Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/4fRIiLlZuqlSANCBzNt2yvKHjVk.roa
File: 4fRIiLlZuqlSANCBzNt2yvKHjVk.roa (raw, json)
Hash identifier: jq0vL7Akp+tMZChFsnR1H97eEEULfKwixMqUy2TpGRc=
Subject key identifier: E1:F4:48:88:B9:59:BA:A9:52:00:D0:81:CC:DB:76:CA:F2:87:8D:59
Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial: 018CC2DB5DE1B077C576827F31919F045285
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/4fRIiLlZuqlSANCBzNt2yvKHjVk.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51966
IP address blocks: 194.0.23.0/24 maxlen: 24
2001:678:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5d:e1:b0:77:c5:76:82:7f:31:91:9f:04:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1f44888b959baa95200d081ccdb76caf2878d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:cf:29:3e:55:89:81:7b:0e:ce:9e:a5:7b:
71:11:33:9b:34:dc:b9:f8:19:a1:50:15:ac:95:0a:
07:1a:5c:16:e8:0f:d9:ab:68:59:ee:92:68:13:a5:
e8:63:6b:95:f6:6a:a6:f4:c8:75:67:b8:00:ae:61:
4a:26:c6:8f:53:96:bc:cf:5c:19:f6:51:83:1e:1a:
4d:d5:78:36:1a:97:83:b0:cf:3c:7a:22:bd:a9:54:
47:3f:ac:e0:b7:85:c0:16:29:0e:a6:c2:56:d1:c1:
b9:fd:e8:81:b7:31:b4:a6:e7:78:c9:89:db:c5:2e:
41:67:15:98:5a:c7:5e:b3:9a:f0:86:97:d6:3a:31:
69:45:7f:b8:01:ce:e3:57:04:0a:0a:f6:04:98:b6:
79:e4:43:2c:d4:a1:fe:46:f2:cb:1a:0a:03:ff:4d:
eb:04:9f:d7:08:b1:21:ee:45:29:3e:5d:ae:d2:a9:
ef:43:d1:1a:e4:2c:9d:ea:93:93:f7:d9:f9:6a:eb:
eb:b8:ef:be:d2:12:31:62:8e:eb:e7:ea:a6:26:86:
71:e3:ef:55:cf:94:f4:54:dc:bc:e8:73:98:5e:a3:
4b:a2:f2:eb:77:f6:c5:66:3a:72:67:1f:48:d4:52:
ae:74:e6:fc:70:ad:76:ce:18:82:ea:b2:c6:64:48:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:48:88:B9:59:BA:A9:52:00:D0:81:CC:DB:76:CA:F2:87:8D:59
X509v3 Authority Key Identifier:
keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/4fRIiLlZuqlSANCBzNt2yvKHjVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.23.0/24
IPv6:
2001:678:1b::/48
Signature Algorithm: sha256WithRSAEncryption
03:68:51:a0:a2:ce:fa:1e:09:44:30:20:ea:3a:8d:03:e5:b8:
cc:a0:8d:39:d9:e4:f1:1b:af:49:81:e8:a3:ed:76:80:00:7f:
e3:2a:26:88:f9:dd:0a:3f:bf:26:a5:14:3f:8c:ea:cb:4d:f2:
01:db:fa:24:4d:87:8b:bc:7d:0d:1d:09:71:92:cf:bb:48:c3:
76:b9:3e:6c:52:13:f6:d9:c6:ea:46:62:82:df:58:a2:97:8d:
a9:d3:83:a8:39:ae:41:29:a0:cc:03:3b:9d:0d:4f:03:cb:e0:
7f:a1:54:41:b4:7b:9b:95:98:a5:cf:1a:90:8d:e0:fe:34:b6:
5d:91:70:06:b6:0a:76:1a:a5:23:7b:71:be:6f:5d:0d:95:c7:
79:02:88:f0:be:bf:85:18:b9:c1:0c:2d:0e:40:85:1d:9f:b3:
14:55:b8:30:4b:c0:2d:30:f7:4b:aa:fd:23:a8:58:62:56:7d:
99:5b:f2:96:23:8c:72:26:9d:16:6f:74:d0:e5:27:a3:e2:a8:
4a:5f:a1:c4:60:a8:4e:91:89:7c:b8:e5:31:e5:6c:00:de:95:
cd:74:c5:4e:ef:6e:00:9c:dd:3a:2a:39:64:95:fc:d1:0b:22:
45:7d:ce:72:2b:ee:fd:57:7f:99:1b:4d:78:83:51:70:17:1e:
6a:fb:0c:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzC213hsHfFdoJ/MZGfBFKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzQ4MzhiYjMxN2I4MTg2Njk5ZjBhNDQ4NWRiNmQ5ZGEx
OTA4ZDIwHhcNMjQwMTAxMDIzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY0NDg4OGI5NTliYWE5NTIwMGQwODFjY2RiNzZjYWYyODc4ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCjPKT5ViYF7Ds6epXtxETObNNy5
+BmhUBWslQoHGlwW6A/Zq2hZ7pJoE6XoY2uV9mqm9Mh1Z7gArmFKJsaPU5a8z1wZ
9lGDHhpN1Xg2GpeDsM88eiK9qVRHP6zgt4XAFikOpsJW0cG5/eiBtzG0pud4yYnb
xS5BZxWYWsdes5rwhpfWOjFpRX+4Ac7jVwQKCvYEmLZ55EMs1KH+RvLLGgoD/03r
BJ/XCLEh7kUpPl2u0qnvQ9Ea5Cyd6pOT99n5auvruO++0hIxYo7r5+qmJoZx4+9V
z5T0VNy86HOYXqNLovLrd/bFZjpyZx9I1FKudOb8cK12zhiC6rLGZEjCBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOH0SIi5WbqpUgDQgczbdsryh41ZMB8GA1UdIwQY
MBaAFBU0g4uzF7gYZpnwpEhdttnaGQjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUt
M2ExNDRjNzBlMGIwLzEvNGZSSWlMbFp1cWxTQU5DQnpOdDJ5dktIalZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUtM2ExNDRjNzBlMGIw
LzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAXMA8E
AgACMAkDBwAgAQZ4ABswDQYJKoZIhvcNAQELBQADggEBAANoUaCizvoeCUQwIOo6
jQPluMygjTnZ5PEbr0mB6KPtdoAAf+MqJoj53Qo/vyalFD+M6stN8gHb+iRNh4u8
fQ0dCXGSz7tIw3a5PmxSE/bZxupGYoLfWKKXjanTg6g5rkEpoMwDO50NTwPL4H+h
VEG0e5uVmKXPGpCN4P40tl2RcAa2CnYapSN7cb5vXQ2Vx3kCiPC+v4UYucEMLQ5A
hR2fsxRVuDBLwC0w90uq/SOoWGJWfZlb8pYjjHImnRZvdNDlJ6PiqEpfocRgqE6R
iXy45THlbADelc10xU7vbgCc3ToqOWSV/NELIkV9znIr7v1Xf5kbTXiDUXAXHmr7
DEE=
-----END CERTIFICATE-----
Generated at Sat May 25 22:51:52 2024 by rpki-client on console-fra.rpki-client.org