Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/FgPloXv-iMukbDrRlSZ2_OUskJk.roa
File: FgPloXv-iMukbDrRlSZ2_OUskJk.roa (raw, json)
Hash identifier: jSNE9PbKCFGdvJ4KdqbNReZywAk+KDGWDNc3yWjz2Ks=
Subject key identifier: 16:03:E5:A1:7B:FE:88:CB:A4:6C:3A:D1:95:26:76:FC:E5:2C:90:99
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 018FD76F50AA81E58995E7BAAC207BD2C4C5
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/FgPloXv-iMukbDrRlSZ2_OUskJk.roa
Signing time: Sun 02 Jun 2024 05:32:27 +0000
ROA not before: Sun 02 Jun 2024 05:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51002
IP address blocks: 176.123.208.0/21 maxlen: 24
193.243.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d7:6f:50:aa:81:e5:89:95:e7:ba:ac:20:7b:d2:c4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Jun 2 05:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1603e5a17bfe88cba46c3ad1952676fce52c9099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:0c:4d:a5:2b:69:e7:ed:3c:9b:b2:c6:75:
43:c8:11:91:12:ac:22:87:5c:8e:ed:9a:d8:1b:57:
69:f4:a2:48:54:4a:4c:9c:75:ba:7d:a3:1b:5d:ec:
6f:b8:2e:f2:00:63:57:b7:68:36:2e:83:64:e7:91:
a7:e5:06:21:30:b7:f0:e5:e8:75:d2:76:7f:a0:66:
10:89:0b:b9:18:ab:41:bd:14:d4:d6:22:0c:b3:e9:
dc:6f:5b:09:e4:8f:67:78:86:f3:cb:2d:17:d0:87:
26:0f:ab:98:a0:f3:b2:0d:c8:0c:55:50:c4:f3:6e:
31:1a:a7:ee:9a:8c:9e:96:39:f8:4d:22:39:c8:63:
a9:28:34:72:5a:42:44:aa:59:cc:d8:7f:49:55:5b:
d4:25:f3:a2:0d:3a:ff:0c:fd:1c:7d:61:7f:6b:63:
77:83:d6:30:e0:62:4a:9c:2d:5a:91:cd:4c:30:37:
34:51:c5:fe:c3:da:11:8a:34:f7:a0:b7:3d:43:99:
d8:b6:5a:9d:a3:4e:ff:a7:f9:e4:9c:ba:be:d9:6c:
9b:f5:36:06:fd:61:29:20:b9:83:e6:02:f7:0f:b7:
33:78:c6:61:5f:f3:37:4e:60:d2:e0:3c:f5:e4:3c:
3b:f2:1d:8a:dd:61:a8:8e:44:7a:91:ad:87:ea:d2:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:03:E5:A1:7B:FE:88:CB:A4:6C:3A:D1:95:26:76:FC:E5:2C:90:99
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/FgPloXv-iMukbDrRlSZ2_OUskJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.208.0/21
193.243.168.0/22
Signature Algorithm: sha256WithRSAEncryption
65:88:71:c5:fe:0a:71:03:bd:08:f8:a8:f8:5c:fb:f4:ae:3c:
6c:d1:73:02:88:ea:2b:91:bc:d0:84:7a:a4:5b:62:d4:8b:81:
25:48:96:1a:69:64:cb:e7:06:16:ec:93:f5:06:67:4c:7e:87:
03:7a:42:0f:35:95:65:9e:fa:8e:41:e4:55:a7:f7:2f:02:e5:
df:7a:20:eb:38:d5:48:f8:fe:44:69:d1:fe:d9:8b:57:8a:bb:
6c:c0:8b:b1:97:43:8b:99:d8:74:3b:63:9d:3a:81:9b:9d:1d:
82:45:ee:01:78:97:8e:a1:b8:9d:7b:cc:7d:a7:cf:fb:a6:be:
c8:93:85:a3:a4:66:49:32:53:fb:49:11:11:04:78:c1:78:fd:
5d:fa:74:8e:d3:39:37:ca:e6:cc:89:81:3d:8e:5e:df:a0:31:
75:66:1a:0f:d3:79:62:7b:cd:81:1a:98:51:31:1c:60:ef:a1:
46:69:7f:3c:b5:c4:77:ca:a9:56:9d:4f:50:ae:b7:39:8f:86:
b4:3a:43:5e:b9:20:a8:f5:56:67:6c:8f:43:b9:4c:fd:83:4d:
cd:b8:85:88:3e:41:97:00:fe:0d:41:0d:02:d0:d5:3c:b7:17:
9a:b4:58:f1:02:e0:d9:fb:70:10:0e:90:9b:3c:cf:9c:4b:62:
16:85:b9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:31:42 2024 by rpki-client on console-ams.rpki-client.org