Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/fo76oJea0vtgOW1lV6_K7N1catk.roa
File: fo76oJea0vtgOW1lV6_K7N1catk.roa (raw, json)
Hash identifier: bHUrMAfQBHqBwhunCXaNM9AfTpGElu6/YCZw2NpIcT0=
Subject key identifier: 7E:8E:FA:A0:97:9A:D2:FB:60:39:6D:65:57:AF:CA:EC:DD:5C:6A:D9
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 018CC79485035ACAC1709FE0B696CE2FEEC3
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/fo76oJea0vtgOW1lV6_K7N1catk.roa
Signing time: Tue 02 Jan 2024 00:30:48 +0000
ROA not before: Tue 02 Jan 2024 00:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197899
IP address blocks: 109.68.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:85:03:5a:ca:c1:70:9f:e0:b6:96:ce:2f:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 2 00:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e8efaa0979ad2fb60396d6557afcaecdd5c6ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:cb:70:0a:81:e6:e3:de:90:b8:b1:6e:54:
a8:23:1e:02:3c:46:90:22:f2:d4:60:5f:55:82:3e:
08:63:67:69:89:85:90:bc:de:fa:72:67:0d:5c:58:
b0:2a:b7:cd:13:b3:ae:56:b3:47:1b:43:e5:ac:f9:
c9:55:69:5a:bb:02:42:a3:30:30:b0:1f:08:41:f6:
0b:f3:e5:ad:19:bf:40:43:f6:59:0c:51:ac:f3:30:
c7:68:a9:eb:3b:93:22:4f:6d:c5:71:5f:26:f4:1e:
8a:dc:87:d0:55:b1:93:82:a1:0b:a0:cb:b5:e9:14:
07:e0:0e:e4:14:83:01:fb:0e:4e:70:37:1f:c1:f7:
6b:b9:39:f5:92:b3:1f:aa:f4:6a:5a:d8:09:78:27:
f0:b9:44:95:10:97:09:41:a4:37:3e:66:04:78:02:
33:b3:7b:90:f5:51:45:fe:bf:3c:11:67:2a:d4:8b:
34:fc:5b:82:71:e7:a3:5c:61:93:8a:08:2b:e0:d9:
eb:54:a3:ea:b9:f9:87:49:7b:f9:08:74:03:5d:aa:
21:01:b0:8e:5a:84:81:ab:28:54:ca:55:ef:58:40:
12:f6:d4:fa:ac:80:76:fc:4a:4b:a6:4a:a2:35:f7:
c5:43:5f:15:38:60:c2:32:26:8b:eb:89:31:29:c0:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:FA:A0:97:9A:D2:FB:60:39:6D:65:57:AF:CA:EC:DD:5C:6A:D9
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/fo76oJea0vtgOW1lV6_K7N1catk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.146.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5d:2b:a5:23:87:80:76:1c:39:77:8c:d6:bd:9f:c2:75:a4:
c4:9c:86:33:31:88:87:c8:ae:d8:ee:ba:21:7d:55:89:a5:b5:
d7:44:3f:7d:8b:4f:0b:c4:bb:30:7c:62:64:52:cb:f8:f2:51:
b9:a3:fd:4a:28:c8:7f:61:ba:92:88:4a:d9:0a:22:1d:3d:e0:
24:5f:8d:60:23:0a:6b:f0:77:94:5c:e5:53:f5:08:04:55:f4:
2d:3d:74:02:3a:9d:e4:11:1d:ff:16:66:a1:7b:75:7d:2a:00:
a0:bb:47:47:48:b2:22:fa:60:07:a1:df:96:20:67:9f:a6:a7:
51:c6:5a:e0:10:1c:b4:46:ae:14:99:cc:62:71:0e:7c:58:4c:
90:3e:10:cd:04:6e:d8:a5:5b:c4:98:4c:7a:7e:34:b8:bc:f5:
fc:b1:19:4d:53:6c:17:94:79:b0:a8:93:34:d8:27:1a:ba:1c:
7e:77:d1:eb:cb:45:47:c1:6d:58:68:ef:7d:fb:c7:bd:c0:30:
79:1f:4a:ef:5c:00:b8:f5:cd:ef:09:f4:93:08:58:e2:73:3a:
ed:35:85:09:bb:57:08:bc:0e:4f:0e:74:db:e2:7f:1f:39:7b:
88:be:0c:5a:10:c9:4c:53:cd:d9:6b:92:7b:56:0e:35:da:4f:
48:7e:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:14:56 2024 by rpki-client on console-fra.rpki-client.org