Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/FYuJbuVTrtZPKmibp_hjBhFHx40.roa
File: FYuJbuVTrtZPKmibp_hjBhFHx40.roa (raw, json)
Hash identifier: 09PmJxEsW7fWN2nbSzypl/KvjX8tAJpk4RbpMJQdSXU=
Subject key identifier: 15:8B:89:6E:E5:53:AE:D6:4F:2A:68:9B:A7:F8:63:06:11:47:C7:8D
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 018CC7270E628F510F7549D3A6AA34119327
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/FYuJbuVTrtZPKmibp_hjBhFHx40.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204835
IP address blocks: 45.11.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 12:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0e:62:8f:51:0f:75:49:d3:a6:aa:34:11:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=158b896ee553aed64f2a689ba7f863061147c78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:29:b1:67:5a:ac:ef:0b:3d:7b:31:eb:51:
18:dd:dc:4d:c2:f0:cc:81:b6:f8:08:1e:b6:bf:52:
aa:b8:77:2a:c0:0d:f6:01:e9:27:f4:20:6c:7d:4e:
43:c1:02:7d:71:3a:b4:32:71:c1:57:73:ec:74:34:
11:59:dc:8b:78:7a:58:20:98:1e:1b:ff:e1:77:85:
39:f9:21:c1:57:5f:78:58:7b:fc:a8:68:6c:f0:bd:
d5:5b:76:c1:61:88:81:3e:72:86:c2:0f:86:a0:99:
1f:0d:e3:70:a6:03:95:b8:39:5f:b7:2b:4a:e6:ba:
d6:36:29:e4:71:09:5b:ef:8e:26:f8:26:83:36:34:
14:69:a9:0c:a0:35:69:0a:1e:5f:7a:f8:10:ab:eb:
ad:c9:a7:cc:49:78:d2:95:c0:92:3f:fb:51:9e:e3:
1e:e9:03:e7:3e:fd:92:25:94:e0:14:51:96:b1:9c:
e0:b5:a2:c0:22:37:8d:0a:19:a0:96:80:53:77:10:
5a:ce:92:ae:40:7f:94:31:f0:9d:65:5e:c8:64:5a:
83:e1:21:e1:57:3e:5a:1c:17:58:30:cb:ef:0f:db:
76:c1:57:c8:1d:e5:ff:09:2b:04:1a:32:26:4a:fa:
1b:d8:6b:9c:66:16:e6:96:b5:2e:10:45:6c:12:41:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8B:89:6E:E5:53:AE:D6:4F:2A:68:9B:A7:F8:63:06:11:47:C7:8D
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/FYuJbuVTrtZPKmibp_hjBhFHx40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.208.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:c5:b7:85:7b:d5:fb:99:fb:f4:fd:ad:70:80:99:b5:9d:de:
6d:48:08:77:ef:55:89:56:8b:0f:02:3c:10:33:a8:77:68:f8:
5a:36:04:9f:f2:12:16:b7:d0:d6:54:3e:2e:bc:3b:a6:55:8c:
a3:b9:bb:44:92:f5:7d:37:22:e2:13:c9:40:db:d0:d3:b6:60:
b6:55:20:89:6c:4c:7b:18:45:93:1a:73:af:42:39:04:df:00:
db:22:03:dd:f7:ed:49:b7:4d:99:f8:b3:28:93:82:06:26:a0:
0d:79:c0:47:bc:b2:2d:70:f8:d4:a5:05:b7:11:bc:a8:56:ae:
9a:e2:63:30:46:35:06:8d:ca:40:22:31:02:16:5c:46:5a:57:
99:f1:e9:e0:05:04:fe:19:66:e7:43:75:0d:16:12:38:37:26:
f5:9c:1b:aa:9f:6c:47:ac:48:de:1e:7c:1d:6a:c2:c2:54:0b:
7d:e4:ef:7d:cf:60:08:ae:cc:f1:a3:df:c1:f1:7e:80:00:10:
ce:16:f0:7e:2e:9e:d5:44:46:72:be:2d:69:01:fb:ab:04:85:
19:55:f2:b7:00:4d:25:b6:f0:64:12:aa:49:66:78:89:d3:0c:
6b:8b:a2:dc:af:3f:9f:1a:d9:0b:a4:7c:30:a8:12:90:03:21:
ee:a3:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 16:51:15 2024 by rpki-client on console-fra.rpki-client.org