Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ffnhc51zNfLowpuOc9q7IHDThrI.roa
File: ffnhc51zNfLowpuOc9q7IHDThrI.roa (raw, json)
Hash identifier: forP1JRbeDYPRS9O6jaeqMbRr0CucLMLspJyV5vPBiA=
Subject key identifier: 7D:F9:E1:73:9D:73:35:F2:E8:C2:9B:8E:73:DA:BB:20:70:D3:86:B2
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2FCE51245957D76EDF8F9AC899B8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ffnhc51zNfLowpuOc9q7IHDThrI.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 89.33.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2f:ce:51:24:59:57:d7:6e:df:8f:9a:c8:99:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7df9e1739d7335f2e8c29b8e73dabb2070d386b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e6:c2:9c:97:1b:2e:5d:2f:9c:2c:11:69:32:
21:55:96:ce:41:f4:61:88:68:f3:04:e6:bf:60:2e:
68:9c:66:c1:8d:bd:38:e9:02:3e:dc:0d:19:7d:e7:
74:b5:5b:c8:c5:b3:f2:de:ad:7e:34:01:9f:24:51:
c2:62:14:06:42:92:26:ea:22:aa:62:26:48:b0:13:
73:03:4a:88:9f:41:07:d9:91:15:45:8c:11:ec:e2:
07:a2:04:c4:11:31:cc:43:e6:f2:93:99:53:38:9b:
59:4b:13:19:64:56:ed:be:8c:a2:c2:03:c6:00:14:
b8:14:e1:69:13:98:e9:cc:c9:50:dd:70:3c:e1:c8:
7e:90:04:82:5d:d9:be:96:bc:c8:81:f8:45:b5:16:
c1:24:b2:42:bc:f6:eb:67:e8:c1:5b:44:b0:36:33:
b7:d5:fa:ff:13:60:53:a3:c3:44:ec:cd:0d:49:e7:
47:4e:a7:9d:8c:11:23:70:ef:ba:7f:91:83:29:b2:
36:9f:4b:0a:85:cf:0b:af:3e:c1:2a:68:06:f0:09:
b1:02:63:a0:e9:57:62:a2:06:6b:a4:d7:01:97:73:
c9:2c:ea:a9:6c:1a:5b:c1:69:32:fa:61:33:2d:50:
00:76:36:c3:4c:31:aa:0a:ed:7d:06:75:5d:d7:29:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F9:E1:73:9D:73:35:F2:E8:C2:9B:8E:73:DA:BB:20:70:D3:86:B2
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ffnhc51zNfLowpuOc9q7IHDThrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
Signature Algorithm: sha256WithRSAEncryption
11:25:55:32:7a:5b:54:38:32:c9:18:12:1c:13:6e:95:e7:e7:
1c:e0:11:33:50:73:12:55:68:5d:5f:e0:82:b7:20:a0:8b:d0:
cb:38:2b:8c:c2:1b:54:5b:e8:92:64:f1:93:c3:0f:e8:5f:b7:
11:d3:82:21:f4:a9:a8:f0:35:a1:d2:df:24:e0:77:ab:69:b8:
24:48:5c:f7:81:01:eb:7a:51:75:58:33:5e:66:c4:25:ab:d7:
28:91:b4:0f:fc:b9:a7:09:17:4c:5a:66:fe:f6:35:9c:ba:90:
28:f8:02:60:f0:25:cc:d5:ea:88:e7:f8:44:c7:a5:e9:97:f1:
ad:c5:7b:c2:51:1b:97:f5:d2:be:20:42:23:00:cb:98:4e:b5:
96:63:ed:34:5e:8f:de:00:f1:72:da:3d:fe:d2:79:1e:0c:05:
60:e6:3f:38:21:01:36:04:d0:ca:2b:39:2c:3a:50:63:c2:35:
82:21:a3:f5:b4:f6:71:7e:19:a9:3a:f4:21:8e:cd:e7:80:9b:
c5:b0:19:59:29:e4:8d:26:32:ed:bb:14:2e:b2:7e:86:d7:da:
82:75:12:a7:05:f1:41:aa:cc:15:e0:b8:e6:3a:7d:5b:f1:c7:
37:13:5b:0b:8e:64:dd:5c:c4:c8:39:d3:92:e2:4e:cf:a1:66:
04:b2:a7:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbS/OUSRZV9du34+ayJm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGY5ZTE3MzlkNzMzNWYyZThjMjliOGU3M2RhYmIyMDcwZDM4NmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgObCnJcbLl0vnCwRaTIhVZbOQfRh
iGjzBOa/YC5onGbBjb046QI+3A0Zfed0tVvIxbPy3q1+NAGfJFHCYhQGQpIm6iKq
YiZIsBNzA0qIn0EH2ZEVRYwR7OIHogTEETHMQ+byk5lTOJtZSxMZZFbtvoyiwgPG
ABS4FOFpE5jpzMlQ3XA84ch+kASCXdm+lrzIgfhFtRbBJLJCvPbrZ+jBW0SwNjO3
1fr/E2BTo8NE7M0NSedHTqedjBEjcO+6f5GDKbI2n0sKhc8Lrz7BKmgG8AmxAmOg
6VdiogZrpNcBl3PJLOqpbBpbwWky+mEzLVAAdjbDTDGqCu19BnVd1yla9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH354XOdczXy6MKbjnPauyBw04ayMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvZmZuaGM1MXpOZkxvd3B1T2M5cTdJSERUaHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHCMA0G
CSqGSIb3DQEBCwUAA4IBAQARJVUyeltUODLJGBIcE26V5+cc4BEzUHMSVWhdX+CC
tyCgi9DLOCuMwhtUW+iSZPGTww/oX7cR04Ih9Kmo8DWh0t8k4HerabgkSFz3gQHr
elF1WDNeZsQlq9cokbQP/LmnCRdMWmb+9jWcupAo+AJg8CXM1eqI5/hEx6Xpl/Gt
xXvCURuX9dK+IEIjAMuYTrWWY+00Xo/eAPFy2j3+0nkeDAVg5j84IQE2BNDKKzks
OlBjwjWCIaP1tPZxfhmpOvQhjs3ngJvFsBlZKeSNJjLtuxQusn6G19qCdRKnBfFB
qswV4LjmOn1b8cc3E1sLjmTdXMTIOdOS4k7PoWYEsqcC
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:18 2024 by rpki-client on console-ams.rpki-client.org