Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/FTiBJr18tsm_GQOfs6xvm_gBoOY.roa
File: FTiBJr18tsm_GQOfs6xvm_gBoOY.roa (raw, json)
Hash identifier: 96Np2d+yXVEORSUtJbWOWFZVAdQZFU8vvi0XiRBeZ8w=
Subject key identifier: 15:38:81:26:BD:7C:B6:C9:BF:19:03:9F:B3:AC:6F:9B:F8:01:A0:E6
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 018F5171B378189183819E4CD7D7AA6D578B
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/FTiBJr18tsm_GQOfs6xvm_gBoOY.roa
Signing time: Tue 07 May 2024 05:05:56 +0000
ROA not before: Tue 07 May 2024 05:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20836
IP address blocks: 91.142.143.0/24 maxlen: 24
185.142.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:71:b3:78:18:91:83:81:9e:4c:d7:d7:aa:6d:57:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: May 7 05:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15388126bd7cb6c9bf19039fb3ac6f9bf801a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:0d:8a:04:32:61:d1:67:a5:5e:8c:ae:ae:
20:4c:2a:94:7e:56:06:34:00:a2:af:8c:a3:d4:6b:
62:2a:77:4c:2b:71:16:9f:db:18:d4:39:d7:14:8c:
e1:25:c1:39:c4:68:ed:eb:55:b0:db:aa:a9:3e:63:
6d:ea:40:e4:0f:db:45:48:33:55:98:d0:78:b9:f9:
7c:73:cf:91:b6:23:07:76:da:dc:66:2e:fc:8a:2c:
7a:7f:08:6e:88:9a:7d:52:ea:f9:e0:7c:7d:b6:86:
6b:18:4c:4f:e8:8c:3b:6e:da:2a:3b:d7:28:20:bf:
e5:7e:ad:2a:ba:10:7d:66:80:d2:90:db:58:18:bc:
02:a8:75:3d:32:3a:96:33:3f:f2:c6:33:14:48:f7:
72:68:e2:31:59:32:1d:93:8b:70:0d:05:5e:5f:8a:
e8:63:b3:d4:dc:09:3b:bc:bc:86:86:ab:0f:28:d1:
76:f0:9e:b8:7a:82:20:74:58:88:9b:38:35:97:d0:
1c:9a:73:80:aa:c6:62:26:3b:65:34:7c:ff:38:88:
53:1d:5b:80:2f:d0:ff:c6:2b:6d:9d:ed:43:b8:95:
90:ac:50:f8:ea:d0:cf:7d:56:3c:8f:1a:1b:ce:6e:
35:be:36:cd:a6:14:5b:22:e9:5d:c3:10:54:bf:6c:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:81:26:BD:7C:B6:C9:BF:19:03:9F:B3:AC:6F:9B:F8:01:A0:E6
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/FTiBJr18tsm_GQOfs6xvm_gBoOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.143.0/24
185.142.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:84:66:64:33:62:27:d9:a2:dc:10:c5:77:d1:46:bf:07:a0:
2c:44:4e:e1:e0:b7:76:78:a5:0e:e3:2d:ee:4b:be:af:9d:80:
46:8b:dd:85:69:ce:57:c8:ac:14:7d:02:11:8e:ea:fb:53:7c:
cb:ac:bb:42:e0:8e:f3:7f:55:e2:d1:c8:b3:d4:46:c2:f6:9c:
ad:44:5e:49:93:56:39:dc:cf:8e:86:ca:09:24:55:a8:05:1a:
bb:1b:41:b8:89:3a:42:96:cc:31:2a:64:df:b3:03:a4:e9:db:
9b:0e:f1:85:db:5d:cd:bc:c7:68:70:81:f4:3d:e6:9c:48:f4:
14:a7:1b:78:9c:18:d7:2c:87:ea:21:7a:df:4b:d9:be:1b:4c:
43:03:5f:ec:3b:65:13:98:21:36:03:74:a0:1c:e6:2d:51:58:
b0:7a:34:82:99:a3:2a:6a:3f:3d:0c:68:c4:6d:41:5c:18:7b:
fb:26:1e:28:d2:8b:f0:68:22:8a:eb:6f:f1:24:b3:25:e1:c5:
c6:a8:f3:4d:66:cd:c4:6a:e0:18:1b:b7:bb:c2:44:6f:ea:f7:
27:0a:18:4f:05:39:33:24:0a:c9:28:78:ea:c4:cf:4d:ef:9a:
5e:6d:65:fb:fb:c9:4e:46:28:b5:e6:6d:9e:95:85:b0:9f:7c:
ab:a2:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 13:29:20 2024 by rpki-client on console-ams.rpki-client.org