Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/FFAM2sQWxr7kFN135RbqCINCJ3A.roa
File: FFAM2sQWxr7kFN135RbqCINCJ3A.roa (raw, json)
Hash identifier: 2NZW8nkyEbJXUDaLXGe8LPuBw1901xyNfmDZQycm9WE=
Subject key identifier: 14:50:0C:DA:C4:16:C6:BE:E4:14:DD:77:E5:16:EA:08:83:42:27:70
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018CC56EF3F5010E76950E0AC3CF81B3F716
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/FFAM2sQWxr7kFN135RbqCINCJ3A.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51855
IP address blocks: 78.108.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f3:f5:01:0e:76:95:0e:0a:c3:cf:81:b3:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14500cdac416c6bee414dd77e516ea0883422770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7f:d8:b1:e0:ff:04:5c:42:53:85:56:92:79:
4f:6f:2b:79:82:c8:90:cc:77:41:92:f0:cd:10:d8:
57:fa:66:ac:e2:65:78:41:d2:e3:0e:7c:3d:d3:24:
bb:7f:a8:5d:90:09:3b:24:28:eb:e8:5c:da:3b:eb:
12:87:27:3d:96:fc:01:9d:b6:25:94:81:88:06:27:
fa:bd:93:bc:b1:96:13:c8:5b:e1:04:7e:a2:84:8e:
00:3d:0f:8a:e8:4b:a8:97:0b:05:0b:cd:9c:86:42:
07:12:be:99:17:04:0d:c7:92:2e:f9:e6:2f:46:24:
b7:82:94:15:fd:d6:f2:48:68:66:f1:d6:0c:48:90:
a6:dd:30:ce:2e:5d:7b:92:e1:de:c9:f1:d2:d2:ca:
e5:4c:76:7e:df:99:b1:48:57:54:35:03:b2:82:2f:
97:a8:3f:6d:f2:e0:7e:11:3b:d1:5a:4b:1a:a9:78:
96:dd:83:41:c9:b1:04:5b:32:6a:50:98:54:cb:e5:
7d:f5:72:0b:a2:0f:64:ac:1d:e3:2b:c3:3c:2e:82:
c9:de:e8:48:1c:03:cc:ac:9c:3a:a8:1e:d3:e3:31:
8e:af:6c:c0:d0:4a:08:22:69:8a:4e:02:d6:d5:3e:
f4:0d:29:35:e6:32:e2:17:11:f4:75:a5:aa:2a:a8:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:0C:DA:C4:16:C6:BE:E4:14:DD:77:E5:16:EA:08:83:42:27:70
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/FFAM2sQWxr7kFN135RbqCINCJ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b4:e4:9a:76:e3:9c:2a:ec:08:5b:cd:44:83:5d:e9:31:a9:
0c:38:ba:48:43:a3:c9:6d:f1:20:f8:10:88:4d:50:b4:27:35:
c3:e6:2f:26:75:dd:95:ae:c9:18:fd:d2:62:53:02:47:d7:47:
38:af:e3:4e:24:91:04:3a:9d:40:5a:3d:37:30:81:80:60:5e:
e9:ad:54:09:64:2c:5a:e9:a7:cb:f3:48:72:dd:2d:73:8d:25:
51:4f:9b:72:cb:27:ed:3e:36:b6:6b:bd:f9:59:5c:4c:d2:9c:
1d:39:71:93:6b:81:94:23:df:a0:f7:07:c2:14:51:3b:6a:3b:
7a:47:a3:01:b6:e0:16:13:72:98:57:00:cf:e1:25:33:89:a3:
19:81:fd:3a:8a:36:84:9e:39:c5:fe:b7:eb:36:76:c5:87:eb:
a7:db:f4:5b:11:16:c2:18:aa:51:be:79:46:f1:bc:2a:c1:4c:
55:ac:b5:ad:72:f1:9a:38:31:b5:03:03:ca:de:47:5d:8c:12:
db:1d:9b:d6:45:74:50:41:9c:76:60:43:e9:32:c7:5b:2f:4b:
89:08:08:2c:86:ec:11:4a:94:64:30:7d:f3:70:1e:72:b6:95:
b6:b8:ae:1d:7c:7c:66:91:5b:f9:10:02:26:7b:3a:01:b6:c5:
6e:b5:09:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbvP1AQ52lQ4Kw8+Bs/cWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjQwMTAxMTQzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDUwMGNkYWM0MTZjNmJlZTQxNGRkNzdlNTE2ZWEwODgzNDIyNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH/YseD/BFxCU4VWknlPbyt5gsiQ
zHdBkvDNENhX+mas4mV4QdLjDnw90yS7f6hdkAk7JCjr6FzaO+sShyc9lvwBnbYl
lIGIBif6vZO8sZYTyFvhBH6ihI4APQ+K6EuolwsFC82chkIHEr6ZFwQNx5Iu+eYv
RiS3gpQV/dbySGhm8dYMSJCm3TDOLl17kuHeyfHS0srlTHZ+35mxSFdUNQOygi+X
qD9t8uB+ETvRWksaqXiW3YNBybEEWzJqUJhUy+V99XILog9krB3jK8M8LoLJ3uhI
HAPMrJw6qB7T4zGOr2zA0EoIImmKTgLW1T70DSk15jLiFxH0daWqKqgX3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBRQDNrEFsa+5BTdd+UW6giDQidwMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvRkZBTTJzUVd4cjdrRk4xMzVSYnFDSU5DSjNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmz3MA0G
CSqGSIb3DQEBCwUAA4IBAQCLtOSaduOcKuwIW81Eg13pMakMOLpIQ6PJbfEg+BCI
TVC0JzXD5i8mdd2VrskY/dJiUwJH10c4r+NOJJEEOp1AWj03MIGAYF7prVQJZCxa
6afL80hy3S1zjSVRT5tyyyftPja2a735WVxM0pwdOXGTa4GUI9+g9wfCFFE7ajt6
R6MBtuAWE3KYVwDP4SUziaMZgf06ijaEnjnF/rfrNnbFh+un2/RbERbCGKpRvnlG
8bwqwUxVrLWtcvGaODG1AwPK3kddjBLbHZvWRXRQQZx2YEPpMsdbL0uJCAgshuwR
SpRkMH3zcB5ytpW2uK4dfHxmkVv5EAImezoBtsVutQnn
-----END CERTIFICATE-----
Generated at Tue Apr 30 06:35:53 2024 by rpki-client on console-fra.rpki-client.org