Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/Fmlf3u49XZY7kojR95KexdGwqtA.roa
File: Fmlf3u49XZY7kojR95KexdGwqtA.roa (raw, json)
Hash identifier: obFqSTpCiwJT8HseClEIJTLEgrFKaYfD3jGvlq2ibNs=
Subject key identifier: 16:69:5F:DE:EE:3D:5D:96:3B:92:88:D1:F7:92:9E:C5:D1:B0:AA:D0
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 018E5050EF869BC0B9D669F403C415879D49
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/Fmlf3u49XZY7kojR95KexdGwqtA.roa
Signing time: Mon 18 Mar 2024 06:47:45 +0000
ROA not before: Mon 18 Mar 2024 06:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9050
IP address blocks: 89.42.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:50:ef:86:9b:c0:b9:d6:69:f4:03:c4:15:87:9d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Mar 18 06:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16695fdeee3d5d963b9288d1f7929ec5d1b0aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:88:90:57:d7:0f:65:ca:9d:a4:f4:92:26:
12:52:80:84:39:c2:59:fd:04:bd:10:df:be:55:f1:
23:f3:32:b6:67:fc:3e:5e:91:e7:5e:9a:5b:14:04:
5e:56:b0:bb:e3:91:ff:7b:72:de:ea:37:ea:d3:44:
24:c9:87:5a:d6:72:9c:bc:31:5f:99:d7:a1:30:3a:
e6:c1:ae:74:e3:19:4c:8d:31:df:30:e6:81:4b:2e:
f3:21:18:77:13:46:78:2d:d1:1c:b0:72:6d:0c:c8:
5e:0c:91:5d:b7:ed:a9:2a:4b:4f:31:36:37:c9:2c:
76:be:12:ad:a1:48:14:08:b2:4a:fd:d1:d4:d2:15:
19:6a:6e:fb:3c:aa:0b:24:93:b4:3a:40:86:d1:83:
ae:99:e6:15:04:50:ac:cf:0a:4b:d4:8a:cc:a3:77:
38:42:f1:38:56:17:6b:af:2a:1b:27:59:cb:62:af:
5b:c5:f9:c2:e5:95:1d:5c:9f:3f:f4:6c:27:1a:19:
72:73:54:ee:0b:b2:ac:4f:0a:3b:2e:70:8e:60:db:
9c:0d:49:43:97:03:9a:e7:b8:82:95:98:54:3c:38:
8f:65:d0:3a:02:61:1e:a3:29:bd:ad:32:6b:9e:43:
d0:1c:c9:91:fc:ee:df:dd:fd:5b:59:3f:67:55:99:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:5F:DE:EE:3D:5D:96:3B:92:88:D1:F7:92:9E:C5:D1:B0:AA:D0
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/Fmlf3u49XZY7kojR95KexdGwqtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e6:51:2f:65:57:a9:5b:60:84:81:37:31:08:24:de:8a:d5:
2c:de:2d:1e:0d:f7:45:aa:78:57:f5:4e:c5:ef:3a:13:7d:21:
52:01:52:1f:27:2a:76:0b:79:6c:7b:1c:58:0b:39:40:80:7b:
50:c9:65:b8:19:b6:62:72:32:cb:38:55:42:55:c6:e5:43:6f:
cb:b3:ef:7d:8d:f4:02:22:f3:f7:55:c2:9a:00:bd:8f:be:3e:
69:8a:62:44:cd:9c:fb:74:a1:39:59:9e:d9:17:5b:36:c7:ee:
93:15:a5:c4:ee:fd:b9:3f:02:0a:1e:38:d0:d8:97:9b:de:c4:
08:e1:78:bd:e5:2f:c4:5f:f1:0f:c3:3e:89:5f:e0:8a:7a:22:
85:c1:62:7a:18:c7:25:ec:9f:49:f2:e8:47:4e:0e:55:fa:b7:
f9:af:de:46:0a:f1:91:4d:7a:c4:74:c0:4c:90:fa:15:d9:08:
24:32:ba:62:c1:b9:ca:ec:e8:3d:72:5c:63:ed:b2:56:db:ff:
41:c8:33:08:b3:e1:2a:e9:ea:59:11:48:b1:b8:a8:40:52:31:
bc:93:b4:66:6c:c2:9e:90:57:59:f8:86:28:fa:dd:80:69:6e:
c6:96:c5:fe:d2:81:5f:ed:05:3b:4e:ab:a2:19:3c:c1:27:e5:
cb:6d:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:50:00 2024 by rpki-client on console-ams.rpki-client.org