Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/fvaDl5bbqEZbWZiySoFyiInhoqY.roa
File: fvaDl5bbqEZbWZiySoFyiInhoqY.roa (raw, json)
Hash identifier: uy+12qqZ9myrYYpZKV5/eOn5y/P4/PoSxZ1izCTbKew=
Subject key identifier: 7E:F6:83:97:96:DB:A8:46:5B:59:98:B2:4A:81:72:88:89:E1:A2:A6
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 018CE2F5B94560064E73E2A0BD25D3B8DC20
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/fvaDl5bbqEZbWZiySoFyiInhoqY.roa
Signing time: Sun 07 Jan 2024 08:06:43 +0000
ROA not before: Sun 07 Jan 2024 08:06:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197882
IP address blocks: 185.75.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:f5:b9:45:60:06:4e:73:e2:a0:bd:25:d3:b8:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Jan 7 08:06:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef6839796dba8465b5998b24a81728889e1a2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:b5:e2:07:a6:9d:8f:6d:51:9d:12:30:b7:
e8:51:d5:54:d8:a5:b6:73:ed:97:ab:9c:39:22:38:
5d:53:e6:be:31:0c:09:fc:ad:7f:09:61:5e:2e:69:
c4:51:76:2f:09:38:f3:57:81:b6:29:c3:7e:5d:c8:
c4:89:71:f7:5f:58:0a:d6:62:4b:e8:2b:7a:50:c8:
3e:9c:d1:2b:a1:cf:e2:0d:3a:10:c0:ab:26:cc:34:
4d:ff:0c:13:0a:49:20:8a:60:38:67:2c:4a:0a:8f:
a4:b6:84:84:e8:fc:f8:58:37:0f:c4:63:d9:0c:cb:
aa:91:d1:eb:c1:57:57:87:54:29:71:07:db:ea:30:
f9:7b:e6:85:5e:ae:97:04:69:66:97:62:de:28:bc:
00:44:18:ad:1e:86:0c:4f:f8:54:bc:aa:fc:0e:bc:
bc:a9:6e:e5:80:0d:b2:66:cc:93:af:f3:fa:40:16:
23:85:d0:c3:19:16:b0:c2:05:60:89:6e:01:ea:a2:
93:47:52:1b:d3:eb:dc:fe:2f:23:70:51:9d:9d:5c:
05:86:15:63:b1:4d:51:4a:f4:4c:28:bc:39:4d:14:
05:f0:53:a3:bd:ca:d7:9d:78:6d:b4:73:b7:61:ca:
9d:76:b4:3f:00:49:80:3e:97:af:18:ec:6c:72:bf:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:83:97:96:DB:A8:46:5B:59:98:B2:4A:81:72:88:89:E1:A2:A6
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/fvaDl5bbqEZbWZiySoFyiInhoqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:5f:34:ea:a5:03:d6:a4:c3:00:54:70:f4:78:92:b7:eb:75:
b9:61:42:72:b6:2b:c4:19:1e:c1:a4:43:34:37:28:1e:75:80:
46:47:26:22:ce:19:da:ea:a4:d3:a8:00:07:1d:35:7c:2b:5f:
ba:ca:f1:1a:8c:61:6f:fb:5b:d9:a1:f4:f6:81:02:94:a3:a6:
ee:e4:17:db:85:1d:bf:5c:78:ae:ba:07:95:d0:20:65:9f:ab:
fd:42:53:57:12:e7:e0:ea:21:4c:5e:46:8d:3a:b1:32:7a:19:
f4:7b:ed:eb:e9:3a:33:b4:0d:9c:96:28:aa:26:a0:4f:1e:b8:
8c:57:13:33:26:8f:79:be:0f:b9:82:c5:ef:fe:b8:05:d1:7a:
7f:8a:78:c7:cc:2f:69:0b:c0:d8:54:0b:40:b2:4f:24:4f:73:
6b:1a:84:f9:32:4c:6c:fd:b6:7a:08:33:71:e8:25:ee:f1:a3:
e2:f7:6e:3f:09:a0:92:5c:73:57:7e:2a:f8:05:13:80:15:14:
a9:74:ae:91:70:34:74:b9:e2:52:49:cf:3d:aa:74:52:f1:38:
19:a8:ce:75:25:d7:99:86:70:ec:8e:54:cb:af:94:8d:6c:cc:
01:37:8a:cc:7d:6a:99:e3:00:44:4b:73:64:a9:11:14:09:5e:
c0:a4:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:51:24 2024 by rpki-client on console-ams.rpki-client.org