Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/FTn0jJKXy-iO46rJP4lkCtLulO0.roa
File: FTn0jJKXy-iO46rJP4lkCtLulO0.roa (raw, json)
Hash identifier: 3KzbSaKk6Db3syUIEAGPLvK/h2q/GabbRH3y6OhOaJ0=
Subject key identifier: 15:39:F4:8C:92:97:CB:E8:8E:E3:AA:C9:3F:89:64:0A:D2:EE:94:ED
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 018CC8025702D28CB6BB2336CD8BCCBEEE07
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/FTn0jJKXy-iO46rJP4lkCtLulO0.roa
Signing time: Tue 02 Jan 2024 02:30:45 +0000
ROA not before: Tue 02 Jan 2024 02:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43766
IP address blocks: 92.43.171.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:57:02:d2:8c:b6:bb:23:36:cd:8b:cc:be:ee:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 02:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1539f48c9297cbe88ee3aac93f89640ad2ee94ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:05:77:bc:44:15:6a:f8:4d:68:49:4b:6c:
a9:ff:7e:5e:e7:e8:10:a1:d7:9b:73:1c:de:80:4e:
90:ba:ac:79:53:3a:a0:04:19:e5:0f:f2:c1:8f:54:
07:55:39:f5:37:09:b7:84:cc:41:f4:b9:dc:91:d7:
09:da:49:ff:a3:74:50:2d:42:ea:b4:69:a7:f3:d4:
27:7c:b0:6f:ee:58:8f:d6:bc:cb:1b:7d:a3:17:2d:
c8:b8:b0:51:d7:fa:87:8c:8b:12:16:71:fb:7c:0e:
44:97:2f:59:84:b4:4a:b3:ba:be:63:e5:f4:e4:a1:
ba:31:7c:02:db:09:65:dc:b8:e0:11:00:c3:4c:fd:
f0:4c:d5:cc:d5:e5:8d:e0:2a:b4:47:e1:28:06:9b:
0e:a9:ac:f7:f1:41:b9:9e:ad:77:80:b2:c4:e1:8c:
c4:90:c8:08:69:e9:66:a3:2b:b1:a9:87:3a:4e:37:
9e:61:64:6f:36:13:53:62:b1:ea:2c:48:0c:bb:43:
f3:ae:20:0a:07:ad:ab:06:d0:70:76:f5:ec:27:9b:
a3:32:35:5b:67:e0:cc:ad:f0:76:27:7c:c5:8b:d2:
6e:ab:8f:c6:74:e3:62:d3:ad:3a:c3:a5:84:16:73:
da:4e:c4:66:d6:1c:ee:43:d3:73:c1:03:74:b9:6c:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:F4:8C:92:97:CB:E8:8E:E3:AA:C9:3F:89:64:0A:D2:EE:94:ED
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/FTn0jJKXy-iO46rJP4lkCtLulO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.170.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:d2:1b:6a:1f:94:d7:11:22:1f:98:55:aa:25:90:bf:b7:10:
b3:4b:bc:b4:ff:df:5f:f2:02:c8:c6:13:d1:c8:c5:5d:62:77:
96:80:ed:02:46:f4:86:6d:07:46:0e:ea:f3:34:76:13:9b:2a:
6d:ed:b9:e9:63:a0:d5:29:8f:f4:54:25:95:9e:8e:d5:d0:36:
ef:21:fd:36:77:5a:cd:01:6e:ab:2b:e6:d5:e3:b8:9b:22:f7:
11:85:ea:fc:cf:b9:3d:9e:96:e5:93:dc:e3:19:2a:51:0d:16:
2b:20:96:0c:fe:8d:ab:9b:a6:4c:dd:af:7d:44:4b:d9:5e:30:
37:89:d2:18:9a:20:61:08:3e:a7:03:ee:91:9b:65:4c:be:b7:
08:4c:fe:b9:cc:b5:f3:fd:81:71:fe:69:ca:eb:17:bf:ae:cb:
3b:96:a3:e6:ad:4a:23:fc:ba:7a:6f:94:13:0c:42:fb:78:6b:
0e:14:71:5b:f1:6a:98:de:ed:55:b4:a7:49:7b:ed:d0:c8:be:
7a:e3:64:4c:84:9f:9d:10:09:4c:1a:16:df:6a:8f:26:f2:79:
73:b2:75:fe:45:a9:e4:9e:b2:1f:e6:da:60:5a:90:86:70:dd:
8d:51:4b:b0:fe:05:a9:9a:e7:ea:74:d8:11:e3:d9:24:98:d5:
ea:7e:d2:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAlcC0oy2uyM2zYvMvu4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy
NmMzNTYwHhcNMjQwMTAyMDIzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTM5ZjQ4YzkyOTdjYmU4OGVlM2FhYzkzZjg5NjQwYWQyZWU5NGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYFd7xEFWr4TWhJS2yp/35e5+gQ
odebcxzegE6Quqx5UzqgBBnlD/LBj1QHVTn1Nwm3hMxB9LnckdcJ2kn/o3RQLULq
tGmn89QnfLBv7liP1rzLG32jFy3IuLBR1/qHjIsSFnH7fA5Ely9ZhLRKs7q+Y+X0
5KG6MXwC2wll3LjgEQDDTP3wTNXM1eWN4Cq0R+EoBpsOqaz38UG5nq13gLLE4YzE
kMgIaelmoyuxqYc6TjeeYWRvNhNTYrHqLEgMu0PzriAKB62rBtBwdvXsJ5ujMjVb
Z+DMrfB2J3zFi9Juq4/GdONi0606w6WEFnPaTsRm1hzuQ9NzwQN0uWyxSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBU59IySl8vojuOqyT+JZArS7pTtMB8GA1UdIwQY
MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt
MzdiMjFiYWIzYjAwLzEvRlRuMGpKS1h5LWlPNDZySlA0bGtDdEx1bE8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw
LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXCuqMA0G
CSqGSIb3DQEBCwUAA4IBAQBf0htqH5TXESIfmFWqJZC/txCzS7y0/99f8gLIxhPR
yMVdYneWgO0CRvSGbQdGDurzNHYTmypt7bnpY6DVKY/0VCWVno7V0DbvIf02d1rN
AW6rK+bV47ibIvcRher8z7k9npblk9zjGSpRDRYrIJYM/o2rm6ZM3a99REvZXjA3
idIYmiBhCD6nA+6Rm2VMvrcITP65zLXz/YFx/mnK6xe/rss7lqPmrUoj/Lp6b5QT
DEL7eGsOFHFb8WqY3u1VtKdJe+3QyL5642RMhJ+dEAlMGhbfao8m8nlzsnX+Rank
nrIf5tpgWpCGcN2NUUuw/gWpmufqdNgR49kkmNXqftIa
-----END CERTIFICATE-----
Generated at Fri Jun 28 08:14:52 2024 by rpki-client on console-ams.rpki-client.org