Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/fyun39i0hpE25gGvBWfxhMiF8lE.roa
File: fyun39i0hpE25gGvBWfxhMiF8lE.roa (raw, json)
Hash identifier: ZUjzzhOo9wpyn27eIn33/VMfz1EYf2hZLpAxox6nq34=
Subject key identifier: 7F:2B:A7:DF:D8:B4:86:91:36:E6:01:AF:05:67:F1:84:C8:85:F2:51
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 018CC64B5769128DA82565FB7A76969CE123
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/fyun39i0hpE25gGvBWfxhMiF8lE.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64413
IP address blocks: 91.209.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:57:69:12:8d:a8:25:65:fb:7a:76:96:9c:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f2ba7dfd8b4869136e601af0567f184c885f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:ba:01:e8:37:ec:90:9a:bd:d3:74:bc:9a:
cc:b5:44:38:f3:cb:ee:da:db:04:ca:2a:69:49:78:
70:69:c6:ab:0c:e5:6f:e5:ca:ff:22:3e:6d:b6:e5:
57:97:fb:68:47:3e:ca:22:ac:18:6a:e9:3d:3e:8e:
cb:05:65:49:55:fb:3d:33:cc:95:24:d0:7e:f1:eb:
14:65:72:7a:66:1f:31:40:3f:d0:d8:7a:84:64:b7:
84:5a:0e:d2:21:97:13:6c:c3:3a:4c:33:4f:0e:69:
93:61:f5:4f:bb:37:a2:fc:d6:de:a6:a5:88:d8:dd:
c7:ca:c9:64:63:77:94:6f:9d:4e:ee:47:27:ae:b0:
25:41:e9:19:8c:a4:5f:48:fa:f8:ad:16:0d:a2:cc:
65:00:4c:51:24:0c:b7:8b:59:fe:82:15:76:fd:65:
32:8d:e4:9a:35:da:b3:38:21:2e:c0:71:71:bb:a8:
0f:4d:a0:f8:59:35:0c:cb:a7:fd:11:a1:af:6d:e1:
f2:5b:59:29:ce:a6:2f:84:8e:c1:41:64:0c:3e:dd:
bb:91:bd:7b:ac:e3:14:81:86:46:40:86:c9:47:fb:
fc:0f:ba:68:ad:09:af:8e:16:81:bb:4a:c6:ca:05:
05:39:9a:96:01:62:ca:7f:aa:d2:62:98:18:9e:ca:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2B:A7:DF:D8:B4:86:91:36:E6:01:AF:05:67:F1:84:C8:85:F2:51
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/fyun39i0hpE25gGvBWfxhMiF8lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.96.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6c:c7:bb:9f:ac:a0:8b:de:80:ca:eb:fa:db:6c:00:ff:2a:
e3:5c:41:03:90:36:b8:b5:dc:1b:7a:a4:38:23:cf:a5:61:47:
38:3a:98:d4:f3:75:d2:49:c8:88:7a:d2:d2:dd:b9:1b:13:a9:
96:07:97:fc:44:78:10:67:f6:e1:7f:c8:70:27:25:d1:e3:56:
a0:49:d7:55:e4:e7:e5:49:c8:13:2d:c1:e1:a0:8b:9e:b1:e9:
c5:2c:e4:fd:7a:a0:85:3b:9e:3e:e0:2a:28:c7:07:27:42:07:
b1:1e:b6:53:cc:5f:c5:f3:df:32:17:e5:c1:0d:29:a4:61:a9:
4b:2b:b1:23:13:ac:81:c6:a1:6b:c9:12:9d:9d:5e:57:54:ec:
28:3c:df:34:04:8c:04:34:48:9a:10:4d:a8:8f:38:8d:2f:00:
22:e9:97:cf:31:37:7d:e8:21:de:4d:97:a7:fa:84:3d:09:d6:
c2:d6:df:0f:b8:15:64:b6:60:a7:91:03:7b:b8:ac:70:9c:19:
84:43:e5:30:43:51:00:4e:21:46:8f:fd:a1:30:83:59:28:3b:
50:28:7b:fc:b3:c3:77:a7:f1:c4:74:2b:28:fd:b8:f1:14:d5:
76:9b:26:50:91:93:3b:d9:12:73:fd:b3:53:ed:cb:97:15:ea:
e7:6d:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:48:55 2024 by rpki-client on console-fra.rpki-client.org