Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fsVN3eHENxDe5EWSQI7KyQOcTzI.roa
File: fsVN3eHENxDe5EWSQI7KyQOcTzI.roa (raw, json)
Hash identifier: eAaDpSuleTng+/o8l+HdR+Of86ijur6WM3wns0MrTiQ=
Subject key identifier: 7E:C5:4D:DD:E1:C4:37:10:DE:E4:45:92:40:8E:CA:C9:03:9C:4F:32
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018E4343427BA08BD6A4A49E93145E103598
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fsVN3eHENxDe5EWSQI7KyQOcTzI.roa
Signing time: Fri 15 Mar 2024 17:57:45 +0000
ROA not before: Fri 15 Mar 2024 17:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:43:42:7b:a0:8b:d6:a4:a4:9e:93:14:5e:10:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Mar 15 17:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec54ddde1c43710dee44592408ecac9039c4f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:4e:81:ce:16:fb:45:1d:75:fa:d2:e2:e8:
12:28:c4:a4:63:e1:00:62:36:c3:8c:dc:70:f4:fa:
28:e5:ac:42:c1:e5:a2:07:cc:35:4d:17:d2:90:06:
1b:80:79:de:9e:63:75:9a:ef:47:c0:29:fb:82:de:
a7:e4:93:d0:67:54:88:7a:b8:a8:e1:7b:8d:51:84:
c2:82:12:22:90:df:b0:92:c5:d3:81:54:f6:b4:ef:
22:47:ca:1f:b8:8d:cd:96:a8:ac:a5:32:c6:2c:29:
25:37:33:f2:45:b6:99:d0:77:04:2b:fc:66:cb:db:
0f:3e:c1:0b:02:04:35:24:61:14:09:4b:7a:9f:0d:
2a:1a:eb:9e:3c:b8:d9:cc:09:ec:3b:5c:32:6e:90:
4a:df:6a:fd:10:bd:9f:0d:06:df:b2:fc:d8:b7:eb:
01:0a:9f:ac:48:4d:90:45:e0:75:e8:56:b1:40:6e:
89:e8:7a:fe:45:b6:c5:b5:b5:24:d1:cb:2d:1e:a8:
ba:14:33:b1:2a:10:9d:30:18:11:3f:22:bb:88:be:
85:a3:4a:43:69:98:3d:eb:f9:f1:5c:05:6d:29:63:
5d:71:ba:cd:3c:c9:3b:75:64:45:27:92:95:cf:ca:
fd:54:10:e4:2f:b1:6c:0d:cb:09:63:03:7c:71:74:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:4D:DD:E1:C4:37:10:DE:E4:45:92:40:8E:CA:C9:03:9C:4F:32
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fsVN3eHENxDe5EWSQI7KyQOcTzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.72.0/21
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
16:5c:6b:5c:39:1a:c0:82:6d:25:5e:df:24:ee:a6:5c:45:b9:
15:08:00:4e:93:6a:94:86:3f:d3:27:08:f7:c5:07:87:25:ed:
b7:7f:f5:07:89:8d:c2:fa:c0:f6:f4:e3:30:e7:55:39:23:8a:
7c:24:c4:f4:a0:1f:91:00:18:ce:1f:b5:47:b0:1d:48:bb:c6:
14:88:eb:c5:5b:76:fd:98:77:e6:36:64:fe:fa:88:c7:6d:96:
b6:59:be:b4:d7:bc:2b:60:41:08:82:11:6b:95:2c:97:c3:d0:
45:42:98:83:fb:06:b4:a0:cc:0e:71:04:80:6d:bd:b9:54:dd:
fe:75:56:47:73:5d:15:a1:8f:fe:e5:87:21:e0:97:48:65:4b:
1b:ce:dc:6f:e2:2b:3f:3b:82:33:95:a2:81:75:f9:3e:2d:69:
52:70:fc:73:cb:b7:46:cd:3a:8e:8c:9d:e7:94:8e:96:1e:5d:
83:11:39:16:59:f0:1c:38:b8:98:ac:da:f2:a7:b6:e6:6f:57:
84:ee:0e:d9:c5:40:a2:83:2e:ba:24:d5:88:07:af:b3:1b:31:
bf:5b:09:b2:3f:4f:fa:09:ec:0e:ad:d2:16:88:b9:dc:68:d1:
85:e5:54:eb:84:ab:93:37:a8:e7:6e:05:24:25:f9:9c:79:a3:
91:dc:bb:1d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY5DQ0J7oIvWpKSekxReEDWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQwMzE1MTc1NzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWM1NGRkZGUxYzQzNzEwZGVlNDQ1OTI0MDhlY2FjOTAzOWM0ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLtOgc4W+0UddfrS4ugSKMSkY+EA
YjbDjNxw9Poo5axCweWiB8w1TRfSkAYbgHnenmN1mu9HwCn7gt6n5JPQZ1SIerio
4XuNUYTCghIikN+wksXTgVT2tO8iR8ofuI3NlqispTLGLCklNzPyRbaZ0HcEK/xm
y9sPPsELAgQ1JGEUCUt6nw0qGuuePLjZzAnsO1wybpBK32r9EL2fDQbfsvzYt+sB
Cp+sSE2QReB16FaxQG6J6Hr+RbbFtbUk0cstHqi6FDOxKhCdMBgRPyK7iL6Fo0pD
aZg96/nxXAVtKWNdcbrNPMk7dWRFJ5KVz8r9VBDkL7FsDcsJYwN8cXRvUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH7FTd3hxDcQ3uRFkkCOyskDnE8yMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvZnNWTjNlSEVOeERlNUVXU1FJN0t5UU9jVHpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVXPQAwQD
1ZFIAwQD1ZFYMA0GCSqGSIb3DQEBCwUAA4IBAQAWXGtcORrAgm0lXt8k7qZcRbkV
CABOk2qUhj/TJwj3xQeHJe23f/UHiY3C+sD29OMw51U5I4p8JMT0oB+RABjOH7VH
sB1Iu8YUiOvFW3b9mHfmNmT++ojHbZa2Wb6017wrYEEIghFrlSyXw9BFQpiD+wa0
oMwOcQSAbb25VN3+dVZHc10VoY/+5Ych4JdIZUsbztxv4is/O4IzlaKBdfk+LWlS
cPxzy7dGzTqOjJ3nlI6WHl2DETkWWfAcOLiYrNryp7bmb1eE7g7ZxUCigy66JNWI
B6+zGzG/WwmyP0/6CewOrdIWiLncaNGF5VTrhKuTN6jnbgUkJfmceaOR3Lsd
-----END CERTIFICATE-----
Generated at Thu May 2 02:12:58 2024 by rpki-client on console-ams.rpki-client.org