Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fn004CIEB9AU5wRhcfGOlLqc6Ow.roa
File: Fn004CIEB9AU5wRhcfGOlLqc6Ow.roa (raw, json)
Hash identifier: aK5c+5KiDJW9St7Lku30kih1UurKxPMU1K0XeUizCe8=
Subject key identifier: 16:7D:34:E0:22:04:07:D0:14:E7:04:61:71:F1:8E:94:BA:9C:E8:EC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A831710CDC21745893D0858B4A6EE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fn004CIEB9AU5wRhcfGOlLqc6Ow.roa
Signing time: Tue 02 Jan 2024 12:33:52 +0000
ROA not before: Tue 02 Jan 2024 12:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201671
IP address blocks: 194.58.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:83:17:10:cd:c2:17:45:89:3d:08:58:b4:a6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=167d34e0220407d014e7046171f18e94ba9ce8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:dc:70:e0:f1:c7:f2:73:a8:b0:6f:4e:e3:
99:6e:2b:ef:00:f2:64:b5:93:f5:53:3f:1c:48:fd:
eb:c2:4e:b9:10:e2:4d:25:ec:20:51:e3:6c:e5:e5:
d6:b4:a9:62:01:ed:0b:d0:4f:fc:f0:7e:3a:23:6b:
0d:8a:72:ad:19:17:13:63:aa:22:8a:47:17:53:0e:
9b:f6:3c:d6:a9:73:2f:41:f9:de:1d:f0:d2:cc:84:
19:21:79:9a:9c:95:e0:a5:c3:fb:2e:dd:25:71:56:
81:f8:d5:b7:fc:61:e1:7c:36:0e:6a:13:99:48:c7:
20:80:59:4c:fa:d6:7f:1d:c2:77:47:bb:d4:56:7c:
79:e3:cf:bb:7c:09:44:9e:04:55:2d:cf:42:bd:91:
b2:df:63:5b:86:ac:3f:ca:06:65:6d:ae:29:61:21:
e1:fd:b5:68:68:21:5e:b0:a0:b2:97:4d:12:bc:66:
8a:89:6c:1b:a4:84:ee:8d:aa:d5:e0:9d:c2:d7:71:
2c:54:99:68:89:c4:f0:0a:0a:aa:11:8a:7a:ff:3b:
67:12:17:1c:c9:1c:89:ce:24:19:99:40:03:8c:7e:
c9:a6:f9:d0:7f:34:24:37:10:7c:01:f3:46:87:88:
bc:bd:cd:45:51:6b:dd:5d:36:a1:eb:d1:c9:51:82:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:34:E0:22:04:07:D0:14:E7:04:61:71:F1:8E:94:BA:9C:E8:EC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fn004CIEB9AU5wRhcfGOlLqc6Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:81:35:89:51:dd:97:f0:9d:c0:8e:99:6b:86:66:65:34:06:
07:3a:66:d2:6d:f8:84:45:9e:30:87:b0:3f:ff:6f:d5:46:0c:
92:1e:08:43:ac:0b:7b:8e:d1:13:11:4e:18:e7:a8:4d:39:ed:
95:00:7f:1a:45:c2:13:d8:5b:48:c1:49:c7:5a:e1:70:d4:57:
bd:62:8d:08:fc:38:cd:53:34:5c:19:91:eb:55:56:2a:26:f1:
7d:36:94:1c:b7:e2:9b:f9:ff:80:84:5e:f2:72:9e:69:ae:c1:
c0:3f:6f:14:fc:26:d5:52:72:0d:8e:46:5a:ee:87:01:4a:74:
13:65:c8:5c:02:36:e7:6b:14:f4:50:8e:c4:e1:15:dc:79:61:
5f:68:8f:16:fa:57:2d:7e:97:cb:25:f2:6e:cf:f6:7a:69:e3:
39:0f:16:d3:bb:68:19:80:92:e4:45:3f:a8:16:9f:e2:56:21:
7e:d3:25:b3:b9:9e:e0:34:f6:9b:a1:37:41:f5:15:6f:bf:42:
05:29:ae:04:13:e9:9e:e6:3a:9c:e7:56:2f:9d:95:fd:a9:98:
d0:07:56:94:ca:a2:ab:c7:45:74:5e:92:ec:17:4d:77:c4:a0:
98:5d:de:0a:fe:ab:77:1d:85:bb:e7:e1:de:e1:98:9b:a3:32:
03:fd:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:51 2024 by rpki-client on console-ams.rpki-client.org