Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/hKFDZc1s1biD8IUx6cpGHgwhywY.roa
File: hKFDZc1s1biD8IUx6cpGHgwhywY.roa (raw, json)
Hash identifier: sQRMUYorKZxAQ33YmwFmyxyHKSWafP5XfHTJ/wLZZoY=
Subject key identifier: 84:A1:43:65:CD:6C:D5:B8:83:F0:85:31:E9:CA:46:1E:0C:21:CB:06
Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial: 01903029A7047EAD9E85989EA21E16C047F6
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/hKFDZc1s1biD8IUx6cpGHgwhywY.roa
Signing time: Wed 19 Jun 2024 11:02:34 +0000
ROA not before: Wed 19 Jun 2024 11:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215700
IP address blocks: 95.128.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:29:a7:04:7e:ad:9e:85:98:9e:a2:1e:16:c0:47:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Validity
Not Before: Jun 19 11:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84a14365cd6cd5b883f08531e9ca461e0c21cb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:24:c0:4a:46:b7:d1:0b:77:bc:a3:33:b7:
01:e2:7a:dd:4d:25:86:a2:b6:30:48:90:3d:6e:7c:
f4:f7:e3:dd:8a:99:b0:1e:3a:25:71:21:fa:70:c8:
b9:29:4d:4d:87:c3:28:d2:8d:7c:eb:06:c1:59:b0:
86:d0:ec:e8:80:0d:35:87:c9:3a:81:b3:81:64:5f:
b9:93:1c:c3:3b:2e:b3:fd:c4:c4:73:75:03:64:10:
a5:74:01:9b:ae:54:ef:c0:b1:de:31:27:94:39:2c:
39:65:09:e4:89:95:c7:fe:f8:05:79:73:b5:e2:69:
2e:29:d2:10:66:91:d6:4a:de:fd:4e:22:3c:b8:ac:
1a:fe:ae:d0:b1:13:a8:ad:3f:27:ac:a3:88:e1:a1:
90:e4:28:e5:ba:78:39:ec:ab:33:49:97:fe:20:4e:
6b:c9:5e:c5:3b:6a:37:9f:49:5e:3d:02:c8:ab:6f:
5f:90:f2:6f:4b:3c:45:7b:28:3f:c5:a4:44:59:90:
ce:0a:c6:8f:df:92:ab:da:43:75:20:27:cf:67:d4:
e4:fe:27:4a:b3:e9:4a:2c:97:f3:60:5b:56:10:b2:
fd:fb:a4:0d:78:d6:f7:b4:16:2e:6c:35:98:6a:fa:
8f:58:3f:3b:b0:58:f8:59:85:da:9d:98:45:b7:0b:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:43:65:CD:6C:D5:B8:83:F0:85:31:E9:CA:46:1E:0C:21:CB:06
X509v3 Authority Key Identifier:
keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/hKFDZc1s1biD8IUx6cpGHgwhywY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7d:bc:2b:87:c6:40:c0:17:05:02:d6:95:91:6a:6c:c1:da:
b0:c5:fa:df:c3:83:02:11:35:02:f7:00:dc:8a:1e:01:29:a4:
c7:0d:1c:00:c9:c1:10:5b:0b:e2:5e:7a:b0:2d:61:b5:42:11:
a3:cf:5b:b4:b8:98:04:40:a1:7e:0c:da:83:f6:73:7d:03:38:
b0:35:9f:ee:30:f0:2a:af:39:16:79:38:29:97:6b:8a:c0:be:
b2:8d:35:47:2e:99:07:6a:e4:0d:e3:8c:2b:3f:d7:2b:38:9e:
49:e6:7f:85:7c:a3:85:0b:b6:86:30:51:12:4d:47:5f:45:54:
8f:0d:b1:82:74:07:3b:c5:4e:7a:b8:c0:a0:84:11:5f:55:6e:
90:8c:4b:26:89:89:92:bf:6e:8b:54:24:ef:b1:6f:1f:56:0d:
bc:d5:71:90:6e:1b:fe:ae:cf:7f:6c:12:01:ae:aa:2d:07:60:
4b:af:bd:51:b0:45:5c:aa:f4:83:fb:0a:c1:52:92:08:45:16:
c5:73:33:b2:d8:70:12:65:3a:12:29:c4:3e:df:86:f3:46:9d:
7c:78:bc:70:0a:9b:7b:75:9c:56:44:87:40:f8:47:15:fa:9d:
70:a8:1c:ae:6f:9e:49:b6:98:7f:86:99:d4:e5:e5:14:ca:bb:
13:db:35:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAwKacEfq2ehZieoh4WwEf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWZhNmQ0ZmUwZWQwZTAxMmViM2JjZmZkZjJiZjllMWY3
NDc5NzIwHhcNMjQwNjE5MTEwMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGExNDM2NWNkNmNkNWI4ODNmMDg1MzFlOWNhNDYxZTBjMjFjYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtugkwEpGt9ELd7yjM7cB4nrdTSWG
orYwSJA9bnz09+PdipmwHjolcSH6cMi5KU1Nh8Mo0o186wbBWbCG0OzogA01h8k6
gbOBZF+5kxzDOy6z/cTEc3UDZBCldAGbrlTvwLHeMSeUOSw5ZQnkiZXH/vgFeXO1
4mkuKdIQZpHWSt79TiI8uKwa/q7QsROorT8nrKOI4aGQ5Cjlung57KszSZf+IE5r
yV7FO2o3n0lePQLIq29fkPJvSzxFeyg/xaREWZDOCsaP35Kr2kN1ICfPZ9Tk/idK
s+lKLJfzYFtWELL9+6QNeNb3tBYubDWYavqPWD87sFj4WYXanZhFtwubyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIShQ2XNbNW4g/CFMenKRh4MIcsGMB8GA1UdIwQY
MBaAFBSfptT+DtDgEus7z/3yv54fdHlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEt
NzM3ODQwZTI3ZWE2LzEvaEtGRFpjMXMxYmlEOElVeDZjcEdIZ3doeXdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEtNzM3ODQwZTI3ZWE2
LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4CfMA0G
CSqGSIb3DQEBCwUAA4IBAQA+fbwrh8ZAwBcFAtaVkWpswdqwxfrfw4MCETUC9wDc
ih4BKaTHDRwAycEQWwviXnqwLWG1QhGjz1u0uJgEQKF+DNqD9nN9AziwNZ/uMPAq
rzkWeTgpl2uKwL6yjTVHLpkHauQN44wrP9crOJ5J5n+FfKOFC7aGMFESTUdfRVSP
DbGCdAc7xU56uMCghBFfVW6QjEsmiYmSv26LVCTvsW8fVg281XGQbhv+rs9/bBIB
rqotB2BLr71RsEVcqvSD+wrBUpIIRRbFczOy2HASZToSKcQ+34bzRp18eLxwCpt7
dZxWRIdA+EcV+p1wqByub55Jtph/hpnU5eUUyrsT2zW+
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:42 2024 by rpki-client on console-ams.rpki-client.org