Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/fKWidIEc0eNwLxeVJKTd3LR4kA4.roa
File: fKWidIEc0eNwLxeVJKTd3LR4kA4.roa (raw, json)
Hash identifier: H1pWafU6FxE1qldklcxKp77EsQKXfAWL0Cqjijnr9dE=
Subject key identifier: 7C:A5:A2:74:81:1C:D1:E3:70:2F:17:95:24:A4:DD:DC:B4:78:90:0E
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 018CC3B6B82A11171CECB0E08DE296467FE3
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/fKWidIEc0eNwLxeVJKTd3LR4kA4.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203960
IP address blocks: 185.69.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b8:2a:11:17:1c:ec:b0:e0:8d:e2:96:46:7f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ca5a274811cd1e3702f179524a4dddcb478900e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:93:45:09:95:a7:31:bb:2f:30:2c:0c:b3:
3f:08:87:2a:47:b6:c2:99:36:e7:9a:b6:7f:7f:1a:
58:5f:80:93:b0:cc:6f:3b:bc:65:a4:3c:8d:a3:94:
4f:f6:6c:01:32:4b:d8:48:df:c6:7d:c7:05:8c:4a:
3f:82:8a:a6:18:e1:1d:30:e5:41:53:ca:56:94:ed:
f2:4c:ed:b0:c6:25:3e:ce:4a:a3:86:7d:24:ba:77:
7d:01:79:b1:d5:6d:3e:ea:08:1b:cc:b2:53:18:ad:
0a:9f:54:88:41:b0:97:95:17:f2:09:0e:e4:54:9d:
c4:ce:b5:8d:5c:89:da:cc:63:04:db:ce:ff:a5:e6:
22:16:c3:f1:af:12:5a:b8:71:fa:5b:57:a0:56:05:
d5:91:87:de:32:c2:22:80:27:f0:db:6d:e3:51:09:
9d:b5:3b:29:58:5a:98:f0:a6:ad:03:0e:f8:2f:cf:
f0:81:73:f9:be:66:1d:d2:e5:f2:64:e8:c3:af:08:
91:0b:98:5b:91:dc:2b:35:fa:30:ed:5c:c3:f8:f5:
0e:1f:46:f3:f7:e3:79:17:54:78:53:a1:05:26:01:
42:61:7b:50:ee:05:25:eb:dc:86:77:b9:69:3e:cb:
74:12:c0:33:77:ed:53:31:e2:6e:71:f5:20:10:d8:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:A2:74:81:1C:D1:E3:70:2F:17:95:24:A4:DD:DC:B4:78:90:0E
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/fKWidIEc0eNwLxeVJKTd3LR4kA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.241.0/24
Signature Algorithm: sha256WithRSAEncryption
75:53:70:75:a0:48:e9:34:95:7a:29:e7:c9:5a:90:da:c4:43:
30:a0:35:dd:39:c2:b5:f1:0b:0c:fa:1c:2d:57:1e:cf:4b:e3:
2d:e0:8b:bc:3f:56:71:2b:10:0e:a0:5b:52:10:91:3f:01:73:
e3:d5:47:b2:12:c2:51:d9:72:41:e0:0a:a2:ce:70:83:b1:49:
92:42:16:93:d0:6f:a6:1d:dc:ff:c9:2e:e7:f2:79:57:29:81:
e6:e3:3c:1e:36:ee:f7:7a:68:99:bb:d1:51:70:28:f5:71:0a:
e8:76:5e:18:a2:b2:a5:2b:ee:ea:a9:15:68:5d:4f:49:0e:60:
79:8f:ad:73:75:5f:70:a4:a2:0c:1d:4b:5b:8f:97:36:45:b7:
bd:aa:4e:52:bc:a2:7a:d0:a0:58:6e:fe:5b:bc:a1:3e:8a:02:
f3:1c:49:7b:68:94:6d:3e:5e:ad:21:60:35:33:72:4f:7e:e5:
9b:0f:a9:0d:52:9b:87:84:15:ba:4d:65:5a:ef:0d:ea:e8:00:
01:ea:a3:3d:93:a6:de:91:6a:7d:e5:25:26:11:a8:54:e1:80:
cd:d5:27:37:45:ac:86:4f:a8:d7:ca:86:94:78:be:74:7f:60:
df:dd:d3:2e:1e:24:60:65:e8:b1:7a:3d:60:5a:d5:39:09:81:
78:9c:79:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtrgqERcc7LDgjeKWRn/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODk2YzU0NGI0NjFkOGIwNjJlZmY5ZTNkMmMyOWNkM2Nj
OTYwZWMwHhcNMjQwMTAxMDYyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2E1YTI3NDgxMWNkMWUzNzAyZjE3OTUyNGE0ZGRkY2I0Nzg5MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxWTRQmVpzG7LzAsDLM/CIcqR7bC
mTbnmrZ/fxpYX4CTsMxvO7xlpDyNo5RP9mwBMkvYSN/GfccFjEo/goqmGOEdMOVB
U8pWlO3yTO2wxiU+zkqjhn0kund9AXmx1W0+6ggbzLJTGK0Kn1SIQbCXlRfyCQ7k
VJ3EzrWNXInazGME287/peYiFsPxrxJauHH6W1egVgXVkYfeMsIigCfw223jUQmd
tTspWFqY8KatAw74L8/wgXP5vmYd0uXyZOjDrwiRC5hbkdwrNfow7VzD+PUOH0bz
9+N5F1R4U6EFJgFCYXtQ7gUl69yGd7lpPst0EsAzd+1TMeJucfUgENiC7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHylonSBHNHjcC8XlSSk3dy0eJAOMB8GA1UdIwQY
MBaAFHSJbFRLRh2LBi7/nj0sKc08yWDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2Yt
Y2YxNzQwODIzNDAwLzEvZktXaWRJRWMwZU53THhlVkpLVGQzTFI0a0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2YtY2YxNzQwODIzNDAw
LzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUXxMA0G
CSqGSIb3DQEBCwUAA4IBAQB1U3B1oEjpNJV6KefJWpDaxEMwoDXdOcK18QsM+hwt
Vx7PS+Mt4Iu8P1ZxKxAOoFtSEJE/AXPj1UeyEsJR2XJB4AqiznCDsUmSQhaT0G+m
Hdz/yS7n8nlXKYHm4zweNu73emiZu9FRcCj1cQrodl4YorKlK+7qqRVoXU9JDmB5
j61zdV9wpKIMHUtbj5c2Rbe9qk5SvKJ60KBYbv5bvKE+igLzHEl7aJRtPl6tIWA1
M3JPfuWbD6kNUpuHhBW6TWVa7w3q6AAB6qM9k6bekWp95SUmEahU4YDN1Sc3RayG
T6jXyoaUeL50f2Df3dMuHiRgZeixej1gWtU5CYF4nHmU
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:02:26 2024 by rpki-client on console-fra.rpki-client.org