Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/fsfcfIcKDeVKyZV5RmqsIeNfhAY.roa
File: fsfcfIcKDeVKyZV5RmqsIeNfhAY.roa (raw, json)
Hash identifier: uXMUxpMpYAATlNgdA9rB+NmXMiAO6fu8HnGp7iyblJI=
Subject key identifier: 7E:C7:DC:7C:87:0A:0D:E5:4A:C9:95:79:46:6A:AC:21:E3:5F:84:06
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 018D12F134C06D0A42448F48DCB7C8255E66
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/fsfcfIcKDeVKyZV5RmqsIeNfhAY.roa
Signing time: Tue 16 Jan 2024 15:43:34 +0000
ROA not before: Tue 16 Jan 2024 15:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202975
IP address blocks: 85.116.132.0/22 maxlen: 22
89.105.88.0/24 maxlen: 24
89.105.89.0/24 maxlen: 24
185.89.222.0/23 maxlen: 23
185.135.100.0/23 maxlen: 23
185.135.102.0/24 maxlen: 24
2a06:f2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:f1:34:c0:6d:0a:42:44:8f:48:dc:b7:c8:25:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jan 16 15:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec7dc7c870a0de54ac99579466aac21e35f8406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:b2:13:ec:d3:f7:f8:81:25:54:df:ff:37:
89:0a:40:9d:54:88:32:ce:d9:80:d8:fc:7b:cd:33:
fb:fb:66:97:a9:c5:1c:fb:7c:96:2a:cc:4b:b8:37:
b2:5b:ef:d1:7b:2f:6c:47:94:f3:11:9d:cb:07:d4:
22:4e:c6:fe:d8:d4:b4:15:d3:bf:4b:b9:29:fd:81:
4b:75:7d:cd:d3:46:85:db:d9:11:6b:a9:97:a5:8b:
4f:de:c3:5b:76:cf:86:70:83:5c:6e:60:3b:d4:b7:
b5:58:1b:d8:fe:4c:d4:fd:50:9a:d8:25:5a:6b:ec:
26:25:96:4f:89:89:0a:f9:db:11:bb:91:43:61:19:
33:21:36:af:27:65:f8:bd:f6:99:23:a9:9a:7e:46:
5a:f1:78:e9:a9:6a:c5:e4:71:16:06:04:5d:79:59:
7a:19:c3:a8:36:c4:72:96:8a:ab:79:9a:50:72:d7:
0b:f2:c1:fd:d0:65:31:b2:3f:38:c7:df:86:c0:d9:
8e:0f:1b:0b:da:e1:7b:d2:4e:dd:af:d8:ac:3b:a0:
0f:58:1f:e9:17:43:21:cc:bb:21:22:46:af:90:4f:
25:df:ca:40:3c:83:f3:b2:9b:7e:18:c4:b0:a3:0c:
b5:2f:09:64:30:80:f7:e5:a0:25:8a:2b:8d:e7:34:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C7:DC:7C:87:0A:0D:E5:4A:C9:95:79:46:6A:AC:21:E3:5F:84:06
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/fsfcfIcKDeVKyZV5RmqsIeNfhAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.132.0/22
89.105.88.0/23
185.89.222.0/23
185.135.100.0-185.135.102.255
IPv6:
2a06:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:57:11:11:ee:b3:f0:2d:9d:c1:d3:1d:67:4f:9b:39:62:bf:
36:a9:29:b9:00:45:c5:68:49:a2:c6:31:ab:70:4d:10:b7:5d:
50:8d:72:63:41:37:54:22:77:4d:00:d7:71:e9:db:19:03:f5:
fe:74:fc:0e:1d:31:ea:10:6a:8a:fc:08:91:e4:ee:b3:a5:11:
a9:3a:54:e2:9d:f0:f7:13:c8:b2:9e:ea:cb:75:c8:57:fa:12:
07:46:8d:ac:f6:99:aa:d7:d8:6a:9c:97:4c:14:94:9a:96:13:
72:2f:fa:a5:bd:cd:c8:cd:09:7f:de:7e:16:aa:9a:8c:f0:cf:
df:04:bb:95:cf:8a:c0:58:ad:7f:e8:95:42:4f:e2:15:fe:92:
54:6d:9a:4e:2f:d9:d4:80:53:9e:b4:22:4c:ae:c8:94:47:d4:
29:52:94:24:0f:90:be:ea:64:16:a2:9a:24:58:e8:5d:e2:bb:
73:64:8f:a5:5c:6c:16:d0:3c:fd:ce:bd:74:fc:83:a9:f5:78:
1f:42:6a:23:d1:50:4c:54:ae:80:0f:a5:6c:f6:08:c6:08:4e:
fc:3d:62:11:ef:3c:df:b8:5b:29:36:2d:16:df:03:04:f4:08:
de:bc:b0:9e:a4:9a:c6:7d:0c:a5:d6:8c:7f:33:74:40:db:79:
3a:d8:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:20:19 2024 by rpki-client on console-fra.rpki-client.org