c:44:52:f5:5a:11:
c9:46:50:ad:f0:b7:f4:22:ba:b5:de:a8:ef:4a:28:
a3:ed:95:91:36:e9:67:7e:5b:e8:8d:16:89:cc:14:
90:49:7c:ca:d7:0e:30:74:6d:72:9c:fc:f3:ad:d5:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:69:AF:7E:94:B1:F1:75:ED:9D:90:AC:58:C8:CC:EA:C3:FA:FE
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/FWlpr36UsfF17Z2QrFjIzOrD-v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.206.0/24
Signature Algorithm: sha256WithRSAEncryption
82:56:0a:0d:2e:b4:d5:48:57:d8:9c:26:e8:48:b4:2c:18:2e:
33:1f:fc:a7:43:a7:d8:60:cd:1f:68:9e:0a:3e:60:53:72:16:
c3:af:58:c8:c9:e2:af:7e:13:1f:23:e9:25:5e:95:ec:b8:76:
a8:ee:e9:0e:36:64:1a:a6:ad:9c:1f:58:16:68:71:e6:2f:90:
ec:fa:cd:db:88:5d:28:47:4d:29:46:75:76:01:96:6a:16:e2:
7e:1f:ba:c4:e2:36:26:d5:05:69:51:4d:9e:58:f8:0b:7d:27:
0d:e4:f7:d9:1b:71:0d:d8:b7:ca:26:1a:51:46:ee:52:b9:d2:
96:dc:5f:4c:9c:e3:62:34:39:ba:2a:bd:e1:e6:f7:a3:b5:37:
5a:a1:1b:d1:05:47:cd:a0:34:8c:55:e4:a9:ff:53:5a:ba:37:
ca:27:c8:c6:a7:30:fb:d3:78:33:a2:8c:77:4d:60:b9:46:a8:
79:9f:b4:d8:d8:aa:54:8a:0d:70:4f:b4:4f:ed:ec:b0:3c:5f:
64:fd:e1:39:9e:6c:60:3e:8a:f8:f0:13:0c:ac:00:ed:3f:7d:
a9:3c:94:fc:74:17:e0:91:84:da:a9:97:3e:e5:c2:a8:cc:3c:
2b:4f:bd:73:d9:4a:d5:0f:61:ff:b0:4a:18:76:4b:d3:4a:43:
f0:eb:ad:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY68pGUuQJIW4zCpNXwcUPDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjQwNDA4MDczNzU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTY5NjlhZjdlOTRiMWYxNzVlZDlkOTBhYzU4YzhjY2VhYzNmYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTHtKiYywmERi1TDMhK3TGD7G9nH
6emXXq7ST65K7lQTuE3jCJ05FclaAaKT8onIC/S+JHhhouuSgIP8WZSqShW0YaTQ
e951tsJWc2CbxUd/GmjnZHuqZSYAl1hQi/vVlk/m86t8Scnd3oewFMKV44hWkrdL
EciPqvWcBwzWLUDIJ5fvJx5LUUZEcfv6tJpTf7yb+fwY0No/DhYaKRFSG//QQjxb
SngAvGrwqaivHPkg6nNKE3va9IX/BpLzkIVGcZTNkVicRvnOA1wMRFL1WhHJRlCt
8Lf0Irq13qjvSiij7ZWRNulnflvojRaJzBSQSXzK1w4wdG1ynPzzrdW+dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVpaa9+lLHxde2dkKxYyMzqw/r+MB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvRldscHIzNlVzZkYxN1oyUXJGakl6T3JELXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnDOMA0G
CSqGSIb3DQEBCwUAA4IBAQCCVgoNLrTVSFfYnCboSLQsGC4zH/ynQ6fYYM0faJ4K
PmBTchbDr1jIyeKvfhMfI+klXpXsuHao7ukONmQapq2cH1gWaHHmL5Ds+s3biF0o
R00pRnV2AZZqFuJ+H7rE4jYm1QVpUU2eWPgLfScN5PfZG3EN2LfKJhpRRu5SudKW
3F9MnONiNDm6Kr3h5vejtTdaoRvRBUfNoDSMVeSp/1NaujfKJ8jGpzD703gzoox3
TWC5Rqh5n7TY2KpUig1wT7RP7eywPF9k/eE5nmxgPor48BMMrADtP32pPJT8dBfg
kYTaqZc+5cKozDwrT71z2UrVD2H/sEoYdkvTSkPw661V
-----END CERTIFICATE-----
Generated at Mon Jun 10 23:01:29 2024 by rpki-client on console-fra.rpki-client.org