Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fm7835JA6bK9GoZ7f-6vD0vYmp0.roa
File: fm7835JA6bK9GoZ7f-6vD0vYmp0.roa (raw, json)
Hash identifier: mjweanKzW3Gz1NgCelp0hAqGsxOvqB6hV9OpTpJ35lU=
Subject key identifier: 7E:6E:FC:DF:92:40:E9:B2:BD:1A:86:7B:7F:EE:AF:0F:4B:D8:9A:9D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01927FDE0F76DCCFD91062BE9086A6BE6F06
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fm7835JA6bK9GoZ7f-6vD0vYmp0.roa
Signing time: Sat 12 Oct 2024 08:35:12 +0000
ROA not before: Sat 12 Oct 2024 08:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60539
IP address blocks: 87.121.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:de:0f:76:dc:cf:d9:10:62:be:90:86:a6:be:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 12 08:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e6efcdf9240e9b2bd1a867b7feeaf0f4bd89a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:0e:80:b1:36:fe:4b:c2:5e:f9:0f:30:0a:
1c:b8:79:fd:ec:e5:fa:82:a6:10:9f:07:a4:ac:1e:
c9:5a:c6:50:67:f9:c6:78:4f:f8:92:81:23:47:59:
3f:3e:8d:18:b0:60:f3:49:a3:26:06:09:34:d4:ce:
fc:49:1f:40:5f:1e:c0:52:e3:80:5d:ea:61:e1:19:
d8:a2:97:2b:f9:1e:ca:70:6b:dd:b1:46:42:3f:af:
bc:64:96:33:3c:71:60:10:48:31:51:3d:e7:cf:86:
14:27:55:41:fd:cb:70:f6:13:5f:5e:a4:c1:84:c6:
21:79:13:74:0e:17:47:c4:a7:f8:52:f3:e7:5c:22:
38:f6:bd:35:5e:5c:61:ec:27:e4:a8:0e:5a:9c:1d:
89:16:68:7e:7b:9b:af:7d:d4:e1:76:0f:eb:67:4c:
a5:8e:e6:0c:c1:b8:57:81:ee:03:89:73:1c:ca:21:
64:36:f1:63:f7:16:ab:01:01:a5:2e:d1:a6:ab:d0:
a7:37:d9:a2:e9:c1:ec:c8:51:95:df:a3:ea:14:29:
58:a1:a4:0f:23:82:a3:8f:32:c5:42:2e:91:c3:38:
f0:cb:4b:d6:86:21:3c:60:27:fb:c1:a6:dc:1e:3c:
42:7f:31:5b:61:b1:79:d7:39:e2:b9:60:8a:b2:e6:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:FC:DF:92:40:E9:B2:BD:1A:86:7B:7F:EE:AF:0F:4B:D8:9A:9D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fm7835JA6bK9GoZ7f-6vD0vYmp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.125.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0d:b7:0b:cd:ab:ed:bc:15:ce:15:28:e4:8f:e2:a7:6f:bc:
f2:5d:04:8c:00:3c:1b:41:22:b5:e4:fd:41:bb:15:73:2b:1d:
ce:8b:c8:a1:3b:b0:52:aa:b3:9a:2c:b5:e1:1a:c1:e7:80:62:
79:a4:83:68:f8:c4:d3:30:ce:33:07:fd:5b:7b:2e:f1:35:55:
89:1f:3d:dd:47:bc:70:48:62:e1:79:c2:2b:97:67:d7:82:49:
7f:69:40:8c:92:91:6b:ef:bd:c0:38:99:c0:f8:3b:46:f5:28:
28:21:73:2b:44:2b:b1:05:57:e7:ba:eb:6f:f8:af:ab:3b:0c:
58:4b:e9:3c:88:2a:1e:63:4d:0f:ac:7b:75:7f:79:bc:22:43:
6e:09:dc:c9:87:4a:a5:d1:ec:fa:82:db:43:8c:97:e2:ee:7f:
6e:9f:96:4f:6e:59:cd:43:4a:e0:d4:45:a0:6d:c7:fa:f2:a8:
f8:00:0b:a9:ac:d4:5a:3f:8f:ec:a6:da:e7:87:17:cc:28:81:
be:50:f1:4c:62:e2:c1:4e:1f:d5:f2:de:f1:de:f6:99:d0:2b:
95:3b:6f:9d:b5:8e:8b:50:34:95:02:ca:80:07:80:33:ae:34:
61:8c:8e:7b:c6:ff:8f:f1:a2:2a:ab:5c:ff:7e:83:12:83:32:
4d:27:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:57 2024 by rpki-client on console-fra.rpki-client.org