Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/fW_ac2HrHs2dR2iMtoAg-dRczd8.roa
File: fW_ac2HrHs2dR2iMtoAg-dRczd8.roa (raw, json)
Hash identifier: GWhuecpUR7ZdSte9BhR7+382/ZsxfmeF3SkAkuYacfo=
Subject key identifier: 7D:6F:DA:73:61:EB:1E:CD:9D:47:68:8C:B6:80:20:F9:D4:5C:CD:DF
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 018CC8DF7482AFC2E0C7C0570AD0B5697789
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/fW_ac2HrHs2dR2iMtoAg-dRczd8.roa
Signing time: Tue 02 Jan 2024 06:32:16 +0000
ROA not before: Tue 02 Jan 2024 06:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59576
IP address blocks: 176.241.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:74:82:af:c2:e0:c7:c0:57:0a:d0:b5:69:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jan 2 06:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d6fda7361eb1ecd9d47688cb68020f9d45ccddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:fe:15:b2:85:27:44:82:88:6a:29:d5:ee:
16:84:f1:72:bc:2f:07:aa:93:14:95:a2:dc:69:32:
4a:fd:d3:2d:3e:aa:d8:46:ac:f3:2e:39:e4:2d:da:
3b:57:ed:1f:f4:72:78:01:13:ba:35:b6:be:2d:50:
0f:bf:f0:3e:f7:37:b4:a7:ec:15:0e:c8:e2:05:13:
df:26:f9:8b:d4:6c:c3:58:82:f4:e8:30:a8:3a:2c:
0a:bf:12:dc:37:79:1d:9d:f7:c3:2c:3d:f1:07:2e:
5f:c0:cb:d3:19:96:62:ca:5b:c2:84:27:51:da:fb:
fc:12:60:52:bc:7e:29:f7:90:e0:7c:1a:0c:86:ad:
da:3d:a9:56:9b:1f:ec:56:38:79:33:90:38:d4:65:
30:89:ca:11:98:08:7d:19:3c:d4:fe:d1:54:dd:66:
78:2a:cd:84:e6:1b:06:ec:c8:b3:ff:50:95:87:30:
85:5e:d4:1e:a8:f7:c7:59:78:cf:3a:64:40:e8:2f:
03:84:c7:0f:60:39:8d:20:ae:59:bc:d0:73:fb:d9:
14:64:83:ee:0d:19:09:a2:d0:24:8b:f3:62:9f:76:
27:20:a9:f7:b6:90:b0:5d:51:f2:c7:95:3d:45:9b:
e1:70:5c:93:80:b3:61:bb:00:98:d2:46:0f:9d:fe:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:DA:73:61:EB:1E:CD:9D:47:68:8C:B6:80:20:F9:D4:5C:CD:DF
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/fW_ac2HrHs2dR2iMtoAg-dRczd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.252.0/23
Signature Algorithm: sha256WithRSAEncryption
07:ff:b5:89:9d:fb:2f:51:c8:eb:25:0f:66:a6:78:51:2f:0c:
e1:bc:18:96:4b:92:f1:0f:d4:44:d1:cb:e7:ee:5f:1a:a4:5a:
9c:19:d9:9a:1c:19:39:b7:d3:36:f5:13:df:25:0a:95:08:f3:
83:dd:79:a3:3a:3e:be:23:90:5a:ac:41:4c:a7:62:44:7f:f0:
7d:5c:13:c5:d1:ea:e8:16:69:dc:a8:b0:9b:1d:7b:88:b4:d5:
fc:d7:2f:2e:80:d7:5e:c4:d2:b9:2a:f2:7a:f2:c7:79:d9:7c:
71:c6:fe:8b:50:8e:bd:a4:56:71:ca:57:50:a8:0a:59:2a:26:
95:5e:67:cf:b3:47:00:ba:e7:a7:5f:b9:aa:5a:61:94:ba:78:
c8:02:30:86:20:81:32:ba:8f:96:3d:9c:08:73:d0:4e:bf:bc:
5a:cb:83:88:03:8b:59:72:e2:28:b4:d0:9e:1a:7f:11:a1:0d:
62:da:1a:25:e0:4b:58:5f:72:75:5e:e1:0c:c0:1c:b9:83:43:
0f:89:0f:7b:16:d3:73:3a:f9:74:ae:f7:1a:f8:19:9c:e8:50:
83:af:5a:da:1f:0b:6d:a7:de:d1:56:d7:be:4f:04:a1:7c:aa:
5a:e6:ad:50:1a:a7:39:87:57:43:e6:b1:f6:0e:24:54:6d:e4:
3e:d0:3d:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI33SCr8Lgx8BXCtC1aXeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjQwMTAyMDYzMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDZmZGE3MzYxZWIxZWNkOWQ0NzY4OGNiNjgwMjBmOWQ0NWNjZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SD+FbKFJ0SCiGop1e4WhPFyvC8H
qpMUlaLcaTJK/dMtPqrYRqzzLjnkLdo7V+0f9HJ4ARO6Nba+LVAPv/A+9ze0p+wV
DsjiBRPfJvmL1GzDWIL06DCoOiwKvxLcN3kdnffDLD3xBy5fwMvTGZZiylvChCdR
2vv8EmBSvH4p95DgfBoMhq3aPalWmx/sVjh5M5A41GUwicoRmAh9GTzU/tFU3WZ4
Ks2E5hsG7Miz/1CVhzCFXtQeqPfHWXjPOmRA6C8DhMcPYDmNIK5ZvNBz+9kUZIPu
DRkJotAki/Nin3YnIKn3tpCwXVHyx5U9RZvhcFyTgLNhuwCY0kYPnf5q4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1v2nNh6x7NnUdojLaAIPnUXM3fMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvZldfYWMySHJIczJkUjJpTXRvQWctZFJjemQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsPH8MA0G
CSqGSIb3DQEBCwUAA4IBAQAH/7WJnfsvUcjrJQ9mpnhRLwzhvBiWS5LxD9RE0cvn
7l8apFqcGdmaHBk5t9M29RPfJQqVCPOD3XmjOj6+I5BarEFMp2JEf/B9XBPF0ero
FmncqLCbHXuItNX81y8ugNdexNK5KvJ68sd52Xxxxv6LUI69pFZxyldQqApZKiaV
XmfPs0cAuuenX7mqWmGUunjIAjCGIIEyuo+WPZwIc9BOv7xay4OIA4tZcuIotNCe
Gn8RoQ1i2hol4EtYX3J1XuEMwBy5g0MPiQ97FtNzOvl0rvca+Bmc6FCDr1raHwtt
p97RVte+TwShfKpa5q1QGqc5h1dD5rH2DiRUbeQ+0D0P
-----END CERTIFICATE-----
Generated at Fri May 10 07:46:47 2024 by rpki-client on console-fra.rpki-client.org