Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FT-C2twvRoLc41xthX8vzZwdWb4.roa
File: FT-C2twvRoLc41xthX8vzZwdWb4.roa (raw, json)
Hash identifier: 2fz/wUdh1q48sWFgqH8qZqONY5FYcodVO4n3YvD5PX8=
Subject key identifier: 15:3F:82:DA:DC:2F:46:82:DC:E3:5C:6D:85:7F:2F:CD:9C:1D:59:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0F1C2826EFEFDAFF7E7FB280BE03
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FT-C2twvRoLc41xthX8vzZwdWb4.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215825
IP address blocks: 82.115.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0f:1c:28:26:ef:ef:da:ff:7e:7f:b2:80:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=153f82dadc2f4682dce35c6d857f2fcd9c1d59be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:50:2e:e1:e1:38:68:4c:12:c4:1b:d3:ad:
02:d2:09:91:e7:86:60:26:4e:62:97:fc:23:d9:1f:
e4:83:2a:4f:69:34:ee:51:14:20:59:9e:3b:90:ae:
09:77:94:91:f9:b4:36:44:fb:ad:71:58:72:b6:2a:
0c:6f:f3:cd:8f:ee:b1:c4:6f:f9:a6:42:18:1a:05:
f8:5f:d9:ea:38:2b:7b:b8:11:03:0b:ee:4c:8f:9f:
a6:3e:bb:0b:84:01:36:b8:21:26:55:e4:02:4f:96:
88:af:5c:11:8f:b8:e1:81:d8:40:99:79:af:05:1d:
d7:0c:85:ff:f1:9c:73:c4:bf:86:db:27:94:39:2a:
64:63:7b:5d:a4:4f:43:50:e6:70:cd:08:60:a9:8f:
c7:66:59:65:bc:c2:fa:3b:fa:50:91:4a:4a:c9:de:
c4:92:45:a2:03:b5:20:74:8a:46:95:fa:12:83:39:
9f:95:e0:f7:82:27:af:4d:cd:81:2c:c9:0c:22:fe:
8d:95:f7:4c:b1:10:94:db:fb:61:82:5e:70:40:1e:
3a:2f:79:9b:13:0d:19:df:d9:dc:d2:fb:31:0c:16:
e7:bb:bd:00:8b:27:d6:91:41:74:b6:4f:ae:e0:c5:
b9:71:d7:89:93:72:ed:b1:2f:28:bd:19:6f:88:a3:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3F:82:DA:DC:2F:46:82:DC:E3:5C:6D:85:7F:2F:CD:9C:1D:59:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FT-C2twvRoLc41xthX8vzZwdWb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a8:15:de:ec:db:29:e1:b6:86:8b:d3:42:1a:c4:1f:55:92:
57:30:8b:cd:31:1c:77:e4:ca:27:0d:18:2e:72:17:aa:34:f1:
a7:0d:55:d6:68:8d:66:29:6d:56:d5:b2:c3:b9:e7:68:6a:9b:
f6:4f:7b:6d:d0:17:d3:ce:6d:99:6e:ee:3b:8f:2f:f1:36:66:
04:2b:0b:8f:88:57:83:bf:67:b4:e0:63:ac:f4:e7:a9:eb:22:
e6:d1:72:67:2d:fd:c9:f2:9e:52:36:74:2a:10:b8:91:5f:be:
84:21:65:65:85:2e:78:49:14:58:53:fb:b6:20:49:0c:80:a8:
a4:a7:dd:ea:8d:8a:6c:78:c6:93:f0:59:ba:75:0d:ca:4d:4c:
e3:cd:eb:42:dd:39:45:14:b5:52:41:c5:e1:92:e6:2e:98:04:
7c:ef:48:e2:cd:e0:2f:cc:79:cb:3a:64:f0:d5:61:ad:6d:25:
7b:00:bc:df:97:8f:86:88:d9:ed:55:0f:76:d1:be:b8:ed:03:
57:ed:cc:5f:54:69:db:04:bc:a1:b5:45:1f:37:b9:df:9f:c3:
95:64:25:8f:70:dd:c6:e8:45:36:b3:a5:91:20:6b:f0:1c:ee:
6a:14:dd:1e:e3:80:a3:e1:9a:0b:bb:d0:f8:24:e5:60:c2:44:
e6:e0:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:44 2024 by rpki-client on console-ams.rpki-client.org