Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FaGk-v9vYjQfW_M6kPLlhbFwGII.roa
File: FaGk-v9vYjQfW_M6kPLlhbFwGII.roa (raw, json)
Hash identifier: zfjLYwa2IpcmK7b1TgEYUp+g8aWM9pFBZSpB37cd+XU=
Subject key identifier: 15:A1:A4:FA:FF:6F:62:34:1F:5B:F3:3A:90:F2:E5:85:B1:70:18:82
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802D9EE758B3B7EBFB5A5A228D24A30
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FaGk-v9vYjQfW_M6kPLlhbFwGII.roa
Signing time: Tue 02 Jan 2024 02:31:19 +0000
ROA not before: Tue 02 Jan 2024 02:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3308
IP address blocks: 193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d9:ee:75:8b:3b:7e:bf:b5:a5:a2:28:d2:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a1a4faff6f62341f5bf33a90f2e585b1701882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:70:d3:2b:ae:4c:ff:71:45:05:1e:fe:ec:
7e:2b:cf:d4:1a:92:33:e2:a5:84:9f:a7:c5:71:50:
da:26:8d:ea:13:57:32:fc:29:63:a5:22:9c:c8:51:
fa:77:e3:f1:9e:62:8a:b7:fa:66:44:b2:0c:df:f6:
bd:f7:9b:69:5e:36:10:0d:16:d6:f6:23:91:74:cf:
1b:8e:69:b0:11:b1:43:d1:52:49:f6:a3:35:6f:fa:
85:65:d4:9d:ae:fd:5d:76:61:cc:0c:20:22:e0:dd:
a4:d0:e6:3d:ba:e1:37:2a:fb:a2:9a:cd:14:84:11:
55:76:7e:05:68:57:ae:2d:f3:c7:8b:29:52:66:ed:
b1:0e:78:7f:c7:a8:46:9f:cd:08:ee:bc:91:e9:0b:
69:cc:8f:82:22:94:d9:27:8e:a9:ca:05:ae:9d:59:
9c:e6:6f:63:71:b0:29:9c:a6:09:e7:6e:79:56:ca:
23:8b:73:a8:5a:3e:19:44:bc:2b:b1:94:39:b0:7b:
d4:f3:39:54:c5:86:15:22:a9:d6:b0:a3:c9:32:00:
06:b4:f0:c3:5f:1a:18:16:b7:ca:42:11:a5:97:f9:
8f:9c:c1:ec:4d:73:97:3b:4a:ea:51:ed:b0:c6:b5:
03:c4:f3:c4:08:ef:6b:88:19:8e:6d:78:63:6b:18:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:A4:FA:FF:6F:62:34:1F:5B:F3:3A:90:F2:E5:85:B1:70:18:82
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FaGk-v9vYjQfW_M6kPLlhbFwGII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.234.184.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:ef:c3:54:a0:b8:b8:2f:fe:12:e9:6e:a2:3d:05:d1:12:15:
26:11:6e:a1:82:3c:13:8e:f5:29:60:61:e5:18:d6:b9:c2:f1:
03:1e:75:cd:2c:13:7b:95:d3:ba:25:4a:39:9f:da:44:18:6a:
45:42:73:e3:73:5a:13:14:74:a8:e6:f4:bb:3f:66:53:0b:e4:
2f:99:8f:0a:09:a9:87:06:27:46:f5:bb:44:b4:b5:41:51:6d:
f9:86:89:37:8e:cc:11:66:69:f2:e5:01:70:bc:48:fc:55:ae:
e2:ad:ee:a3:99:9d:3e:d4:30:ae:10:90:e4:d9:9f:87:c5:13:
8a:5f:44:c8:e7:46:54:0c:b1:9b:de:bf:7c:64:af:cd:e7:15:
eb:84:97:12:1d:a2:95:74:c6:e7:29:a5:30:77:1c:63:d3:31:
95:db:9b:73:14:c4:3f:d5:72:38:95:d9:c0:d2:cf:33:34:99:
77:d8:e3:71:03:5a:02:b2:76:25:6d:b7:7c:b7:1a:c9:ad:8c:
97:81:bf:7c:af:c2:a8:3c:8d:01:c8:37:f5:95:e1:d3:53:bd:
cd:39:8c:b0:1b:a0:41:79:fb:77:d2:43:c8:21:77:c5:74:68:
79:73:3b:6a:95:19:f5:25:46:a6:67:61:ba:df:05:d2:24:e4:
48:5f:28:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAtnudYs7fr+1paIo0kowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWExYTRmYWZmNmY2MjM0MWY1YmYzM2E5MGYyZTU4NWIxNzAxODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl1w0yuuTP9xRQUe/ux+K8/UGpIz
4qWEn6fFcVDaJo3qE1cy/CljpSKcyFH6d+PxnmKKt/pmRLIM3/a995tpXjYQDRbW
9iORdM8bjmmwEbFD0VJJ9qM1b/qFZdSdrv1ddmHMDCAi4N2k0OY9uuE3Kvuims0U
hBFVdn4FaFeuLfPHiylSZu2xDnh/x6hGn80I7ryR6QtpzI+CIpTZJ46pygWunVmc
5m9jcbApnKYJ5255Vsoji3OoWj4ZRLwrsZQ5sHvU8zlUxYYVIqnWsKPJMgAGtPDD
XxoYFrfKQhGll/mPnMHsTXOXO0rqUe2wxrUDxPPECO9riBmObXhjaxh6xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBWhpPr/b2I0H1vzOpDy5YWxcBiCMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvRmFHay12OXZZalFmV19NNmtQTGxoYkZ3R0lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBweq4MA0G
CSqGSIb3DQEBCwUAA4IBAQCO78NUoLi4L/4S6W6iPQXREhUmEW6hgjwTjvUpYGHl
GNa5wvEDHnXNLBN7ldO6JUo5n9pEGGpFQnPjc1oTFHSo5vS7P2ZTC+QvmY8KCamH
BidG9btEtLVBUW35hok3jswRZmny5QFwvEj8Va7ire6jmZ0+1DCuEJDk2Z+HxROK
X0TI50ZUDLGb3r98ZK/N5xXrhJcSHaKVdMbnKaUwdxxj0zGV25tzFMQ/1XI4ldnA
0s8zNJl32ONxA1oCsnYlbbd8txrJrYyXgb98r8KoPI0ByDf1leHTU73NOYywG6BB
eft30kPIIXfFdGh5cztqlRn1JUamZ2G63wXSJORIXyge
-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org