Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/frpDtCX8oYbqvr1xoh1-y7cUNWY.roa
File: frpDtCX8oYbqvr1xoh1-y7cUNWY.roa (raw, json)
Hash identifier: Y9T1sM9fHlPFnQkq0z0Otyc9aqgoPZyNJdtUx/p08Gg=
Subject key identifier: 7E:BA:43:B4:25:FC:A1:86:EA:BE:BD:71:A2:1D:7E:CB:B7:14:35:66
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019050A8228E9AE1D39C3589E1E71F18DA88
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/frpDtCX8oYbqvr1xoh1-y7cUNWY.roa
Signing time: Tue 25 Jun 2024 18:28:34 +0000
ROA not before: Tue 25 Jun 2024 18:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 147.45.40.0/22 maxlen: 32
147.45.68.0/22 maxlen: 32
147.45.72.0/21 maxlen: 24
193.233.114.0/23 maxlen: 24
193.233.133.0/24 maxlen: 24
193.233.232.0/24 maxlen: 24
193.233.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:a8:22:8e:9a:e1:d3:9c:35:89:e1:e7:1f:18:da:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 25 18:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eba43b425fca186eabebd71a21d7ecbb7143566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:80:37:04:73:cc:37:ab:45:05:d0:8f:98:
7a:bd:f1:eb:67:c4:b3:e7:13:ff:a4:8a:66:91:63:
ef:21:ed:82:58:7f:89:0d:30:de:77:4f:b1:68:96:
c0:5e:6d:be:ee:c3:45:6c:a6:bc:eb:2b:36:b7:a3:
59:2d:df:e3:84:79:2c:18:6e:4f:49:7a:1c:62:8f:
ae:c4:7a:b9:5d:e2:65:b6:b6:2a:2f:5a:5c:37:c3:
18:01:27:4f:bc:3f:0e:ff:ac:fd:64:cd:bc:52:6e:
f8:33:33:ad:6d:47:4d:80:fb:20:5a:b6:d5:d5:2b:
38:f2:73:7d:7b:31:61:ba:da:2f:2c:ac:e6:72:3d:
67:da:26:ad:0b:a1:48:f1:4b:a9:de:93:dd:69:bf:
3f:d0:f4:36:6b:81:9d:e4:02:9c:44:41:23:f5:ed:
67:f5:66:04:14:86:ee:04:45:5a:4b:04:ca:e6:c6:
7c:9a:b4:82:a5:fc:58:cd:fc:72:8e:eb:cd:7d:96:
39:00:35:7d:23:82:99:50:e0:76:ab:13:8d:b0:04:
4b:22:c1:bf:e6:1a:5a:ef:ce:1f:16:24:02:52:27:
7c:f3:a6:ca:4a:92:e9:4e:03:2a:c0:a6:c0:76:8c:
a4:9e:81:42:57:0b:51:10:c5:20:0a:61:53:70:5a:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:43:B4:25:FC:A1:86:EA:BE:BD:71:A2:1D:7E:CB:B7:14:35:66
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/frpDtCX8oYbqvr1xoh1-y7cUNWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.40.0/22
147.45.68.0-147.45.79.255
193.233.114.0/23
193.233.133.0/24
193.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
24:95:a7:a1:75:52:44:d0:cc:62:54:1d:16:2f:6f:3e:55:ac:
c9:61:6e:a2:5e:0d:bc:7b:cd:f0:9b:0a:8e:21:64:0e:a6:c3:
03:6d:07:92:98:4a:2e:2d:99:e0:5f:60:fd:3a:0b:db:5a:a6:
cc:eb:6a:ba:33:db:79:f7:d1:86:03:26:09:8f:0b:76:29:d7:
7a:a4:5c:24:2c:fe:7c:e4:b0:6d:97:67:fe:98:4d:41:71:4d:
57:dc:9b:c2:3e:39:89:d8:f8:e8:a5:f1:b3:5f:71:9e:c5:68:
51:98:ee:ef:76:da:73:7c:d0:df:11:45:67:5a:29:e6:84:78:
80:f9:13:67:08:e6:98:57:19:1c:d3:d6:ed:df:0c:47:fe:93:
78:47:ec:2f:85:53:e0:ca:95:ce:bb:ec:93:1c:62:27:e2:1f:
ec:2e:06:1f:97:97:d6:54:60:4d:a5:f0:5a:a0:0f:57:81:68:
d7:da:88:77:bd:fe:c4:3d:f5:bf:e6:28:e5:f6:19:21:4d:ae:
9b:bb:00:3e:fd:b2:c9:51:4c:86:86:53:1e:f8:b6:84:17:54:
fc:42:dd:2d:9c:1b:b2:58:7b:4e:e5:21:77:2f:5f:f4:4d:7e:
7a:0b:1f:e7:d5:4c:87:3e:45:b2:e5:11:49:24:2e:b4:f1:06:
de:3a:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:08:31 2024 by rpki-client on console-fra.rpki-client.org