Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/FX55KlV9TEtnShQSYbOZqzXShfQ.roa
File: FX55KlV9TEtnShQSYbOZqzXShfQ.roa (raw, json)
Hash identifier: E7+GNv0I8b9ZYT3qWZLUqN+W7CYkAshldqImCsnDggU=
Subject key identifier: 15:7E:79:2A:55:7D:4C:4B:67:4A:14:12:61:B3:99:AB:35:D2:85:F4
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 018EBD43904531903F44F39037CB0987AB8D
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/FX55KlV9TEtnShQSYbOZqzXShfQ.roa
Signing time: Mon 08 Apr 2024 10:31:45 +0000
ROA not before: Mon 08 Apr 2024 10:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 193.109.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:43:90:45:31:90:3f:44:f3:90:37:cb:09:87:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Apr 8 10:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=157e792a557d4c4b674a141261b399ab35d285f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:be:7f:bb:56:55:c0:af:20:f8:2e:c9:98:
94:62:02:fa:ed:8a:96:36:29:30:8c:ee:5c:ea:bc:
3e:8a:e1:7c:97:4e:f3:ed:6d:35:1d:25:6e:6c:04:
58:ab:d7:79:f4:59:62:22:f7:c6:ca:a3:ad:93:80:
28:01:af:32:31:84:70:44:e3:cd:72:c0:7a:e9:81:
03:45:9a:9d:6d:a8:50:76:ce:5f:d8:5c:18:7f:49:
91:80:48:18:70:b7:a6:6b:17:3c:0f:03:dc:0a:63:
a1:c9:04:d6:70:73:b4:39:21:db:ef:4f:78:7f:b1:
ea:ae:11:e2:20:5f:fd:73:36:f8:a2:58:33:bd:82:
e0:df:1f:a9:c8:eb:5f:22:87:21:b1:ac:6e:93:ef:
86:9e:b4:e5:35:03:a8:d9:45:c2:5e:85:9e:37:07:
1b:d5:ae:73:63:3f:e3:f1:54:66:0e:5e:33:0a:00:
e3:30:c8:c6:24:1d:bc:01:08:2f:f0:e5:38:ae:a8:
9c:ee:fe:8e:d0:21:bb:a8:87:74:6f:98:4c:4b:5b:
cd:1c:dd:03:16:dc:ab:9f:08:cc:91:b0:bf:5e:d4:
8f:2e:51:58:80:18:c2:49:8d:92:65:a9:e9:ee:b0:
3c:b3:c6:8f:61:0b:15:d0:1a:98:83:9c:fd:73:08:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7E:79:2A:55:7D:4C:4B:67:4A:14:12:61:B3:99:AB:35:D2:85:F4
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/FX55KlV9TEtnShQSYbOZqzXShfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:29:6e:45:b2:e0:55:13:5b:4d:1a:69:7d:94:8e:9b:37:cb:
d7:06:93:17:25:b6:2e:32:4e:8a:d2:67:f7:67:73:7c:ce:e1:
4a:2e:58:e0:bd:82:d8:9d:34:49:98:17:a2:d2:f1:84:c7:07:
93:11:22:05:38:53:d6:14:13:39:f8:65:36:6e:ee:3d:9e:1e:
96:fa:c9:95:a8:0d:3f:06:0b:9c:3b:f7:c3:53:55:a6:b3:17:
cb:ce:7a:9a:52:66:7f:6e:47:02:45:31:fc:f7:b5:8d:5e:d4:
55:6e:1b:f3:b6:af:6b:77:15:1a:6a:a4:67:47:72:ad:f3:a1:
c0:b0:ca:9b:12:67:85:cc:1d:4e:ae:33:78:d4:5c:00:13:e1:
0d:9b:ba:3f:6d:bc:07:ac:27:6d:5f:2f:0d:22:bb:ae:85:ef:
e2:2b:6f:31:69:e8:30:d8:5f:e7:fd:67:e6:07:bd:45:33:34:
56:26:d1:2e:75:38:3e:5c:4c:08:b1:c9:3c:6a:23:c0:f1:6d:
64:56:4a:e3:bf:84:8d:1e:22:99:c5:e9:a8:8e:b0:d0:68:11:
01:59:16:f6:12:72:48:e1:d8:df:18:7a:21:49:c8:05:0b:cb:
44:80:02:13:60:2e:5b:b4:1a:02:6f:26:62:07:4f:af:03:07:
71:23:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:11:42 2024 by rpki-client on console-ams.rpki-client.org