Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/FqKnrHVeIXAnHsdFK9T_jMJxG8Y.roa
File: FqKnrHVeIXAnHsdFK9T_jMJxG8Y.roa (raw, json)
Hash identifier: K8v3MSIYzdf5oD4S09F3HS46mj19ycfDyFc1aXn0+oY=
Subject key identifier: 16:A2:A7:AC:75:5E:21:70:27:1E:C7:45:2B:D4:FF:8C:C2:71:1B:C6
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 018CC4246F88997C2CECE07E2CE2DB4D12BB
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/FqKnrHVeIXAnHsdFK9T_jMJxG8Y.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24806
IP address blocks: 194.182.64.0/19 maxlen: 24
80.211.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 04:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6f:88:99:7c:2c:ec:e0:7e:2c:e2:db:4d:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16a2a7ac755e2170271ec7452bd4ff8cc2711bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:36:61:77:92:57:98:0e:19:11:8e:6b:00:94:
b0:db:e3:7b:51:8b:29:19:b0:92:a9:1f:63:89:c9:
e9:95:97:eb:e5:19:c0:c0:ae:d0:64:21:4f:d3:e1:
1c:fb:ef:f7:2f:3b:e8:45:94:d8:ba:75:7b:46:f8:
0d:72:de:16:89:de:cb:56:8b:59:5f:22:5c:19:66:
90:a0:53:b8:2f:a0:98:f2:61:37:b7:c4:49:af:36:
ea:8f:6b:ab:aa:63:d5:14:7f:39:9a:87:3e:f1:27:
9c:54:04:a1:57:59:ab:09:8c:52:9a:d8:92:fd:95:
e7:56:fb:6b:41:fe:40:aa:06:f0:7e:d4:9d:55:02:
87:2e:3b:e0:60:94:c6:7c:fd:53:88:5a:95:f6:f3:
57:bc:79:81:5d:25:66:e3:ae:dc:18:63:a9:d5:2a:
eb:c3:5a:9f:db:88:ef:32:79:51:d9:fc:a6:a2:16:
94:41:85:37:6a:e9:ed:01:e8:b7:e1:e6:21:ec:95:
ec:49:0b:1b:0a:4a:7c:04:4b:52:23:1f:06:f1:e3:
7c:83:5b:5a:6f:a4:39:9f:35:db:b8:49:84:d4:f8:
4e:5e:8f:a8:a0:94:3d:79:6c:36:1f:6f:6d:40:63:
02:69:e2:65:45:f4:39:5d:8c:99:d2:2d:34:b3:57:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A2:A7:AC:75:5E:21:70:27:1E:C7:45:2B:D4:FF:8C:C2:71:1B:C6
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/FqKnrHVeIXAnHsdFK9T_jMJxG8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.211.192.0/19
194.182.64.0/19
Signature Algorithm: sha256WithRSAEncryption
17:69:b2:fb:69:3e:32:37:b1:18:71:2c:a7:64:47:dd:ac:ca:
4b:df:a9:96:3f:e0:51:02:51:2f:23:b9:64:ec:29:06:9c:6c:
7a:bd:59:b6:01:c4:19:20:cc:4a:4f:5c:af:92:c0:72:0f:37:
8e:f7:3e:14:c0:50:5d:ee:a0:9f:ff:99:39:42:4d:78:a2:38:
40:05:36:70:47:32:b3:66:89:d2:66:a5:9f:f0:36:41:57:97:
aa:c5:9b:17:96:81:17:85:14:4e:8a:b5:32:f3:12:eb:46:11:
b7:16:ac:10:9f:f3:e6:e9:de:cf:27:e0:7a:50:be:45:96:0e:
cf:e7:2d:af:1b:85:93:fc:1f:d1:0f:f6:93:94:d3:ae:8e:71:
fb:23:c3:04:f1:dd:ee:68:9b:3a:5a:4e:21:ea:69:ba:ac:d9:
03:03:e1:ea:15:e4:d9:72:dd:bf:9d:af:19:58:54:a7:6e:12:
43:29:2b:a2:30:7a:7f:0d:0e:a5:90:a4:59:0c:3f:4c:bb:0c:
45:b9:f5:5f:58:dd:cf:4b:ab:33:aa:21:48:49:de:cc:d8:b5:
5f:95:21:42:72:d0:40:35:da:ac:e4:d4:ba:04:bd:51:0f:3a:
4c:c8:8c:d3:db:4c:22:77:7f:5d:78:51:c0:0d:88:e5:15:05:
6a:92:d6:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEJG+ImXws7OB+LOLbTRK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjQwMTAxMDgyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmEyYTdhYzc1NWUyMTcwMjcxZWM3NDUyYmQ0ZmY4Y2MyNzExYmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TZhd5JXmA4ZEY5rAJSw2+N7UYsp
GbCSqR9jicnplZfr5RnAwK7QZCFP0+Ec++/3LzvoRZTYunV7RvgNct4Wid7LVotZ
XyJcGWaQoFO4L6CY8mE3t8RJrzbqj2urqmPVFH85moc+8SecVAShV1mrCYxSmtiS
/ZXnVvtrQf5AqgbwftSdVQKHLjvgYJTGfP1TiFqV9vNXvHmBXSVm467cGGOp1Srr
w1qf24jvMnlR2fymohaUQYU3auntAei34eYh7JXsSQsbCkp8BEtSIx8G8eN8g1ta
b6Q5nzXbuEmE1PhOXo+ooJQ9eWw2H29tQGMCaeJlRfQ5XYyZ0i00s1dsZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBaip6x1XiFwJx7HRSvU/4zCcRvGMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvRnFLbnJIVmVJWEFuSHNkRks5VF9qTUp4RzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFUNPAAwQF
wrZAMA0GCSqGSIb3DQEBCwUAA4IBAQAXabL7aT4yN7EYcSynZEfdrMpL36mWP+BR
AlEvI7lk7CkGnGx6vVm2AcQZIMxKT1yvksByDzeO9z4UwFBd7qCf/5k5Qk14ojhA
BTZwRzKzZonSZqWf8DZBV5eqxZsXloEXhRROirUy8xLrRhG3FqwQn/Pm6d7PJ+B6
UL5Flg7P5y2vG4WT/B/RD/aTlNOujnH7I8ME8d3uaJs6Wk4h6mm6rNkDA+HqFeTZ
ct2/na8ZWFSnbhJDKSuiMHp/DQ6lkKRZDD9MuwxFufVfWN3PS6szqiFISd7M2LVf
lSFCctBANdqs5NS6BL1RDzpMyIzT20wid39deFHADYjlFQVqktbL
-----END CERTIFICATE-----
Generated at Sat May 11 09:12:58 2024 by rpki-client on console-fra.rpki-client.org