Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FV5HW0YPDTk0HB7WSRipjCk4-u0.roa
File: FV5HW0YPDTk0HB7WSRipjCk4-u0.roa (raw, json)
Hash identifier: GcsN3KFBAxEdJOwETwZREtmxGDfLzK1ReNksTgLB+lU=
Subject key identifier: 15:5E:47:5B:46:0F:0D:39:34:1C:1E:D6:49:18:A9:8C:29:38:FA:ED
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC72768AF6BFC0F16262C3732397290DD
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FV5HW0YPDTk0HB7WSRipjCk4-u0.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198216
IP address blocks: 157.25.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:68:af:6b:fc:0f:16:26:2c:37:32:39:72:90:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=155e475b460f0d39341c1ed64918a98c2938faed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:58:15:62:d7:c2:42:6c:7c:22:4f:fe:ed:
f0:27:17:53:aa:7c:c9:40:6e:96:4c:81:1d:ba:0b:
9e:53:ef:a4:ec:b5:84:c9:37:79:79:f6:72:ee:de:
5e:07:9d:6a:cf:b5:c5:54:9d:f8:08:42:c3:15:f0:
9f:b2:c6:e3:37:3b:06:83:a1:94:a5:e1:53:4d:d4:
f1:02:3a:38:b6:d3:b0:a7:33:82:50:b9:59:a3:1d:
cc:8c:04:9d:f8:cc:91:24:03:d1:39:1e:b3:4c:e8:
3e:15:10:22:af:41:2b:fe:c6:cc:25:23:85:35:41:
2c:73:1a:f4:6a:37:eb:e4:59:06:89:e5:c8:8f:64:
1e:82:48:5a:f6:f0:8b:cb:50:48:ea:9d:b8:2d:7e:
79:3e:42:bd:f1:0e:a1:b3:64:ae:2e:e9:b9:af:8c:
61:b9:10:b4:c6:87:b8:ad:45:8f:17:e3:97:d3:3f:
6b:17:f5:b5:21:d6:d8:7f:fe:7e:36:ed:d7:67:a5:
73:c5:81:d0:93:e2:82:3c:db:32:e5:aa:5e:d2:82:
9f:ab:da:3c:0e:10:37:74:5d:eb:3d:e9:f4:6c:0b:
b6:41:27:40:fe:0e:a1:31:05:bc:4e:04:9f:70:8f:
96:47:e7:22:73:f8:81:95:82:62:b4:b0:ef:1f:e4:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:47:5B:46:0F:0D:39:34:1C:1E:D6:49:18:A9:8C:29:38:FA:ED
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FV5HW0YPDTk0HB7WSRipjCk4-u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.68.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2f:52:0b:84:26:65:0b:43:08:c8:60:74:0a:02:6b:2f:f5:
9c:9e:4d:fd:77:8a:74:cb:f8:c3:4e:9e:97:64:b5:15:c6:cd:
03:4e:fb:a6:d5:4f:cc:b0:28:5d:80:e5:df:3d:7c:45:4b:b5:
da:ee:d2:28:71:15:2d:61:09:67:25:bb:dc:7b:82:d6:34:77:
01:a1:07:44:b4:1f:bb:9f:e3:58:5d:6a:c5:0d:10:5f:c9:af:
84:f3:0d:96:69:95:b3:49:8a:ab:a3:5a:f9:f1:f6:12:b8:74:
cd:05:16:cc:dc:2a:07:44:63:2b:56:5d:5b:3b:50:8f:f0:23:
ea:90:3e:14:43:7c:a5:fc:10:0c:aa:c8:83:b5:4b:08:d0:21:
1e:05:d2:d4:9b:d7:eb:a6:ae:e2:ef:77:92:d9:b7:5a:e7:ec:
55:43:e7:df:b4:65:0f:05:22:e0:ad:44:f1:3c:48:d3:af:57:
15:9e:bc:92:fe:91:33:8d:b4:7b:17:ed:cc:66:86:d4:b4:fb:
c4:b5:6c:34:be:96:66:dd:8f:18:d2:ae:22:df:dd:2e:91:ab:
e8:b8:06:ef:de:4f:1d:47:96:e7:99:da:f1:20:09:bd:ad:83:
b2:86:68:d9:26:49:5f:e2:ca:66:a7:45:44:8f:08:f1:20:55:
1a:82:22:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ2iva/wPFiYsNzI5cpDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjQwMTAxMjIzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTVlNDc1YjQ2MGYwZDM5MzQxYzFlZDY0OTE4YTk4YzI5MzhmYWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2xYFWLXwkJsfCJP/u3wJxdTqnzJ
QG6WTIEdugueU++k7LWEyTd5efZy7t5eB51qz7XFVJ34CELDFfCfssbjNzsGg6GU
peFTTdTxAjo4ttOwpzOCULlZox3MjASd+MyRJAPROR6zTOg+FRAir0Er/sbMJSOF
NUEscxr0ajfr5FkGieXIj2Qegkha9vCLy1BI6p24LX55PkK98Q6hs2SuLum5r4xh
uRC0xoe4rUWPF+OX0z9rF/W1IdbYf/5+Nu3XZ6VzxYHQk+KCPNsy5ape0oKfq9o8
DhA3dF3rPen0bAu2QSdA/g6hMQW8TgSfcI+WR+cic/iBlYJitLDvH+RzxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVeR1tGDw05NBwe1kkYqYwpOPrtMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvRlY1SFcwWVBEVGswSEI3V1NSaXBqQ2s0LXUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRlEMA0G
CSqGSIb3DQEBCwUAA4IBAQAzL1ILhCZlC0MIyGB0CgJrL/Wcnk39d4p0y/jDTp6X
ZLUVxs0DTvum1U/MsChdgOXfPXxFS7Xa7tIocRUtYQlnJbvce4LWNHcBoQdEtB+7
n+NYXWrFDRBfya+E8w2WaZWzSYqro1r58fYSuHTNBRbM3CoHRGMrVl1bO1CP8CPq
kD4UQ3yl/BAMqsiDtUsI0CEeBdLUm9frpq7i73eS2bda5+xVQ+fftGUPBSLgrUTx
PEjTr1cVnryS/pEzjbR7F+3MZobUtPvEtWw0vpZm3Y8Y0q4i390ukavouAbv3k8d
R5bnmdrxIAm9rYOyhmjZJklf4spmp0VEjwjxIFUagiIq
-----END CERTIFICATE-----
Generated at Sat May 18 14:38:24 2024 by rpki-client on console-ams.rpki-client.org