Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa
File: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (raw, json)
Hash identifier: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=
Subject key identifier: 16:06:DD:1B:47:E6:3D:42:B4:BA:66:FA:7E:40:88:1C:1A:1C:E0:79
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 0194266BD5588B6F77D5AF9D86BBB14F2971
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44387
IP address blocks: 46.151.48.0/22 maxlen: 22
83.143.200.0/21 maxlen: 21
91.199.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d5:58:8b:6f:77:d5:af:9d:86:bb:b1:4f:29:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1606dd1b47e63d42b4ba66fa7e40881c1a1ce079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:48:e7:e3:4a:ba:af:6f:77:c9:e3:7a:64:
c1:c9:e9:f0:44:02:45:59:41:ea:e9:e3:cf:4f:21:
35:af:b0:85:28:d4:d2:4e:34:7e:d7:5e:90:92:71:
51:09:85:1a:2d:2b:6d:c2:88:97:3b:09:49:b9:bd:
a5:41:a0:eb:4c:4f:14:d3:b4:89:8a:f5:ae:59:ac:
22:48:9d:b4:30:5e:9c:5c:9d:a5:33:2c:29:30:ea:
0c:83:e1:c4:44:f6:a0:38:df:4d:29:25:73:9f:94:
ae:85:68:85:a5:8f:5f:d3:d7:fd:73:3a:26:41:c4:
65:d4:cc:0b:9e:82:30:1b:26:1b:d9:c0:19:30:50:
e9:04:7b:e8:5c:8a:b1:72:8b:94:a0:a1:94:54:2a:
c8:4e:d8:68:e9:8d:44:c5:57:a5:58:bf:33:8f:87:
f9:aa:ed:54:7a:fb:96:e4:c3:d6:7d:e8:ca:22:34:
9c:ac:bb:f0:90:ca:81:91:a5:0d:90:b8:15:0e:a7:
35:5e:54:8e:2f:fb:e8:52:24:7b:38:97:eb:71:cf:
3c:0a:e7:24:e7:5b:a2:01:77:22:81:80:c0:dd:80:
4a:36:d6:d0:f4:29:9e:e3:49:72:f7:49:a2:27:62:
6c:0f:e5:fb:86:11:4a:19:0b:7e:59:04:a5:25:2e:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:06:DD:1B:47:E6:3D:42:B4:BA:66:FA:7E:40:88:1C:1A:1C:E0:79
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.48.0/22
83.143.200.0/21
91.199.115.0/24
Signature Algorithm: sha256WithRSAEncryption
72:76:1a:35:be:24:95:3c:31:80:45:26:0c:b4:a7:66:1d:a7:
bb:c6:91:5c:74:16:3c:a2:37:76:a4:1f:94:37:41:ed:60:33:
ee:6b:91:05:64:01:7c:f2:2b:8c:03:20:85:8a:17:37:22:4d:
e2:7a:8c:43:a0:4d:ad:d7:e6:dd:09:3c:33:6b:a9:a1:4e:36:
f5:3a:33:2e:70:1b:18:db:04:ed:f4:d5:5d:f2:b9:92:94:b8:
4d:f4:fa:4b:60:b7:13:9a:78:da:bc:14:dc:f0:85:a0:ed:ec:
c2:69:2d:ed:17:c4:56:94:ed:71:3a:eb:55:94:6d:79:49:37:
55:fc:bd:6e:29:0a:ee:58:1a:16:0c:22:66:bf:d5:98:e9:2e:
04:8f:61:c6:dc:68:df:45:4b:b1:12:69:ff:de:40:03:23:65:
5e:d3:68:d8:dc:9d:2e:13:4e:2f:7b:01:0a:e7:2e:dd:22:df:
68:dc:5a:4d:a5:2c:9c:15:8b:80:17:b0:30:a5:de:40:3f:1d:
67:a3:7a:1d:76:20:19:6d:9a:5b:6a:b5:3f:c9:3a:73:99:be:
59:e1:2a:22:a8:39:8b:57:ad:90:f9:fa:3b:78:2a:80:83:cf:
98:47:96:b0:b2:ac:12:60:95:66:34:0f:ae:29:be:84:aa:8c:
49:22:01:48
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQma9VYi2931a+dhruxTylxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy
Njc4MWIwHhcNMjUwMTAyMDk0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjA2ZGQxYjQ3ZTYzZDQyYjRiYTY2ZmE3ZTQwODgxYzFhMWNlMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1clI5+NKuq9vd8njemTByenwRAJF
WUHq6ePPTyE1r7CFKNTSTjR+116QknFRCYUaLSttwoiXOwlJub2lQaDrTE8U07SJ
ivWuWawiSJ20MF6cXJ2lMywpMOoMg+HERPagON9NKSVzn5SuhWiFpY9f09f9czom
QcRl1MwLnoIwGyYb2cAZMFDpBHvoXIqxcouUoKGUVCrITtho6Y1ExVelWL8zj4f5
qu1UevuW5MPWfejKIjScrLvwkMqBkaUNkLgVDqc1XlSOL/voUiR7OJfrcc88Cuck
51uiAXcigYDA3YBKNtbQ9Cme40ly90miJ2JsD+X7hhFKGQt+WQSlJS6+hQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBYG3RtH5j1CtLpm+n5AiBwaHOB5MB8GA1UdIwQY
MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt
ZmEyNTY2ZTU4Mjg2LzEvRmdiZEcwZm1QVUswdW1iNmZrQ0lIQm9jNEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2
LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLpcwAwQD
U4/IAwQAW8dzMA0GCSqGSIb3DQEBCwUAA4IBAQBydho1viSVPDGARSYMtKdmHae7
xpFcdBY8ojd2pB+UN0HtYDPua5EFZAF88iuMAyCFihc3Ik3ieoxDoE2t1+bdCTwz
a6mhTjb1OjMucBsY2wTt9NVd8rmSlLhN9PpLYLcTmnjavBTc8IWg7ezCaS3tF8RW
lO1xOutVlG15STdV/L1uKQruWBoWDCJmv9WY6S4Ej2HG3GjfRUuxEmn/3kADI2Ve
02jY3J0uE04vewEK5y7dIt9o3FpNpSycFYuAF7Awpd5APx1no3oddiAZbZpbarU/
yTpzmb5Z4SoiqDmLV62Q+fo7eCqAg8+YR5awsqwSYJVmNA+uKb6EqoxJIgFI
-----END CERTIFICATE-----
Generated at Sun Feb 2 15:55:27 2025 by rpki-client