Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/fh_fN6IggxnN7ViMy6Ta99s43Ok.roa
File: fh_fN6IggxnN7ViMy6Ta99s43Ok.roa (raw, json)
Hash identifier: LyRgZ56xoLGVEad5ZMcOIVv4+9Vietiou/zkCUb7jGI=
Subject key identifier: 7E:1F:DF:37:A2:20:83:19:CD:ED:58:8C:CB:A4:DA:F7:DB:38:DC:E9
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 018E046540BFC44C08F5AFCA725AD4F056FC
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/fh_fN6IggxnN7ViMy6Ta99s43Ok.roa
Signing time: Sun 03 Mar 2024 12:58:48 +0000
ROA not before: Sun 03 Mar 2024 12:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199570
IP address blocks: 92.243.83.0/24 maxlen: 24
149.62.33.0/24 maxlen: 24
188.213.232.0/24 maxlen: 24
2a13:ad00::/29 maxlen: 29
2a13:ad00::/37 maxlen: 37
2a13:ad00:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:65:40:bf:c4:4c:08:f5:af:ca:72:5a:d4:f0:56:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Mar 3 12:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e1fdf37a2208319cded588ccba4daf7db38dce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:d6:88:93:8c:41:36:db:a7:d0:3d:36:06:
3b:2e:d9:44:00:a9:a4:c7:65:3e:9f:4d:bd:82:07:
2e:71:a2:c4:67:6f:ff:22:34:4c:94:48:e2:aa:f2:
56:fa:50:0b:df:30:37:30:d9:74:03:e8:17:71:d6:
6d:fa:11:bd:78:d6:18:f4:4b:1d:8e:15:d2:4a:18:
c5:97:07:cb:4e:ad:7b:74:23:79:13:2f:b1:c9:96:
ec:c6:36:d1:83:f2:1e:b7:fd:2f:e4:2f:e8:bf:73:
ec:82:30:61:8e:34:f5:f3:8d:16:b1:94:04:43:a2:
11:85:48:ea:f0:ca:90:04:50:42:5d:49:bc:2e:fb:
aa:e4:b9:af:30:14:c4:5c:bf:de:34:dd:ff:8b:96:
b2:70:0b:4b:32:1b:38:34:c9:7c:60:bd:13:e1:96:
cb:1d:95:a0:6b:72:d0:01:e9:ca:df:0c:00:5c:d7:
db:61:1d:91:e7:73:f6:7f:2c:a5:af:ed:bd:07:64:
31:7a:b6:a5:1c:c9:86:5f:8f:ca:a4:58:69:58:b3:
66:9e:6a:dc:59:7f:ad:2c:88:d3:9c:01:6f:52:c6:
47:81:8b:17:46:36:ee:e5:7f:9e:52:aa:75:43:2d:
11:21:df:26:da:81:9b:74:92:37:3e:c9:82:ca:63:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1F:DF:37:A2:20:83:19:CD:ED:58:8C:CB:A4:DA:F7:DB:38:DC:E9
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/fh_fN6IggxnN7ViMy6Ta99s43Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.83.0/24
149.62.33.0/24
188.213.232.0/24
IPv6:
2a13:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
51:38:20:85:6d:42:a6:29:ed:f9:12:c9:b9:36:8a:d0:cb:9e:
0c:e1:bb:8d:66:f8:d1:e3:46:15:4e:92:b3:f3:34:89:bb:fc:
6e:a6:ea:26:55:86:30:d1:17:80:e2:59:e1:6e:5d:94:f2:bd:
1f:dc:64:b3:87:1c:7c:5e:1c:14:1a:61:c2:7a:91:91:9c:f4:
c7:29:c1:62:38:9b:ef:7d:7d:e1:56:09:10:4e:b2:c7:7d:5f:
32:1a:03:69:d6:3f:c1:42:6a:1b:7e:8d:1f:ec:f5:4a:5c:74:
3c:30:7e:a5:c5:6a:43:90:e6:2b:bb:2c:07:f6:15:8e:ec:20:
54:6a:e7:6f:c5:6d:78:d6:b7:c1:eb:d7:1f:f0:e7:89:8e:0a:
91:d8:db:2e:31:b8:4d:1a:0b:da:04:ae:5f:6a:74:b9:28:96:
9b:46:2a:53:fc:d5:f2:d4:0a:12:99:c0:9d:94:32:4e:2d:d5:
af:1b:7b:73:59:b4:55:47:35:eb:2a:81:f0:a9:d0:81:2c:4e:
b5:02:46:77:28:48:da:53:a7:40:f1:1c:cf:45:fb:6e:77:8b:
76:14:e3:1b:fb:63:65:09:0a:55:46:13:eb:04:2e:86:01:a5:
f9:32:d1:7f:77:65:24:a3:4b:4a:5c:f0:fd:a9:68:5a:0c:1d:
fb:dd:63:37
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY4EZUC/xEwI9a/KclrU8Fb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMWQ1NWE4NjlmMTA1YWY2YWJjZGZhMGNhNDA2YWYxZjQ5
YjI0ZjEwHhcNMjQwMzAzMTI1ODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTFmZGYzN2EyMjA4MzE5Y2RlZDU4OGNjYmE0ZGFmN2RiMzhkY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMXWiJOMQTbbp9A9NgY7LtlEAKmk
x2U+n029ggcucaLEZ2//IjRMlEjiqvJW+lAL3zA3MNl0A+gXcdZt+hG9eNYY9Esd
jhXSShjFlwfLTq17dCN5Ey+xyZbsxjbRg/Iet/0v5C/ov3PsgjBhjjT1840WsZQE
Q6IRhUjq8MqQBFBCXUm8Lvuq5LmvMBTEXL/eNN3/i5aycAtLMhs4NMl8YL0T4ZbL
HZWga3LQAenK3wwAXNfbYR2R53P2fyylr+29B2QxeralHMmGX4/KpFhpWLNmnmrc
WX+tLIjTnAFvUsZHgYsXRjbu5X+eUqp1Qy0RId8m2oGbdJI3PsmCymO/uQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFH4f3zeiIIMZze1YjMuk2vfbONzpMB8GA1UdIwQY
MBaAFFMdVahp8QWvarzfoMpAavH0myTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjIt
NGRjMWVmODkwNDRiLzEvZmhfZk42SWdneG5ON1ZpTXk2VGE5OXM0M09rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjItNGRjMWVmODkwNDRi
LzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAXPNTAwQA
lT4hAwQAvNXoMA0EAgACMAcDBQMqE60AMA0GCSqGSIb3DQEBCwUAA4IBAQBROCCF
bUKmKe35Esm5NorQy54M4buNZvjR40YVTpKz8zSJu/xupuomVYYw0ReA4lnhbl2U
8r0f3GSzhxx8XhwUGmHCepGRnPTHKcFiOJvvfX3hVgkQTrLHfV8yGgNp1j/BQmob
fo0f7PVKXHQ8MH6lxWpDkOYruywH9hWO7CBUaudvxW141rfB69cf8OeJjgqR2Nsu
MbhNGgvaBK5fanS5KJabRipT/NXy1AoSmcCdlDJOLdWvG3tzWbRVRzXrKoHwqdCB
LE61AkZ3KEjaU6dA8RzPRftud4t2FOMb+2NlCQpVRhPrBC6GAaX5MtF/d2Uko0tK
XPD9qWhaDB373WM3
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:42:44 2024 by rpki-client on console-ams.rpki-client.org