Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/fPMOD50p7f8VOuNLZG-FDXHThec.roa
File: fPMOD50p7f8VOuNLZG-FDXHThec.roa (raw, json)
Hash identifier: 8z3cuA7EtBLaTAhgxoKw2t2+AAHUPP6yvVAECUTimeE=
Subject key identifier: 7C:F3:0E:0F:9D:29:ED:FF:15:3A:E3:4B:64:6F:85:0D:71:D3:85:E7
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018CC8DED062A2699EC957C4C67EB7AF287B
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/fPMOD50p7f8VOuNLZG-FDXHThec.roa
Signing time: Tue 02 Jan 2024 06:31:34 +0000
ROA not before: Tue 02 Jan 2024 06:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211701
IP address blocks: 185.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d0:62:a2:69:9e:c9:57:c4:c6:7e:b7:af:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 06:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cf30e0f9d29edff153ae34b646f850d71d385e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:a6:8e:73:df:58:b2:da:e5:f5:d7:b6:35:
ab:4a:69:fc:7c:cd:3b:3c:35:99:df:f3:f5:97:52:
37:cc:32:36:d7:87:fb:ad:48:b4:4b:2d:e0:b2:74:
50:92:80:e7:48:f1:3e:30:0a:5b:23:ed:81:83:b5:
20:a8:fc:52:6e:3d:d4:28:26:51:e2:d8:ee:9d:00:
48:7d:a4:e8:ac:67:19:b4:a9:d5:b2:97:4f:b2:2b:
9f:4f:6a:78:4e:23:15:12:12:2a:47:6d:0f:a7:92:
bb:ef:fe:8d:f6:06:6e:64:a1:ed:12:89:ca:86:89:
a2:82:38:fc:e4:33:95:47:1d:52:d3:b1:26:8d:f8:
32:7c:38:04:0d:5d:92:67:30:7c:3d:37:f7:9b:15:
c8:fb:03:e8:e2:d3:5f:20:d8:f5:a0:86:63:c7:61:
ce:03:2d:9b:1f:45:8e:65:7f:bc:28:cf:30:7c:b0:
0f:1d:b7:f5:fa:ca:14:c3:11:33:e9:38:52:63:c2:
40:b7:0a:27:0c:36:d2:f1:02:df:df:d5:a1:f3:f8:
6f:7a:f0:55:85:48:ff:a0:a8:30:b8:b2:8a:15:a7:
ca:3e:0b:0b:a6:4e:3a:6e:22:bc:f7:b6:2d:6e:9b:
36:cd:16:e0:42:ee:f0:b1:a3:3a:32:40:5c:92:e1:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F3:0E:0F:9D:29:ED:FF:15:3A:E3:4B:64:6F:85:0D:71:D3:85:E7
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/fPMOD50p7f8VOuNLZG-FDXHThec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ea:93:30:aa:af:ce:d7:c1:05:97:d5:bc:3d:2c:8d:8d:b3:
87:ca:33:7a:e3:01:58:11:8e:f2:d1:e1:48:6d:c0:50:70:ec:
6e:f3:25:e1:d9:64:de:88:a7:5d:f7:90:a5:be:49:58:bb:f3:
cc:17:63:31:eb:72:09:54:89:52:af:89:a7:34:d5:a2:82:1a:
1b:66:9a:3d:3c:eb:30:c1:dc:83:d6:f4:aa:df:f1:c0:d8:91:
db:17:8f:34:e5:26:88:d7:b3:d7:49:8a:1d:c0:6b:6b:9b:fe:
14:bc:6e:ca:7b:10:41:77:89:69:73:7a:04:c1:68:57:90:59:
72:05:f1:b5:4a:0d:4c:f6:e7:94:9e:08:1a:4d:09:61:c6:b4:
ef:6f:f1:bf:29:06:87:e1:9b:4c:4c:0a:54:1e:3b:e2:b6:fe:
87:bf:31:73:28:12:58:13:cf:23:61:b1:29:3d:fa:7c:a2:eb:
ae:0f:2e:55:93:e3:8f:6f:e1:98:30:af:17:d2:b7:4d:b4:82:
53:50:84:e9:a9:82:3f:b6:b7:d7:c9:c3:02:3e:9c:c8:10:04:
db:2e:24:8a:10:50:74:fc:20:b6:d3:2e:bb:14:2a:da:34:6b:
c6:fb:66:e6:87:42:d8:76:28:b8:0b:97:e1:4b:88:dc:53:89:
e7:40:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:30:19 2024 by rpki-client on console-fra.rpki-client.org