Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FdOVKBlH_UyPNr5W-1UASELtGm8.roa
File: FdOVKBlH_UyPNr5W-1UASELtGm8.roa (raw, json)
Hash identifier: XjS+kYwpf3X95MAoc781FPyjnZUAJSEeI9KoMgK3tbQ=
Subject key identifier: 15:D3:95:28:19:47:FD:4C:8F:36:BE:56:FB:55:00:48:42:ED:1A:6F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190E86BEAA11009E886196342C24CD3328C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FdOVKBlH_UyPNr5W-1UASELtGm8.roa
Signing time: Thu 25 Jul 2024 05:45:04 +0000
ROA not before: Thu 25 Jul 2024 05:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50580
IP address blocks: 194.55.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:6b:ea:a1:10:09:e8:86:19:63:42:c2:4c:d3:32:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 05:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15d395281947fd4c8f36be56fb55004842ed1a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2a:9f:e1:9a:4b:7e:7d:d5:5b:63:d0:e7:5a:
87:cc:19:56:40:68:c2:d8:c6:63:45:bb:2f:b6:8d:
8c:b5:09:bf:4d:b3:aa:19:87:8f:10:5e:f0:bf:79:
b3:77:7b:b8:94:58:6b:5d:87:25:62:9f:e9:ea:cd:
5b:e2:a1:32:0b:6e:26:f9:5c:8d:3f:3f:b7:6a:a2:
6b:62:90:b8:9c:da:a7:ca:b0:d3:69:70:6c:02:b6:
08:58:d4:98:1b:eb:9c:64:08:9f:af:11:e5:5d:9c:
db:05:7d:ff:76:b1:31:b3:e5:e3:05:98:23:9d:6a:
5f:ef:ba:7b:f4:9d:c4:5b:c6:10:21:be:67:c8:f6:
d5:a4:ff:bb:21:d8:6b:88:ff:3d:d0:19:85:6b:77:
f7:86:10:5e:5a:0b:c7:fd:2b:e4:f3:fd:cf:9f:c0:
62:e5:0c:4a:e1:14:bc:9b:5e:7f:b7:e7:0f:fe:f0:
6f:fc:12:47:32:0d:93:a5:09:5e:94:27:a6:e6:9e:
c8:af:13:6f:b5:56:3c:29:8d:3b:31:c2:a9:3c:9f:
27:0a:26:49:6e:28:cf:04:d3:95:bb:fe:47:84:f3:
e4:62:01:1c:02:e8:2b:d3:8c:5d:26:d2:bf:1d:e6:
3d:be:e4:ff:99:43:55:cf:73:8b:e2:1c:3a:e1:8c:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:95:28:19:47:FD:4C:8F:36:BE:56:FB:55:00:48:42:ED:1A:6F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FdOVKBlH_UyPNr5W-1UASELtGm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b4:c8:04:e2:47:72:7c:95:e4:4f:0f:23:08:05:90:60:94:
a8:2e:70:ce:8c:a1:1b:51:ab:52:bc:0f:59:8d:ee:e7:68:a7:
f6:87:30:db:5e:b8:33:0b:eb:e9:15:6c:53:94:d0:51:ce:f9:
c3:4a:f3:c9:ea:0b:a1:0f:7f:0d:b9:18:7c:12:a0:39:74:ac:
ff:20:c4:92:d8:99:73:3b:c1:37:be:f4:46:16:da:d2:75:34:
a7:1f:b1:cf:53:ff:66:d7:24:4b:ed:13:1a:9a:9a:22:86:fc:
c0:64:f9:a5:2e:47:f4:d6:43:d6:da:ce:d0:86:1d:b9:b6:a7:
c5:75:d5:a9:87:e1:10:9e:3f:f8:8c:81:d3:a3:b3:1d:29:9c:
07:26:fa:fd:d0:4e:52:01:5f:5e:dc:a1:b4:a0:57:34:c9:b1:
f7:e2:a6:2c:e0:9a:aa:22:a2:01:f2:30:38:ac:72:da:86:89:
03:ac:09:8f:7e:3e:08:db:dc:25:44:71:5c:e3:e6:73:c1:25:
74:88:48:4b:38:1e:fe:7b:51:97:de:54:3e:99:ca:bc:aa:2a:
f7:fb:c5:7d:0c:a4:13:3e:b0:c3:0c:d6:b4:b5:df:2d:3b:26:
db:23:89:38:e4:1b:35:01:0e:a6:41:5e:77:3f:42:ee:01:d3:
87:aa:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:03:36 2024 by rpki-client on console-ams.rpki-client.org