Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/fXtPvnbbpnIeEuPZfFzs9c8Y_I8.roa
File: fXtPvnbbpnIeEuPZfFzs9c8Y_I8.roa (raw, json)
Hash identifier: dMbI/SvWU1n6mCuOmDtjgF8MsbaLCUXGuA1MOG7Tkmo=
Subject key identifier: 7D:7B:4F:BE:76:DB:A6:72:1E:12:E3:D9:7C:5C:EC:F5:CF:18:FC:8F
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 018F52653AC7DF55168851EF492B3CD58CB8
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/fXtPvnbbpnIeEuPZfFzs9c8Y_I8.roa
Signing time: Tue 07 May 2024 09:31:56 +0000
ROA not before: Tue 07 May 2024 09:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209155
IP address blocks: 185.16.231.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:65:3a:c7:df:55:16:88:51:ef:49:2b:3c:d5:8c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: May 7 09:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d7b4fbe76dba6721e12e3d97c5cecf5cf18fc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:8e:73:9e:10:06:50:85:ab:2b:d6:34:e5:
7b:3e:35:56:b8:96:e0:c9:d5:5d:ab:1e:11:be:d2:
4b:19:0f:8a:61:d8:78:80:9a:52:1d:e5:8b:c8:2f:
59:0e:fd:76:f4:b8:17:a4:66:f5:fe:f4:12:05:3f:
81:0b:1c:ce:b8:bc:33:b2:82:98:ae:24:21:18:77:
79:9c:09:b5:67:57:15:aa:33:07:22:77:81:47:eb:
50:ab:73:b5:ef:ef:ab:f7:71:19:17:99:2f:f4:52:
7d:c1:f4:7c:4c:a3:c3:a0:db:8f:60:83:40:55:51:
20:c2:6c:ec:99:9e:27:15:d7:d3:9a:98:18:2d:3d:
15:70:f4:58:bd:bf:47:64:6e:b8:37:94:ce:90:26:
0c:b8:b2:1d:ff:57:9f:1a:1b:ef:a8:7f:5d:cc:5f:
19:2e:20:23:20:45:7c:69:0c:da:d8:23:eb:5e:eb:
2c:49:cc:57:4f:0c:9d:68:77:e8:b9:01:ba:35:6f:
68:8b:63:9b:6f:db:ad:99:90:54:50:1d:85:1b:f7:
cf:80:58:b5:11:f8:bb:1f:2c:b2:ae:82:9a:f9:0e:
6e:87:c2:c5:9b:93:ed:86:3c:1e:60:c6:63:39:48:
44:8c:29:e2:5b:f1:a4:60:da:d1:1d:e1:26:fa:97:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:4F:BE:76:DB:A6:72:1E:12:E3:D9:7C:5C:EC:F5:CF:18:FC:8F
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/fXtPvnbbpnIeEuPZfFzs9c8Y_I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:09:bb:27:0c:50:97:16:c6:df:d2:7c:33:b1:02:28:de:ff:
c1:48:c5:0a:86:a4:8b:6c:1a:88:7f:55:49:5b:a5:ad:50:e4:
1e:c2:76:ab:e3:b9:b6:e1:23:26:e9:2a:94:98:36:80:06:42:
e3:cc:81:0d:81:f8:8d:c2:27:35:fa:ee:b2:19:4b:3d:68:df:
be:3c:b1:ff:f4:4a:08:24:bb:c4:fa:54:a0:5e:e1:e4:0b:90:
ee:ff:4f:2c:8b:0e:44:df:05:61:27:50:31:96:65:7f:5f:13:
9f:e4:a2:af:96:88:e8:ed:f0:40:04:6c:5d:e8:b1:b1:e0:10:
c4:da:a6:7c:ec:99:d0:13:0b:56:04:a7:a2:20:f1:b1:1e:84:
80:7c:ff:df:2a:41:ad:00:ea:23:f7:24:12:72:c8:36:af:08:
d7:a1:72:ef:f0:75:b0:b1:dc:d4:75:8a:81:07:e1:5d:37:86:
da:cd:f7:ac:e1:3f:96:17:06:5a:b4:9f:83:15:a7:3c:ad:70:
8c:1b:e4:69:fd:1f:13:76:8d:e8:d6:48:cc:87:76:b2:5a:a2:
e8:1d:7e:cc:c9:ec:68:ff:75:a4:4d:68:51:a1:50:86:40:10:
25:d1:88:92:0e:3e:59:43:ed:09:6d:ca:ea:10:19:57:7a:54:
75:27:6b:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9SZTrH31UWiFHvSSs81Yy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjQwNTA3MDkzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDdiNGZiZTc2ZGJhNjcyMWUxMmUzZDk3YzVjZWNmNWNmMThmYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZaOc54QBlCFqyvWNOV7PjVWuJbg
ydVdqx4RvtJLGQ+KYdh4gJpSHeWLyC9ZDv129LgXpGb1/vQSBT+BCxzOuLwzsoKY
riQhGHd5nAm1Z1cVqjMHIneBR+tQq3O17++r93EZF5kv9FJ9wfR8TKPDoNuPYINA
VVEgwmzsmZ4nFdfTmpgYLT0VcPRYvb9HZG64N5TOkCYMuLId/1efGhvvqH9dzF8Z
LiAjIEV8aQza2CPrXussScxXTwydaHfouQG6NW9oi2Obb9utmZBUUB2FG/fPgFi1
Efi7HyyyroKa+Q5uh8LFm5PthjweYMZjOUhEjCniW/GkYNrRHeEm+pc7JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH17T75226ZyHhLj2Xxc7PXPGPyPMB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvZlh0UHZuYmJwbkllRXVQWmZGenM5YzhZX0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRDnMA0G
CSqGSIb3DQEBCwUAA4IBAQCxCbsnDFCXFsbf0nwzsQIo3v/BSMUKhqSLbBqIf1VJ
W6WtUOQewnar47m24SMm6SqUmDaABkLjzIENgfiNwic1+u6yGUs9aN++PLH/9EoI
JLvE+lSgXuHkC5Du/08siw5E3wVhJ1AxlmV/XxOf5KKvlojo7fBABGxd6LGx4BDE
2qZ87JnQEwtWBKeiIPGxHoSAfP/fKkGtAOoj9yQScsg2rwjXoXLv8HWwsdzUdYqB
B+FdN4bazfes4T+WFwZatJ+DFac8rXCMG+Rp/R8Tdo3o1kjMh3ayWqLoHX7Myexo
/3WkTWhRoVCGQBAl0YiSDj5ZQ+0JbcrqEBlXelR1J2tR
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:01:49 2024 by rpki-client on console-ams.rpki-client.org