Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FSdE7waaOU1R-IrnLmrDQTrlE04.roa
File: FSdE7waaOU1R-IrnLmrDQTrlE04.roa (raw, json)
Hash identifier: jm5/XW121vRdiKN4cDFpDFdaF9T3gxdLGCeLAKaA8cI=
Subject key identifier: 15:27:44:EF:06:9A:39:4D:51:F8:8A:E7:2E:6A:C3:41:3A:E5:13:4E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A96EB910BE062D8B92E9500A3ACD9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FSdE7waaOU1R-IrnLmrDQTrlE04.roa
Signing time: Tue 02 Jan 2024 12:33:57 +0000
ROA not before: Tue 02 Jan 2024 12:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398373
IP address blocks: 193.124.224.0/23 maxlen: 23
194.87.41.0/24 maxlen: 24
212.192.16.0/21 maxlen: 21
194.87.61.0/24 maxlen: 24
194.87.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:96:eb:91:0b:e0:62:d8:b9:2e:95:00:a3:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=152744ef069a394d51f88ae72e6ac3413ae5134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:38:54:85:97:5f:83:7b:f6:10:c7:66:97:
a0:87:a2:2a:68:e7:22:af:32:06:75:1d:99:5d:1b:
05:8a:98:f0:31:64:33:54:96:bb:3e:7a:c8:02:21:
f7:2d:8c:17:67:ad:5e:1c:64:1d:38:a4:22:3a:6d:
63:f9:4b:e8:79:e2:8b:9b:26:80:9f:a9:99:4c:39:
6c:42:cd:da:c3:8a:1f:67:73:fd:c8:66:3e:2c:e2:
af:35:82:18:75:9f:8d:1b:8e:d1:9e:25:00:12:d5:
97:35:dc:29:4c:5f:6c:d2:da:9b:db:d2:1a:49:7e:
4c:1a:40:62:a4:54:95:48:6b:a8:62:a2:9d:bb:56:
cd:6b:05:40:00:30:c8:99:41:4f:11:b7:e4:c9:54:
14:fd:59:78:32:cc:28:84:c0:98:e2:17:a5:66:cd:
e2:01:68:0a:b8:fd:c2:73:f3:8e:0e:d4:89:f3:ea:
b3:38:b2:f4:3a:56:ee:fb:29:6f:c6:2c:09:80:a3:
e4:09:ba:23:11:d8:ec:cf:3b:44:7b:90:fa:1f:c0:
7b:08:42:2b:68:f7:0d:a2:c6:50:fb:fe:65:b6:83:
ff:7a:33:5e:26:5d:59:be:f0:a5:aa:f9:34:2b:cc:
3b:ea:e3:ca:d3:88:1b:30:10:84:f6:ee:db:23:05:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:44:EF:06:9A:39:4D:51:F8:8A:E7:2E:6A:C3:41:3A:E5:13:4E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FSdE7waaOU1R-IrnLmrDQTrlE04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.224.0/23
194.87.41.0/24
194.87.61.0/24
194.87.192.0/22
212.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
47:42:d9:c2:73:c8:22:07:ad:b3:b9:1b:4d:bb:ac:d0:bc:a4:
0e:05:1c:0a:65:ee:bf:08:c8:5d:fa:90:1a:95:b1:f4:77:c1:
85:fd:ee:60:8b:8e:e0:56:a7:4f:88:32:9b:f1:7e:70:28:17:
88:d7:ca:85:01:05:d6:4d:f6:61:cf:3b:88:d5:2b:73:9d:82:
6e:0b:c3:14:e3:ef:5a:f3:97:d7:17:94:c8:05:ac:95:c3:bd:
3c:9d:ba:c0:fe:e7:55:dc:15:9a:7b:93:a0:54:fd:92:e6:7f:
8a:20:a1:83:21:6c:7a:61:3b:82:62:9f:ca:7c:a0:0c:0e:49:
c2:66:f9:92:48:1f:da:87:17:99:14:fa:3a:93:96:1d:3c:2c:
60:15:5f:8e:65:f3:e7:5c:ff:a1:3f:d4:34:01:ed:42:f8:68:
6e:2e:11:51:ce:cf:4f:a4:ec:b5:5f:3a:61:81:0b:96:36:ab:
a5:4a:6f:e7:fe:09:ae:84:53:b9:52:39:a6:1d:fc:4f:8b:c1:
2d:c3:e3:dc:64:d9:2c:f2:cf:b9:35:15:ff:d2:14:b6:34:39:
8c:62:fd:f4:52:c9:08:8d:9e:fe:bf:4b:63:8c:3c:9d:bf:a1:
77:fc:5e:11:86:93:27:55:3f:ce:9b:ea:be:e0:ec:42:ad:c8:
64:ac:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:51 2024 by rpki-client on console-ams.rpki-client.org