Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/74FiFUUCcsV_j506QvqvuUKXA1c.roa
File: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (raw, json)
Hash identifier: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=
Subject key identifier: EF:81:62:15:45:02:72:C5:7F:8F:9D:3A:42:FA:AF:B9:42:97:03:57
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 019426D974E751D931E2257AA0CB37D9608B
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/74FiFUUCcsV_j506QvqvuUKXA1c.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39591
IP address blocks: 91.198.234.0/24 maxlen: 24
193.23.113.0/24 maxlen: 24
2001:678:668::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:74:e7:51:d9:31:e2:25:7a:a0:cb:37:d9:60:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef816215450272c57f8f9d3a42faafb942970357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:d7:e2:50:f5:b2:8f:7d:e9:57:54:61:f4:
ad:10:89:e0:6a:1d:70:30:db:f5:a6:d6:fa:f1:27:
f5:cc:82:ba:b9:6b:06:76:aa:5a:19:de:ac:22:59:
2f:86:36:11:ca:af:2f:b3:af:a2:a5:6e:eb:54:14:
cd:02:36:f7:c0:6b:51:c1:f9:22:1e:0a:5a:ee:ad:
a6:81:e4:bd:06:5d:99:a9:41:7e:7b:a3:6c:8f:59:
33:50:d3:84:36:0a:29:26:ec:14:45:9f:03:07:14:
10:3c:d0:4d:26:ea:4d:a1:82:90:6f:64:df:01:cc:
99:f5:93:ff:c6:2b:2c:33:3a:fa:39:0b:8c:2a:0c:
d9:61:13:0a:37:6e:da:1a:b5:92:34:cc:72:d2:8a:
19:08:7d:04:d5:ec:7e:3a:1a:e1:d1:96:9f:f1:73:
f0:b6:6e:37:b9:22:2e:80:f5:17:75:43:d4:80:e1:
d9:fa:bb:82:e7:b4:eb:e7:3d:87:9e:66:22:ad:6a:
b9:36:84:ba:bb:99:f4:8e:da:75:c8:ed:ba:2d:8a:
68:ea:8f:28:63:3b:7b:bf:df:82:6b:df:76:fe:30:
14:de:2f:7c:6b:85:d9:ca:a0:cc:8b:9a:70:c5:d9:
e1:b3:bd:20:b6:93:f0:e8:4a:78:d9:81:3b:b2:c9:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:62:15:45:02:72:C5:7F:8F:9D:3A:42:FA:AF:B9:42:97:03:57
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/74FiFUUCcsV_j506QvqvuUKXA1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.234.0/24
193.23.113.0/24
IPv6:
2001:678:668::/48
Signature Algorithm: sha256WithRSAEncryption
75:4a:fb:b6:40:a2:b2:29:b9:da:6c:3d:54:f5:b2:0b:9c:e7:
76:f7:99:0a:86:65:da:ea:f8:58:42:4d:48:83:43:fe:0e:d3:
c0:63:ab:1e:75:16:be:6f:80:5d:9b:ac:2c:2b:c0:39:4f:b5:
79:ba:09:c2:6b:01:4f:7b:5a:7b:5e:10:6a:41:d6:c7:e6:59:
a4:47:bb:13:4c:59:5d:45:22:69:9d:5b:8f:e0:50:f5:5e:93:
e4:1a:70:69:6b:64:a1:a8:8f:57:7f:d9:74:52:5a:0f:fe:2f:
d5:8a:a4:1d:74:a0:be:62:64:aa:48:7a:45:c3:e1:a3:aa:a9:
d3:94:f3:e5:9c:ee:21:1a:ad:85:e8:87:c9:59:aa:39:7b:a9:
35:46:b6:ea:69:54:0a:cc:7c:4e:3b:d6:65:71:8b:aa:dc:80:
70:ae:66:9a:1e:2c:cd:25:dc:38:ad:9c:bd:96:9e:11:09:31:
46:05:1d:f2:6c:46:74:06:ea:f9:9d:45:12:ae:a7:82:01:3c:
22:f8:83:17:47:f5:25:61:c8:9a:99:ff:50:3e:5d:f1:de:c6:
a2:11:f2:4f:1a:42:88:8d:48:7d:cc:9b:c1:ba:56:e9:9c:60:
3a:9e:d4:ba:61:77:10:97:0b:af:d6:9f:5f:f4:57:6e:b8:3b:
58:04:ab:61
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQm2XTnUdkx4iV6oMs32WCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NmYwNGZjNWNhODc1MzE1YWIwYjg1NGI2NDUwNmIwOWM5
OThlOWEwHhcNMjUwMTAyMTE0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjgxNjIxNTQ1MDI3MmM1N2Y4ZjlkM2E0MmZhYWZiOTQyOTcwMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywHX4lD1so996VdUYfStEIngah1w
MNv1ptb68Sf1zIK6uWsGdqpaGd6sIlkvhjYRyq8vs6+ipW7rVBTNAjb3wGtRwfki
Hgpa7q2mgeS9Bl2ZqUF+e6Nsj1kzUNOENgopJuwURZ8DBxQQPNBNJupNoYKQb2Tf
AcyZ9ZP/xissMzr6OQuMKgzZYRMKN27aGrWSNMxy0ooZCH0E1ex+Ohrh0Zaf8XPw
tm43uSIugPUXdUPUgOHZ+ruC57Tr5z2HnmYirWq5NoS6u5n0jtp1yO26LYpo6o8o
Yzt7v9+Ca992/jAU3i98a4XZyqDMi5pwxdnhs70gtpPw6Ep42YE7ssmY/QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFO+BYhVFAnLFf4+dOkL6r7lClwNXMB8GA1UdIwQY
MBaAFBVvBPxcqHUxWrC4VLZFBrCcmY6aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzEwY2UtNDQwZi00MDVmLWFjNTAt
YWE5NDI5OTRmYzYwLzEvNzRGaUZVVUNjc1ZfajUwNlF2cXZ1VUtYQTFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mNzEwY2UtNDQwZi00MDVmLWFjNTAtYWE5NDI5OTRmYzYw
LzEvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW8bqAwQA
wRdxMA8EAgACMAkDBwAgAQZ4BmgwDQYJKoZIhvcNAQELBQADggEBAHVK+7ZAorIp
udpsPVT1sguc53b3mQqGZdrq+FhCTUiDQ/4O08Bjqx51Fr5vgF2brCwrwDlPtXm6
CcJrAU97WnteEGpB1sfmWaRHuxNMWV1FImmdW4/gUPVek+QacGlrZKGoj1d/2XRS
Wg/+L9WKpB10oL5iZKpIekXD4aOqqdOU8+Wc7iEarYXoh8lZqjl7qTVGtuppVArM
fE471mVxi6rcgHCuZpoeLM0l3DitnL2WnhEJMUYFHfJsRnQG6vmdRRKup4IBPCL4
gxdH9SVhyJqZ/1A+XfHexqIR8k8aQoiNSH3Mm8G6VumcYDqe1LphdxCXC6/Wn1/0
V264O1gEq2E=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:57 2025 by rpki-client