Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/fb-3i7-BtAkNKmchdkbJ8zNsswY.roa
File: fb-3i7-BtAkNKmchdkbJ8zNsswY.roa (raw, json)
Hash identifier: yvEGMArZiM8bHyX9QjJS/yNbYcyFNWtQYf9LPzQ1ONQ=
Subject key identifier: 7D:BF:B7:8B:BF:81:B4:09:0D:2A:67:21:76:46:C9:F3:33:6C:B3:06
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018EC2BFC89F0A68CC1F0437038A5F9EFCB2
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/fb-3i7-BtAkNKmchdkbJ8zNsswY.roa
Signing time: Tue 09 Apr 2024 12:05:32 +0000
ROA not before: Tue 09 Apr 2024 12:05:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60287
IP address blocks: 5.42.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:bf:c8:9f:0a:68:cc:1f:04:37:03:8a:5f:9e:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Apr 9 12:05:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbfb78bbf81b4090d2a67217646c9f3336cb306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:e0:6f:bd:4e:c2:2d:96:a4:84:76:1c:41:
ba:8b:c9:a7:eb:5c:d9:d6:db:82:a9:8e:e4:9f:70:
e0:96:7d:09:f9:25:84:ba:c4:2b:de:b2:03:9a:fa:
a6:b3:78:7a:f8:3a:d9:a5:7e:d2:75:22:7d:03:b3:
3c:3f:7d:ea:13:4c:eb:cc:6c:12:46:d6:b1:23:2c:
cd:b9:85:66:bc:59:13:c4:e7:e4:4a:93:03:62:1c:
94:a4:08:0c:d3:88:0c:af:f1:ba:ef:fb:ec:86:f2:
a5:23:9e:95:50:af:d2:81:89:23:aa:7f:23:14:9d:
db:22:bf:7a:50:5a:6d:10:67:72:70:12:25:2f:f3:
d1:fd:c2:7f:ca:14:da:ca:73:f2:7a:39:a9:c4:17:
62:13:1e:44:74:05:bf:e6:be:6a:c8:96:fc:56:64:
99:4e:6b:67:bd:e0:88:4e:f3:a5:d7:f2:dc:e1:b8:
41:9d:c1:8a:f5:62:01:88:9a:f7:e3:4e:c5:6a:80:
d1:b0:08:f1:f6:b4:f4:03:72:32:78:d0:28:41:0f:
24:5f:82:16:74:3e:0c:64:8c:4f:20:85:82:71:2b:
72:e8:5c:f9:08:91:8a:10:4a:5f:19:5e:94:1b:7c:
1b:4a:2a:3c:06:40:45:96:2a:fb:fb:52:66:4b:6e:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:B7:8B:BF:81:B4:09:0D:2A:67:21:76:46:C9:F3:33:6C:B3:06
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/fb-3i7-BtAkNKmchdkbJ8zNsswY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f8:c7:91:dd:4b:aa:e6:93:1d:27:d8:2c:20:a8:05:7e:97:
e8:07:c9:29:69:80:1a:e5:5f:4d:83:59:ad:00:97:8e:6c:7d:
f8:02:90:2d:70:29:01:db:84:83:e5:87:a5:ca:98:e3:39:21:
7b:d6:59:44:fa:2b:dd:3b:81:4c:c3:d9:7c:c4:b5:c8:82:71:
65:fd:b1:cb:80:ec:22:2d:26:23:d3:8b:b8:32:ad:ec:c2:cb:
fc:68:72:21:ef:4e:38:22:d4:1e:40:04:84:c2:eb:5d:31:89:
00:5b:a7:9f:68:e0:9d:ee:d2:10:26:fe:28:96:9f:4c:01:ab:
e5:89:81:02:dc:01:ac:90:c3:e1:aa:99:b9:fd:a3:07:fb:b0:
72:2b:28:07:13:20:f2:1e:7d:c8:80:60:29:54:14:10:fd:fd:
2d:f5:fa:d1:cb:53:c0:5d:07:28:51:14:0e:46:c5:0a:40:7c:
06:b4:bf:fb:a3:50:3b:79:3a:bb:33:00:49:6d:28:01:80:cc:
e2:9e:ba:0f:82:50:ff:8e:63:81:0a:84:e4:df:00:e2:b5:c7:
aa:97:3a:df:eb:e3:aa:fb:14:57:06:78:02:ac:34:fa:04:70:
d4:04:81:47:5d:87:cc:c4:f8:d1:a2:b0:ca:9a:c7:27:75:3d:
a9:67:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 08:52:43 2024 by rpki-client on console-fra.rpki-client.org