Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3FUEMaTn8b7938FrilPyJLCWUhQ.roa
File: 3FUEMaTn8b7938FrilPyJLCWUhQ.roa (raw, json)
Hash identifier: s7XWQAedcg+hyX/UwKcmdeAbEoeavHRBUeMz30qqU+g=
Subject key identifier: DC:55:04:31:A4:E7:F1:BE:FD:DF:C1:6B:8A:53:F2:24:B0:96:52:14
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018ECCAEBA8DF257EDE5AA64439C3CAA8498
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3FUEMaTn8b7938FrilPyJLCWUhQ.roa
Signing time: Thu 11 Apr 2024 10:23:06 +0000
ROA not before: Thu 11 Apr 2024 10:23:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208796
IP address blocks: 45.15.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:ae:ba:8d:f2:57:ed:e5:aa:64:43:9c:3c:aa:84:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 11 10:23:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc550431a4e7f1befddfc16b8a53f224b0965214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:76:94:c6:7e:1e:41:7b:83:d7:69:16:27:
c8:b6:b7:88:11:72:c9:9f:4a:d6:37:d0:4e:a2:40:
25:09:d8:e1:d9:0e:b4:73:46:f4:9c:d0:c5:4e:08:
7f:e3:e8:eb:b7:c9:ef:61:28:74:0f:4a:62:97:00:
5d:f6:ab:68:61:d4:80:ba:9b:8f:33:43:4a:f9:72:
13:81:e9:9f:e9:d3:b0:54:92:59:3c:0a:ca:ac:a9:
9c:b9:a7:56:a3:5f:60:15:36:cd:fd:24:6d:74:5a:
82:6c:ae:43:35:84:7c:d0:0d:8d:87:c6:d6:37:96:
dc:a1:e6:16:f0:27:0a:b2:f2:4f:c6:57:d6:75:75:
45:57:94:2f:90:32:45:c8:2e:75:93:16:03:c7:cb:
15:31:83:52:49:6d:f6:89:45:e0:b6:8d:e0:86:d5:
ec:4d:7b:e4:7b:7c:9c:69:9a:19:69:6a:5e:7b:e7:
f9:0d:4d:2f:6e:ac:1c:42:07:5c:54:6d:94:c9:f2:
4b:05:23:ec:e3:5e:ca:82:06:43:b1:a8:cd:1b:0e:
d7:eb:fb:92:45:0d:1a:97:17:0b:ab:66:b6:59:5a:
d8:54:3e:7a:cc:f6:8b:77:3a:68:4e:bd:66:1d:a5:
76:5b:58:a2:a1:af:94:53:d1:36:7e:32:77:96:f2:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:55:04:31:A4:E7:F1:BE:FD:DF:C1:6B:8A:53:F2:24:B0:96:52:14
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3FUEMaTn8b7938FrilPyJLCWUhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.177.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a9:32:a8:c7:cb:3a:94:ed:76:a8:f0:2d:07:79:cb:d5:d8:
7a:e9:4b:a6:bd:d3:20:d7:14:be:0c:33:d3:0b:3e:90:63:1a:
83:81:52:46:09:1f:bd:5f:3f:d9:7e:ed:7d:73:f8:3d:97:9a:
44:e8:08:ae:f1:c5:89:77:d4:73:60:37:70:76:95:14:00:6c:
7c:d1:6f:d0:10:93:34:b3:95:0b:3f:05:00:51:27:c2:b4:3c:
34:d4:49:c0:b1:e9:9c:32:74:a5:37:c1:8d:5a:dd:c1:83:dc:
d7:db:30:52:4d:c4:fb:af:37:35:0f:21:75:4e:30:89:c3:d0:
79:cd:40:26:cc:f8:c4:13:d6:32:3c:9e:9f:b7:5d:48:ce:de:
ff:7b:fc:cf:f1:63:c4:15:a0:1d:ae:f3:49:08:83:7e:26:a1:
5c:9b:c9:d3:86:74:87:42:39:6f:32:e9:f6:26:db:63:6f:a0:
2f:cb:fd:b2:c2:d0:92:f1:0a:41:80:88:b9:62:de:3e:c2:57:
5d:17:f3:23:58:b8:20:9e:f9:9f:42:c6:90:3e:7b:8c:13:dc:
2b:11:6e:91:85:51:d4:67:ea:b2:89:78:b2:f6:18:f4:ae:d7:
d5:2f:37:59:34:fb:5c:d3:48:db:f1:0a:45:72:bc:ca:a8:6e:
50:b2:9d:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7MrrqN8lft5apkQ5w8qoSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwNDExMTAyMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzU1MDQzMWE0ZTdmMWJlZmRkZmMxNmI4YTUzZjIyNGIwOTY1MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplt2lMZ+HkF7g9dpFifItreIEXLJ
n0rWN9BOokAlCdjh2Q60c0b0nNDFTgh/4+jrt8nvYSh0D0pilwBd9qtoYdSAupuP
M0NK+XITgemf6dOwVJJZPArKrKmcuadWo19gFTbN/SRtdFqCbK5DNYR80A2Nh8bW
N5bcoeYW8CcKsvJPxlfWdXVFV5QvkDJFyC51kxYDx8sVMYNSSW32iUXgto3ghtXs
TXvke3ycaZoZaWpee+f5DU0vbqwcQgdcVG2UyfJLBSPs417KggZDsajNGw7X6/uS
RQ0alxcLq2a2WVrYVD56zPaLdzpoTr1mHaV2W1iioa+UU9E2fjJ3lvJ0DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNxVBDGk5/G+/d/Ba4pT8iSwllIUMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvM0ZVRU1hVG44Yjc5MzhGcmlsUHlKTENXVWhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+xMA0G
CSqGSIb3DQEBCwUAA4IBAQBzqTKox8s6lO12qPAtB3nL1dh66UumvdMg1xS+DDPT
Cz6QYxqDgVJGCR+9Xz/Zfu19c/g9l5pE6Aiu8cWJd9RzYDdwdpUUAGx80W/QEJM0
s5ULPwUAUSfCtDw01EnAsemcMnSlN8GNWt3Bg9zX2zBSTcT7rzc1DyF1TjCJw9B5
zUAmzPjEE9YyPJ6ft11Izt7/e/zP8WPEFaAdrvNJCIN+JqFcm8nThnSHQjlvMun2
Jttjb6Avy/2ywtCS8QpBgIi5Yt4+wlddF/MjWLggnvmfQsaQPnuME9wrEW6RhVHU
Z+qyiXiy9hj0rtfVLzdZNPtc00jb8QpFcrzKqG5Qsp0i
-----END CERTIFICATE-----
Generated at Wed May 8 21:34:21 2024 by rpki-client on console-ams.rpki-client.org