Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/ffgd_T-f9GjEIXEHh6tTMjIp2sM.roa
File: ffgd_T-f9GjEIXEHh6tTMjIp2sM.roa (raw, json)
Hash identifier: V/jhWP8kVAnD1IlrZOqwM3CsgdPI8gAv7WaqQDopnEI=
Subject key identifier: 7D:F8:1D:FD:3F:9F:F4:68:C4:21:71:07:87:AB:53:32:32:29:DA:C3
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 018CCA2A4EBD18BC4200C3B2BAFBE8F91406
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/ffgd_T-f9GjEIXEHh6tTMjIp2sM.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34253
IP address blocks: 194.242.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4e:bd:18:bc:42:00:c3:b2:ba:fb:e8:f9:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7df81dfd3f9ff468c421710787ab53323229dac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:dc:71:05:2a:9a:e3:b4:69:f9:95:12:ca:
1e:ec:61:52:ac:45:fb:89:fc:d5:9d:c3:f3:4c:c6:
5a:c4:28:de:db:42:5a:6d:e1:cd:cb:c7:8d:08:60:
2f:d6:34:f8:10:92:81:f1:aa:25:d5:d8:13:4f:6f:
85:56:45:0e:3d:89:4c:59:c6:f8:fd:fb:88:a4:9d:
72:ed:3e:1f:15:6f:b2:39:e3:95:62:7d:41:70:a9:
61:d3:2f:f1:b6:60:9c:3d:7c:4c:22:de:12:43:1f:
2f:df:f9:b3:c3:b5:59:fc:23:28:8f:c0:cb:ba:1b:
bd:72:ba:eb:35:89:7b:49:e6:16:19:25:9f:86:c7:
a9:b5:4c:ad:cb:a2:dc:81:12:3c:4c:c4:1a:70:6f:
67:17:fd:6d:d1:ac:bd:99:61:ac:19:39:f2:d3:51:
91:02:e6:c5:db:49:3c:ea:03:34:af:93:60:ee:3c:
31:24:76:d9:83:a2:27:06:a0:b8:8f:01:b2:6e:4d:
7d:0f:b4:d4:33:4d:25:c2:76:fe:8f:7f:ef:9f:45:
4c:eb:c0:0c:f5:f7:06:74:10:15:e7:3d:f6:6c:5f:
e9:30:2d:90:8d:51:dd:c0:38:f0:f8:6a:85:04:29:
35:e3:f3:8e:12:4e:2c:d7:55:49:6f:32:96:fe:07:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:1D:FD:3F:9F:F4:68:C4:21:71:07:87:AB:53:32:32:29:DA:C3
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/ffgd_T-f9GjEIXEHh6tTMjIp2sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6e:84:cd:15:b6:da:d0:e8:ff:cb:ec:2e:25:47:f1:9a:de:
39:fc:a0:0e:3c:bb:42:bb:8a:ca:c3:9b:05:f7:d4:25:8a:08:
e1:2d:3f:15:36:57:8a:38:b9:6d:29:f4:91:04:39:f6:6f:0f:
56:c6:43:f6:d1:55:bc:37:02:53:c9:58:18:3c:3a:a1:5f:2d:
d4:c8:50:6a:27:b9:89:5a:a6:46:b1:30:09:27:29:df:fc:73:
f0:8e:24:fc:49:d9:3c:fd:c7:aa:14:93:20:8e:73:32:f1:29:
dd:25:8d:bd:2c:ff:ff:98:69:8c:5f:f5:7e:d5:58:d2:2a:19:
90:a2:11:2c:82:b5:7c:66:37:af:24:b8:1a:dd:03:4f:4c:e2:
d4:8a:ef:1e:fe:cc:9a:73:c5:3b:37:c5:55:95:b3:97:22:2e:
03:50:b3:51:39:5a:56:89:aa:fb:0b:63:c0:ed:27:08:f4:73:
91:eb:76:e7:89:f6:ac:e1:e6:a6:ef:8b:a5:ba:4b:8e:fe:64:
98:09:43:f5:d6:93:f3:ee:01:51:5d:51:57:0e:4d:e9:f2:2f:
bb:67:c9:7d:fb:00:b4:ba:7f:6b:b8:6c:28:da:68:97:13:ff:
3d:b6:2b:ad:a5:3b:34:3a:99:63:09:43:d5:54:8f:dc:7e:67:
7b:82:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:14:47 2024 by rpki-client on console-fra.rpki-client.org