Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/f6GsoujfoNLfb9k7EowKnz_1jiM.roa
File: f6GsoujfoNLfb9k7EowKnz_1jiM.roa (raw, json)
Hash identifier: CPY5S7DHbwVXN/oPJJW5dfj94hpefb58AZL1YbesR48=
Subject key identifier: 7F:A1:AC:A2:E8:DF:A0:D2:DF:6F:D9:3B:12:8C:0A:9F:3F:F5:8E:23
Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial: 018CCA990DBF6903F14906944E98D1A48702
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/f6GsoujfoNLfb9k7EowKnz_1jiM.roa
Signing time: Tue 02 Jan 2024 14:34:37 +0000
ROA not before: Tue 02 Jan 2024 14:34:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142275
IP address blocks: 84.33.15.0/24 maxlen: 24
84.33.16.0/23 maxlen: 24
84.33.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:0d:bf:69:03:f1:49:06:94:4e:98:d1:a4:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Validity
Not Before: Jan 2 14:34:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa1aca2e8dfa0d2df6fd93b128c0a9f3ff58e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:25:41:0c:7a:49:23:55:ad:f2:34:23:d2:
a4:39:5a:df:a3:12:e7:4f:7a:b7:21:d1:ca:af:bf:
70:4a:21:be:3a:05:d0:4b:b0:fc:a1:7e:27:eb:1c:
74:62:a4:f0:9d:47:ad:18:27:ee:3e:a9:ad:be:3a:
be:87:7a:91:a9:4a:ce:02:16:9b:d3:7f:7e:2f:d8:
d6:5f:58:4f:a6:1e:2b:2a:31:e2:39:fb:f8:9f:4e:
86:62:9b:f7:30:0f:5c:94:2f:f7:8f:02:27:21:0a:
8e:7f:bb:76:a4:99:1e:a1:a4:2a:dd:68:a6:ad:58:
ed:08:f6:94:02:4c:ff:75:ad:2c:d2:ce:c8:24:1e:
25:11:45:dd:e7:3a:db:b5:b1:63:84:65:0f:7d:d9:
52:e7:ae:14:3e:08:64:82:4f:5b:a1:12:73:a9:a3:
cf:9b:ea:e2:66:20:56:74:49:3f:5e:cd:42:25:14:
4a:18:32:59:b6:51:50:2f:56:26:06:81:a6:83:12:
ad:f2:0f:81:c3:ce:56:6f:b0:68:5b:46:01:61:7a:
51:1f:90:50:fa:3b:a4:a8:fb:c3:76:a4:71:92:25:
86:2a:b0:18:3b:8d:b9:e7:04:dd:1a:4d:9d:7a:a2:
d5:4e:63:23:80:33:28:3b:e2:bd:a7:07:73:3c:80:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:AC:A2:E8:DF:A0:D2:DF:6F:D9:3B:12:8C:0A:9F:3F:F5:8E:23
X509v3 Authority Key Identifier:
keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/f6GsoujfoNLfb9k7EowKnz_1jiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.33.12.0/23
84.33.15.0-84.33.17.255
Signature Algorithm: sha256WithRSAEncryption
0c:cb:2e:51:23:2a:dc:6c:4d:e4:4d:2f:63:fd:0e:d5:c7:b4:
da:b9:8a:81:c1:b2:b9:c2:c2:bc:f1:66:dc:ca:19:5d:5b:38:
dd:8b:48:96:6e:64:32:e3:20:39:a7:2a:ed:d5:f9:c4:df:f8:
54:f1:f3:e7:58:2d:af:23:91:e6:cb:66:29:28:f2:fa:a4:29:
49:7f:fb:54:a0:43:0f:db:f0:f9:58:b6:25:7e:bd:06:31:0e:
5a:57:bf:c2:d7:ad:89:74:2f:e2:13:56:cb:6b:a3:d7:b0:a7:
da:0d:2c:75:21:97:85:41:7f:01:2e:c4:f2:36:cd:35:3b:6c:
c8:af:46:aa:36:93:19:87:b8:37:f3:e8:5e:cc:40:c4:f3:bb:
98:a2:11:86:7e:82:94:62:30:97:86:b6:9f:23:cd:47:ee:24:
f5:12:e2:3b:6c:2b:04:ba:76:8e:f5:4c:ba:be:f9:a9:6f:23:
9f:a0:cb:b5:a8:49:f7:40:8c:5b:c7:9b:ae:0d:0f:0e:27:21:
84:66:cd:9e:7d:b6:35:a1:42:42:b0:a6:2d:d4:0f:a5:a4:4a:
34:cd:6a:56:96:7b:dc:08:82:8d:9b:45:db:07:a6:68:33:9e:
22:d8:56:14:f6:1f:c8:d3:10:e9:94:a8:04:93:b5:e6:27:0a:
75:1d:43:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:19:20 2024 by rpki-client on console-fra.rpki-client.org