Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/sTG7Opp7CZ4bV-juvw_0pNpRAmg.roa
File: sTG7Opp7CZ4bV-juvw_0pNpRAmg.roa (raw, json)
Hash identifier: VsfBYlj4k7q4LlTAlgtnBLqxN2JE/kqJ/O2Xc719GuA=
Subject key identifier: B1:31:BB:3A:9A:7B:09:9E:1B:57:E8:EE:BF:0F:F4:A4:DA:51:02:68
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 018EE0EAC82D9A0824439770029FF5ECDB0D
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/sTG7Opp7CZ4bV-juvw_0pNpRAmg.roa
Signing time: Mon 15 Apr 2024 08:41:06 +0000
ROA not before: Mon 15 Apr 2024 08:41:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47461
IP address blocks: 193.108.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:ea:c8:2d:9a:08:24:43:97:70:02:9f:f5:ec:db:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Apr 15 08:41:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b131bb3a9a7b099e1b57e8eebf0ff4a4da510268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:49:62:77:84:f1:82:27:52:6b:16:b3:bd:b0:
66:89:e2:39:8d:ac:59:b1:30:e8:b2:5c:8c:f8:9c:
09:7d:6a:4c:56:c1:ca:be:65:36:39:5f:0a:42:22:
97:08:03:1a:99:5f:48:6c:cd:1f:3b:68:e9:1e:35:
63:40:c7:4b:5a:74:07:10:a0:83:c0:fd:5b:6a:c2:
c3:c0:73:b7:ed:30:5c:16:32:d7:27:09:b1:5f:77:
a3:3b:36:3e:73:a5:2c:95:36:59:bc:6c:c4:51:a2:
9a:f4:4b:d9:25:9b:06:87:d6:d6:d1:41:ff:39:66:
bb:64:b8:b7:fe:f1:79:f4:f0:61:91:76:08:ef:89:
b0:9e:e5:29:50:3c:c7:54:74:79:85:cf:b8:d5:61:
80:7d:ca:a4:dc:f1:e5:b6:02:57:a7:6b:c7:f7:f8:
a0:a4:f6:fd:fb:70:07:f7:ee:62:16:27:f5:b3:9f:
06:f6:58:c6:0c:fe:3b:2c:b8:a1:e9:fc:3b:49:43:
89:45:2c:a9:78:87:c1:97:42:f3:c3:67:60:f6:48:
42:64:30:c7:e4:86:a3:b2:20:88:af:f8:d2:26:99:
a4:4a:16:c6:b4:ba:97:38:1d:96:a1:7f:a7:83:84:
a5:db:73:50:71:12:dd:73:d4:9c:72:45:04:ab:36:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:BB:3A:9A:7B:09:9E:1B:57:E8:EE:BF:0F:F4:A4:DA:51:02:68
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/sTG7Opp7CZ4bV-juvw_0pNpRAmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b0:20:10:f4:9e:c9:d1:6f:26:a6:fe:ed:9b:dc:66:cb:9e:
d1:35:d1:8b:ab:0b:86:5d:2f:5c:46:7a:d4:a9:8c:36:bb:40:
4b:1d:00:df:3d:7b:12:4f:f4:7f:f3:a0:46:ad:73:8b:0e:43:
c6:83:e2:6b:3e:1c:82:f4:0b:87:45:c7:19:bc:f7:1b:b5:ef:
b3:b2:10:12:0d:01:c7:14:10:25:6e:0d:98:a0:2f:02:e3:e5:
f6:8d:ab:0b:a8:d4:95:2c:50:e7:02:31:93:60:b8:d6:60:d0:
d9:c2:05:3e:c2:22:9c:2d:35:b9:7e:ae:6a:3f:4f:72:f8:da:
cd:c7:f7:2c:88:54:d5:6a:77:e6:ef:18:0b:a2:e6:48:d2:9e:
64:f2:a4:62:ec:8a:67:b5:b2:77:e0:04:3a:4a:b8:5d:ca:c3:
cc:b0:20:11:22:55:80:1a:25:14:bf:75:81:28:05:f9:6f:b9:
ac:68:da:9d:70:db:cc:0e:a4:7f:15:d3:25:4f:d4:bc:a7:37:
18:95:ee:8c:8f:cc:ad:3a:fd:63:8e:bb:80:dc:e1:5e:81:c7:
4c:5a:5b:94:b5:d8:a2:33:af:02:f9:e1:cc:91:49:7c:d9:83:
24:69:07:45:3c:a8:a4:3c:3c:a8:ba:db:24:21:f0:66:1b:d9:
eb:50:30:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7g6sgtmggkQ5dwAp/17NsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNWM4NTI4ZjgxNzg3YzQ4OWM1NGE5OTM4MzkyNjlmNWE2
YjFmOTQwHhcNMjQwNDE1MDg0MTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMxYmIzYTlhN2IwOTllMWI1N2U4ZWViZjBmZjRhNGRhNTEwMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0lid4TxgidSaxazvbBmieI5jaxZ
sTDoslyM+JwJfWpMVsHKvmU2OV8KQiKXCAMamV9IbM0fO2jpHjVjQMdLWnQHEKCD
wP1basLDwHO37TBcFjLXJwmxX3ejOzY+c6UslTZZvGzEUaKa9EvZJZsGh9bW0UH/
OWa7ZLi3/vF59PBhkXYI74mwnuUpUDzHVHR5hc+41WGAfcqk3PHltgJXp2vH9/ig
pPb9+3AH9+5iFif1s58G9ljGDP47LLih6fw7SUOJRSypeIfBl0Lzw2dg9khCZDDH
5IajsiCIr/jSJpmkShbGtLqXOB2WoX+ng4Sl23NQcRLdc9ScckUEqzYgUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLExuzqaewmeG1fo7r8P9KTaUQJoMB8GA1UdIwQY
MBaAFH5chSj4F4fEicVKmTg5Jp9aax+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYt
M2Y3YTNlMDI1ZThiLzEvc1RHN09wcDdDWjRiVi1qdXZ3XzBwTnBSQW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYtM2Y3YTNlMDI1ZThi
LzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWy+MA0G
CSqGSIb3DQEBCwUAA4IBAQBLsCAQ9J7J0W8mpv7tm9xmy57RNdGLqwuGXS9cRnrU
qYw2u0BLHQDfPXsST/R/86BGrXOLDkPGg+JrPhyC9AuHRccZvPcbte+zshASDQHH
FBAlbg2YoC8C4+X2jasLqNSVLFDnAjGTYLjWYNDZwgU+wiKcLTW5fq5qP09y+NrN
x/csiFTVanfm7xgLouZI0p5k8qRi7IpntbJ34AQ6SrhdysPMsCARIlWAGiUUv3WB
KAX5b7msaNqdcNvMDqR/FdMlT9S8pzcYle6Mj8ytOv1jjruA3OFegcdMWluUtdii
M68C+eHMkUl82YMkaQdFPKikPDyoutskIfBmG9nrUDCQ
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:41:39 2024 by rpki-client on console-fra.rpki-client.org