Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/FG075zakUUzAGXX0A_PoeqwhD-M.roa
File: FG075zakUUzAGXX0A_PoeqwhD-M.roa (raw, json)
Hash identifier: 2a3fynqwo2oKBgvco15SDJFDsgMkRHfnx6cU1fP+DN4=
Subject key identifier: 14:6D:3B:E7:36:A4:51:4C:C0:19:75:F4:03:F3:E8:7A:AC:21:0F:E3
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 018CC6B7A281D695C731E706549DAB6EFBEA
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/FG075zakUUzAGXX0A_PoeqwhD-M.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 91.208.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a2:81:d6:95:c7:31:e7:06:54:9d:ab:6e:fb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=146d3be736a4514cc01975f403f3e87aac210fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:d9:71:f5:c4:1e:8b:12:e4:c1:bc:c8:e0:
c9:46:d3:09:dc:1d:84:e3:a2:bf:39:b4:94:60:2d:
66:cc:f0:68:01:44:5e:7d:a5:9a:5d:dd:f0:2f:b1:
a2:31:88:01:be:19:61:31:7f:57:f0:00:6b:99:d2:
2c:41:cd:85:92:9c:3a:0a:45:ff:21:cb:6e:5b:3f:
1b:2e:ce:04:a2:25:90:08:f4:18:ff:47:29:7d:38:
a1:04:f8:2e:1a:e7:76:74:a7:70:95:44:b8:a4:08:
c1:70:08:a0:90:24:72:13:68:b8:fb:0f:6d:9e:cc:
41:07:4d:d4:2a:43:63:75:d3:1f:4a:f4:1b:fb:58:
ce:7c:8e:37:da:b8:3c:19:10:3c:61:20:b0:bb:98:
75:48:62:a0:a4:95:f0:23:ff:e0:98:fc:00:c0:26:
dc:fd:51:a9:98:59:01:f7:c3:4e:5f:ea:c8:d4:35:
ad:67:82:1c:ab:a1:76:1a:97:7e:1f:f4:b2:73:a9:
d6:a2:c5:74:67:d0:5f:8f:b6:ff:21:7e:65:37:78:
87:b9:90:9e:6c:02:2f:5f:eb:57:8c:8b:72:7b:18:
ca:5c:6a:21:5d:88:39:ab:f7:89:f6:ea:69:7c:c8:
e0:eb:5b:3c:ea:7b:ae:11:a7:8c:f8:42:3f:1a:99:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:3B:E7:36:A4:51:4C:C0:19:75:F4:03:F3:E8:7A:AC:21:0F:E3
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/FG075zakUUzAGXX0A_PoeqwhD-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6f:0d:3b:96:81:70:d3:d4:52:c1:24:59:6b:4e:6f:d8:cc:
13:60:5c:72:c5:f4:3c:6d:84:80:92:f4:84:6f:9c:38:35:6b:
e6:ef:75:00:c7:c2:9d:e7:4e:5e:c1:a0:3b:ad:ec:78:f6:29:
9a:ef:c0:8a:f3:59:30:91:58:24:16:8e:cf:5f:a3:51:89:f0:
9f:aa:2e:10:bf:5a:c5:0b:f4:32:37:c3:ae:cf:6c:b3:09:d0:
64:b8:08:fd:a3:f7:4c:16:cd:a8:b9:27:67:cb:9e:41:da:b1:
00:53:a1:4d:01:06:1c:e7:10:b3:7c:af:24:d9:15:c2:16:28:
78:b0:b7:e1:4b:d2:26:9c:48:e3:a2:0a:38:a5:68:aa:ac:ea:
b9:78:2a:d9:ee:92:87:31:f3:08:13:de:73:80:3b:0a:11:8d:
57:c4:3c:de:2d:43:df:14:a3:b2:dc:6b:1f:a2:99:26:07:ba:
c0:11:c3:00:80:1d:52:3b:93:f9:20:cf:f8:43:2a:38:50:0d:
f1:40:bd:02:9c:09:4d:96:dd:9d:1b:33:ab:09:a9:80:1e:6e:
79:a9:d7:34:07:70:05:f7:4e:56:75:54:35:6f:a5:68:49:e8:
fe:2e:c4:1e:d8:0c:6c:f6:f6:a8:67:12:84:df:f0:d4:e9:ea:
60:02:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:55:57 2024 by rpki-client on console-ams.rpki-client.org