Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/FLIGeJNRS5GHGEcKenbyO7AbsvI.roa
File: FLIGeJNRS5GHGEcKenbyO7AbsvI.roa (raw, json)
Hash identifier: rEdOEk+Nw6b7BFTexTFXDaFLBkCwFx7zXhUM7HPY06Y=
Subject key identifier: 14:B2:06:78:93:51:4B:91:87:18:47:0A:7A:76:F2:3B:B0:1B:B2:F2
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 018CC56EEA5A62CB06D019289BA7CD5E32FA
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/FLIGeJNRS5GHGEcKenbyO7AbsvI.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9076
IP address blocks: 212.104.1.0/24 maxlen: 24
212.104.10.0/24 maxlen: 24
212.104.14.0/24 maxlen: 24
212.104.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ea:5a:62:cb:06:d0:19:28:9b:a7:cd:5e:32:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14b2067893514b918718470a7a76f23bb01bb2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:63:a4:2d:f6:8f:b4:ad:74:e9:52:53:8b:
97:0e:20:2c:54:5a:47:cc:97:9e:d9:bf:f4:d7:2e:
fc:49:7c:79:34:f1:b4:17:2c:c3:77:74:fc:22:de:
2f:9c:ca:5b:1d:62:ae:7a:d8:92:9f:3d:4f:bc:c8:
83:39:ea:ae:c0:bf:0a:62:80:b3:c5:a5:4d:ba:77:
db:e1:5d:28:38:e6:c8:c6:5d:3a:ad:79:d3:03:6f:
3f:c7:2b:c6:61:8f:ee:81:e7:05:ae:cc:82:0a:90:
ed:71:88:fc:b6:c5:3b:6e:4a:64:56:85:23:04:2a:
2b:55:40:0b:0a:ef:91:b5:22:bb:ed:09:0f:77:31:
1a:e0:d2:4a:93:22:82:31:e6:39:51:16:35:c8:9e:
6f:c4:d0:d2:48:3e:1e:3c:1f:eb:44:90:61:3d:fe:
6f:ab:9d:55:9e:87:e1:ed:6f:fb:bf:bd:74:f7:71:
f5:fe:e5:fe:1a:3e:a3:00:11:4c:2f:fb:8e:7d:94:
41:1e:c8:31:29:2c:83:15:5f:3a:3e:b6:a8:d7:68:
6e:54:02:a6:45:52:19:7a:51:5b:0e:71:43:c3:bf:
37:5d:34:99:d7:6c:ef:c8:5a:73:dd:cf:2d:f5:fb:
5b:13:0f:c2:46:df:df:74:44:a5:c6:85:6e:8f:d0:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B2:06:78:93:51:4B:91:87:18:47:0A:7A:76:F2:3B:B0:1B:B2:F2
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/FLIGeJNRS5GHGEcKenbyO7AbsvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.1.0/24
212.104.10.0/24
212.104.14.0/24
212.104.43.0/24
Signature Algorithm: sha256WithRSAEncryption
09:58:2d:f6:ab:97:d9:4a:59:97:0d:bf:67:69:0a:90:f1:31:
32:c4:de:3f:40:3b:36:61:f2:3f:82:b8:f5:09:88:d2:03:a6:
ae:20:56:4f:db:0f:5d:0e:a0:9c:2c:1f:8b:6d:77:60:ae:27:
31:0b:cc:9b:41:15:2c:2f:20:47:e1:9b:49:a9:89:30:49:61:
f7:07:a2:3f:38:56:0f:53:44:ca:76:e4:89:65:87:00:27:69:
df:d8:3d:ef:3c:74:51:5d:7e:e9:85:78:4c:6d:4a:e2:df:f7:
55:42:3c:ed:07:ae:8d:35:d1:24:f0:69:68:31:74:e7:fe:1e:
2a:95:bd:1f:91:76:67:59:65:26:e0:e9:1f:3c:61:d2:4a:ac:
6b:62:e4:d3:48:9e:56:21:db:bd:43:6e:07:16:90:36:5f:20:
0c:cf:ff:39:9f:b6:2b:ef:15:24:88:84:28:3e:1f:c1:15:28:
da:7d:e7:8d:86:e1:61:57:21:7f:1c:b6:31:8a:02:70:3a:1c:
4e:85:17:1d:43:f8:b3:8f:4a:b2:7c:ab:4a:da:34:8a:d2:3f:
c3:31:d4:8b:20:10:a1:96:4a:6b:f1:82:93:dc:c1:f7:9f:8a:
e8:da:47:61:23:6d:fa:ac:1a:ce:af:a4:05:35:f1:a5:94:b7:
05:1a:d3:88
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzFbupaYssG0Bkom6fNXjL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjQwMTAxMTQzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGIyMDY3ODkzNTE0YjkxODcxODQ3MGE3YTc2ZjIzYmIwMWJiMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzxjpC32j7StdOlSU4uXDiAsVFpH
zJee2b/01y78SXx5NPG0FyzDd3T8It4vnMpbHWKuetiSnz1PvMiDOequwL8KYoCz
xaVNunfb4V0oOObIxl06rXnTA28/xyvGYY/ugecFrsyCCpDtcYj8tsU7bkpkVoUj
BCorVUALCu+RtSK77QkPdzEa4NJKkyKCMeY5URY1yJ5vxNDSSD4ePB/rRJBhPf5v
q51Vnofh7W/7v71093H1/uX+Gj6jABFML/uOfZRBHsgxKSyDFV86Prao12huVAKm
RVIZelFbDnFDw783XTSZ12zvyFpz3c8t9ftbEw/CRt/fdESlxoVuj9DKpwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBSyBniTUUuRhxhHCnp28juwG7LyMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvRkxJR2VKTlJTNUdIR0VjS2VuYnlPN0Fic3ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1GgBAwQA
1GgKAwQA1GgOAwQA1GgrMA0GCSqGSIb3DQEBCwUAA4IBAQAJWC32q5fZSlmXDb9n
aQqQ8TEyxN4/QDs2YfI/grj1CYjSA6auIFZP2w9dDqCcLB+LbXdgricxC8ybQRUs
LyBH4ZtJqYkwSWH3B6I/OFYPU0TKduSJZYcAJ2nf2D3vPHRRXX7phXhMbUri3/dV
QjztB66NNdEk8GloMXTn/h4qlb0fkXZnWWUm4OkfPGHSSqxrYuTTSJ5WIdu9Q24H
FpA2XyAMz/85n7Yr7xUkiIQoPh/BFSjafeeNhuFhVyF/HLYxigJwOhxOhRcdQ/iz
j0qyfKtK2jSK0j/DMdSLIBChlkpr8YKT3MH3n4ro2kdhI236rBrOr6QFNfGllLcF
GtOI
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:49:54 2024 by rpki-client on console-ams.rpki-client.org