Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/FnPazRzKIQB1T4VgUb8FnHMO82w.roa
File: FnPazRzKIQB1T4VgUb8FnHMO82w.roa (raw, json)
Hash identifier: pHQB+KAsL6wINeTpYg20wOKqmmPiqjo0nvcBu+FybD8=
Subject key identifier: 16:73:DA:CD:1C:CA:21:00:75:4F:85:60:51:BF:05:9C:73:0E:F3:6C
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 018CC5013039A185D2181F48FAA4542778D0
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/FnPazRzKIQB1T4VgUb8FnHMO82w.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50880
IP address blocks: 212.6.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:30:39:a1:85:d2:18:1f:48:fa:a4:54:27:78:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1673dacd1cca2100754f856051bf059c730ef36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:6b:21:43:4d:37:e5:96:b4:8a:00:3d:d5:
5a:b6:f8:75:80:47:5f:2c:b0:e3:a6:6d:d3:eb:a2:
e5:5d:38:38:c5:78:36:2f:e3:e0:97:a1:bb:ae:87:
94:47:7a:eb:b5:a9:a8:18:75:35:64:cc:69:74:99:
a0:dc:1d:32:b3:0c:6c:f2:0b:26:8e:47:95:37:2f:
c1:9f:ba:cf:b2:bd:7d:62:14:6c:c9:c4:50:c2:ac:
75:11:ee:62:d9:8a:ef:5a:e9:d4:17:b1:0e:09:4c:
35:66:c6:68:c1:40:19:12:9f:ca:a3:45:ed:ed:d5:
a7:07:36:96:92:6b:29:16:9f:6c:dc:2f:5b:a7:6c:
bc:64:a2:b2:8d:9c:f8:2d:b6:a6:eb:a7:a1:18:0a:
77:78:53:41:43:3a:7b:fe:a1:f9:19:24:8f:0a:1f:
8c:de:ea:d3:96:ff:d7:98:01:dc:3f:aa:dd:9e:5e:
d4:74:7a:e7:59:76:13:d5:f4:33:a8:0d:28:f6:18:
56:99:e7:93:22:6b:24:91:e0:25:a7:a4:be:28:24:
7d:89:82:f5:1c:d1:67:ad:5a:d7:0e:1c:dd:ab:36:
bc:2c:90:e1:31:d1:9a:2e:3f:3d:52:9d:84:40:16:
c7:ce:13:79:b8:44:a2:a0:50:8e:61:58:d5:43:df:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:73:DA:CD:1C:CA:21:00:75:4F:85:60:51:BF:05:9C:73:0E:F3:6C
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/FnPazRzKIQB1T4VgUb8FnHMO82w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:45:35:cd:68:1a:8f:b3:da:56:4e:dd:ab:04:cc:71:15:db:
ac:28:c2:61:9a:23:70:d8:bd:41:0e:51:39:b9:2c:7e:3b:7a:
4b:17:06:85:8e:ce:0e:be:3a:52:fa:ac:05:94:e8:2f:df:4a:
4c:5c:94:d6:93:e2:ce:98:87:b1:56:c0:a0:a2:88:99:33:65:
ae:f7:a3:f6:bf:5a:cc:f4:8d:67:ed:1a:13:05:af:77:e5:50:
8e:e5:56:1c:52:9b:79:2c:05:90:cd:bd:48:c9:5d:c0:0b:d9:
97:01:dd:12:d3:34:cb:3a:2b:b5:e4:7c:85:aa:38:ab:ed:10:
39:bc:44:58:ac:f6:68:90:c9:7c:2a:42:1b:83:f7:a8:d5:f6:
45:90:01:7b:3b:5c:0a:1d:b3:c8:66:b7:29:e1:e6:3f:d2:a6:
95:be:5b:43:af:e3:3c:fb:48:1f:7d:a2:d9:f9:0d:13:53:1c:
38:c6:11:89:29:5d:5f:12:24:e1:4d:33:7f:73:94:da:e4:af:
49:1e:5b:ec:3b:90:5a:a7:2f:da:2b:a9:cb:c3:bc:24:7f:b3:
da:5e:a5:2d:12:e3:22:71:6c:89:ae:d2:e5:02:cb:a8:f0:11:
32:49:65:c7:45:0e:8d:34:89:fd:86:0b:a2:43:21:fa:9d:52:
8a:0f:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:47 2024 by rpki-client on console-fra.rpki-client.org