Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/fPcagyElLfmUTJ0TiFeKeX9bDAM.roa
File: fPcagyElLfmUTJ0TiFeKeX9bDAM.roa (raw, json)
Hash identifier: UA/YIdGvyXt/Eg80pEFXkes4klxynMNtbgwXw2J4zeY=
Subject key identifier: 7C:F7:1A:83:21:25:2D:F9:94:4C:9D:13:88:57:8A:79:7F:5B:0C:03
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 018CC26D304584308300663F7C9B300BB823
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/fPcagyElLfmUTJ0TiFeKeX9bDAM.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25279
IP address blocks: 217.68.0.0/20 maxlen: 24
185.138.4.0/22 maxlen: 24
2a02:328::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:30:45:84:30:83:00:66:3f:7c:9b:30:0b:b8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cf71a8321252df9944c9d1388578a797f5b0c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:7b:45:d5:3c:03:62:66:f1:b3:6f:92:d4:
67:db:03:d3:d9:7b:23:b3:2e:a3:63:4a:4f:89:ed:
f3:73:70:bd:4a:76:70:d0:f7:b8:2f:18:56:95:75:
1c:25:d0:dc:3b:a4:9a:fc:d7:dd:8e:94:24:05:80:
c8:82:60:d8:3e:e5:e6:f4:66:9f:57:0d:40:cb:4b:
fd:ef:06:04:79:50:ec:27:41:0a:5a:ed:91:6a:b4:
1b:8c:b8:1f:bf:87:54:d4:81:a9:9f:93:2b:e2:96:
cc:64:d1:6d:cd:fa:ee:08:90:68:84:27:9d:19:7c:
8f:bc:96:83:22:0d:06:1e:8f:48:f2:56:31:8d:9a:
25:28:ea:26:4d:ad:a8:e7:d7:9e:16:9b:78:d5:42:
a8:94:84:3d:3f:6d:43:c8:3d:fb:5f:7d:4a:9c:e6:
4f:ae:fb:9e:8f:34:08:80:c2:fb:ac:71:d1:80:d7:
54:eb:79:93:4b:29:0f:ff:0c:61:d1:e4:81:fa:d4:
f7:7d:5f:4f:a8:8c:10:25:14:5f:b2:b8:6a:89:d5:
9b:15:f8:5c:17:7a:9e:e1:c0:d6:39:90:8f:82:4e:
9c:d5:11:8e:4a:73:0a:5c:c2:5b:54:56:a7:20:61:
c1:78:a6:76:4a:7e:91:39:b1:9c:0c:d1:58:4c:5e:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F7:1A:83:21:25:2D:F9:94:4C:9D:13:88:57:8A:79:7F:5B:0C:03
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/fPcagyElLfmUTJ0TiFeKeX9bDAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.4.0/22
217.68.0.0/20
IPv6:
2a02:328::/29
Signature Algorithm: sha256WithRSAEncryption
52:bf:a8:d9:f8:ba:9b:cf:d5:39:f4:75:dc:0e:47:27:0d:59:
19:b3:42:93:ac:99:07:d6:ff:33:b9:aa:2d:a5:42:a2:0d:4d:
e0:92:0e:a3:4b:19:0e:43:93:fa:8a:9f:1d:0f:07:b8:20:81:
29:a6:f1:82:62:48:1b:66:89:ac:cc:55:f9:f3:2c:04:55:82:
f8:b2:1b:ff:87:d9:53:77:33:c4:3b:2a:f3:b5:14:82:84:eb:
7b:61:bd:cc:9a:8b:7f:f4:76:da:3a:b1:17:49:0e:59:5a:00:
58:d5:03:a8:4f:11:49:fd:48:a9:64:27:6c:13:ec:1e:a4:2a:
d2:df:97:8d:63:a8:10:a6:93:26:bf:0c:15:0d:3c:b7:43:15:
8d:52:f4:79:50:42:4f:b8:35:a1:48:e8:c9:0a:2b:1c:6a:c7:
b1:25:52:fe:9c:0d:ee:44:91:6b:a3:ed:c0:01:c8:83:bc:61:
ac:29:1c:9c:7e:58:9b:c7:9d:b3:fb:c7:5c:23:e1:76:8f:da:
ba:40:ca:db:b8:39:48:c5:fe:f0:74:93:2a:3c:d1:a1:7b:7a:
4a:b6:15:19:56:a8:36:c6:dd:63:01:4a:bc:42:d4:4d:70:1b:
6b:50:3a:91:73:5f:19:bd:b9:ec:62:f3:1d:b3:a6:c5:c8:54:
25:10:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:45:45 2024 by rpki-client on console-fra.rpki-client.org