Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FVWbiuAqvWWyjVtKU93ZcR9NW2g.roa
File: FVWbiuAqvWWyjVtKU93ZcR9NW2g.roa (raw, json)
Hash identifier: EbRWFXAD1MfjiQTfpuCZeYm1hPaLD7xiucGYMXtFODE=
Subject key identifier: 15:55:9B:8A:E0:2A:BD:65:B2:8D:5B:4A:53:DD:D9:71:1F:4D:5B:68
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DD9E7DF9EC0B51E25EE021E1307DE432E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FVWbiuAqvWWyjVtKU93ZcR9NW2g.roa
Signing time: Sat 24 Feb 2024 06:57:48 +0000
ROA not before: Sat 24 Feb 2024 06:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 89.34.229.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d9:e7:df:9e:c0:b5:1e:25:ee:02:1e:13:07:de:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 24 06:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15559b8ae02abd65b28d5b4a53ddd9711f4d5b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:71:9e:b6:47:e1:1c:9a:d6:3e:8e:5e:3b:
fd:84:17:bb:9c:f2:ac:75:56:82:db:4a:c9:21:99:
b5:a8:cc:06:ea:f3:45:47:10:c3:c0:ea:ff:b1:e3:
20:b7:00:10:f9:a2:b0:cd:3b:30:b9:46:6d:0c:9a:
25:f9:d7:70:59:76:0c:e5:f6:fc:49:63:45:7e:0b:
8e:60:6a:5a:48:92:46:fc:38:2d:2d:e9:09:fe:12:
0c:49:44:36:ee:22:2f:c6:dd:1e:8f:49:74:5f:9e:
0d:05:05:4f:5a:ee:0e:75:fd:15:1c:90:e5:4b:ae:
6c:63:32:a0:b2:f7:04:2f:87:7b:a8:c1:6e:87:73:
ce:66:df:be:4d:0c:42:0d:f5:66:24:b1:4d:1b:95:
60:25:c1:87:d0:34:48:c4:6f:f2:c0:57:d6:f5:4b:
0b:b2:52:bb:2e:9a:a5:5c:9a:fb:11:1d:69:b2:0f:
bf:cb:1e:85:f6:3a:c5:7f:25:a6:8d:96:65:8d:83:
49:8d:4d:e6:9c:61:8c:c7:e7:d3:c2:a1:4e:b8:b8:
9f:ad:cd:ac:f3:8c:67:0e:fe:87:7c:f7:56:9b:f6:
ee:1c:44:c7:99:ae:0b:0a:80:14:6d:ef:85:a3:cc:
a0:6d:ff:df:56:e6:a1:c4:db:42:9e:1b:52:30:b2:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:9B:8A:E0:2A:BD:65:B2:8D:5B:4A:53:DD:D9:71:1F:4D:5B:68
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FVWbiuAqvWWyjVtKU93ZcR9NW2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.229.0/24
89.47.114.0/24
89.47.121.0/24
Signature Algorithm: sha256WithRSAEncryption
34:17:63:0f:62:a4:36:28:26:78:b2:9c:cf:b0:ff:c0:1e:d9:
10:97:e1:ae:14:e7:ec:96:fd:63:cc:1e:25:a5:57:a8:91:50:
be:6d:ac:65:23:57:ea:7f:90:8b:7a:e5:84:ec:9f:61:d2:d2:
20:58:66:80:42:c6:6d:c3:e7:61:57:47:12:ea:12:d8:28:40:
f3:91:ce:dd:67:9a:7a:81:86:4f:93:60:97:24:a7:75:30:99:
04:ec:3d:91:6f:1d:fe:f1:9c:e2:0d:35:43:a9:10:3e:32:40:
a2:3d:8f:58:7c:a2:32:ac:47:46:af:e9:bb:db:b8:d0:ed:13:
81:d9:b4:f4:be:09:2f:28:cd:57:ee:5f:2d:41:45:33:ae:a5:
db:73:de:52:41:93:da:83:51:d5:c9:40:3b:33:82:ba:7b:f1:
1c:8f:b1:25:e7:f9:84:2f:b0:a9:d3:fc:6d:cb:d9:89:69:40:
53:00:c2:0e:ea:b0:35:b7:6c:72:95:5d:37:78:da:b2:c4:0b:
43:98:35:31:18:24:f0:a4:04:86:0d:d4:19:29:06:b3:e1:b9:
a0:b3:aa:e6:c5:06:3f:71:e0:42:3e:1b:19:f3:b6:42:f8:44:
51:1c:fc:08:ed:0b:5c:37:db:ef:9f:15:b1:cc:f4:ad:c7:d0:
09:64:68:65
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY3Z59+ewLUeJe4CHhMH3kMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMjI0MDY1NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTU1OWI4YWUwMmFiZDY1YjI4ZDViNGE1M2RkZDk3MTFmNGQ1YjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg5xnrZH4Rya1j6OXjv9hBe7nPKs
dVaC20rJIZm1qMwG6vNFRxDDwOr/seMgtwAQ+aKwzTswuUZtDJol+ddwWXYM5fb8
SWNFfguOYGpaSJJG/DgtLekJ/hIMSUQ27iIvxt0ej0l0X54NBQVPWu4Odf0VHJDl
S65sYzKgsvcEL4d7qMFuh3POZt++TQxCDfVmJLFNG5VgJcGH0DRIxG/ywFfW9UsL
slK7LpqlXJr7ER1psg+/yx6F9jrFfyWmjZZljYNJjU3mnGGMx+fTwqFOuLifrc2s
84xnDv6HfPdWm/buHETHma4LCoAUbe+Fo8ygbf/fVuahxNtCnhtSMLLXdwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBVVm4rgKr1lso1bSlPd2XEfTVtoMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvRlZXYml1QXF2V1d5alZ0S1U5M1pjUjlOVzJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSLlAwQA
WS9yAwQAWS95MA0GCSqGSIb3DQEBCwUAA4IBAQA0F2MPYqQ2KCZ4spzPsP/AHtkQ
l+GuFOfslv1jzB4lpVeokVC+baxlI1fqf5CLeuWE7J9h0tIgWGaAQsZtw+dhV0cS
6hLYKEDzkc7dZ5p6gYZPk2CXJKd1MJkE7D2Rbx3+8ZziDTVDqRA+MkCiPY9YfKIy
rEdGr+m727jQ7ROB2bT0vgkvKM1X7l8tQUUzrqXbc95SQZPag1HVyUA7M4K6e/Ec
j7El5/mEL7Cp0/xty9mJaUBTAMIO6rA1t2xylV03eNqyxAtDmDUxGCTwpASGDdQZ
KQaz4bmgs6rmxQY/ceBCPhsZ87ZC+ERRHPwI7QtcN9vvnxWxzPStx9AJZGhl
-----END CERTIFICATE-----
Generated at Sun May 5 12:49:44 2024 by rpki-client on console-ams.rpki-client.org