Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/fTHyz3G3-vEVzwWw3z7SCD0uXOA.roa
File: fTHyz3G3-vEVzwWw3z7SCD0uXOA.roa (raw, json)
Hash identifier: uTIlXCxuxfn4l2zqV8sWOHfJaFDTjasJ/obkOnGL1L4=
Subject key identifier: 7D:31:F2:CF:71:B7:FA:F1:15:CF:05:B0:DF:3E:D2:08:3D:2E:5C:E0
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 018CCA29FE821D7E877E4E5123D11E7EE4AC
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/fTHyz3G3-vEVzwWw3z7SCD0uXOA.roa
Signing time: Tue 02 Jan 2024 12:33:18 +0000
ROA not before: Tue 02 Jan 2024 12:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.189.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:fe:82:1d:7e:87:7e:4e:51:23:d1:1e:7e:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Jan 2 12:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d31f2cf71b7faf115cf05b0df3ed2083d2e5ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:5f:5a:fb:27:80:b2:79:f5:9a:f8:a2:43:
73:36:e2:2a:86:a9:84:a6:1a:6d:6f:61:b1:5b:16:
3b:ae:b6:d4:6b:f5:00:8b:c7:d3:6e:52:07:66:c6:
1c:29:93:ee:dd:31:31:bc:b4:cd:b1:5f:2c:7f:cf:
3e:fb:24:43:ca:93:7f:e2:34:fd:11:af:2d:e8:8c:
e7:dc:8e:56:75:c8:04:90:9d:02:6d:0f:c6:14:30:
19:01:a7:66:99:14:07:45:4f:9f:1e:f9:83:1f:72:
86:51:2b:61:84:9e:14:55:c6:06:d9:80:51:78:b9:
5d:bb:dd:96:c2:4a:85:b2:9c:af:61:da:0f:72:4f:
4b:07:69:cb:82:1a:4d:74:19:22:12:de:d7:37:32:
8d:4c:11:d0:b3:ec:f7:d4:e6:b8:7d:90:38:9d:cc:
35:c3:34:46:60:83:f0:74:85:ec:fb:33:a3:54:84:
0f:86:ee:2f:55:c2:7e:0c:10:4a:46:b9:52:d2:01:
6a:cc:e6:a7:24:e6:c9:7f:83:5e:7c:fa:34:aa:60:
25:f5:14:15:71:57:70:5f:8e:67:2b:23:bd:0a:00:
3b:d3:ec:5c:92:49:45:89:68:bf:b9:66:43:49:d4:
55:2a:89:df:b1:50:b7:cf:42:e6:16:a3:42:7b:86:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:F2:CF:71:B7:FA:F1:15:CF:05:B0:DF:3E:D2:08:3D:2E:5C:E0
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/fTHyz3G3-vEVzwWw3z7SCD0uXOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.110.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fb:99:eb:50:a7:da:c5:33:20:78:67:82:2e:ca:92:9c:d8:
3b:fb:00:27:12:ef:20:bf:79:1b:de:09:3e:71:1d:07:d0:e2:
35:f5:25:c2:a6:f7:a3:1f:56:3a:16:b1:aa:9e:1f:55:42:e2:
9a:91:c9:c3:b4:79:ee:1f:a6:43:e0:d5:5b:3c:db:9e:dc:3e:
b3:d5:25:41:9a:f2:f9:db:10:af:41:db:d2:4b:f2:41:eb:d2:
15:31:e9:2d:af:9b:65:38:e0:c5:6f:15:cd:f5:57:d3:4a:d2:
08:11:34:a8:a2:b0:93:39:59:f5:fe:92:2e:89:08:b7:c9:b7:
05:be:66:38:20:4c:c1:a3:50:48:a4:12:16:bd:fc:f7:6c:da:
f9:ad:f2:6d:c3:6d:3c:67:28:93:58:a9:2f:de:20:ad:d2:e8:
3a:a6:cb:b3:9c:98:3c:bf:1a:11:81:14:34:61:19:ea:65:70:
fc:a3:ee:3b:fd:6c:16:78:89:f9:0b:92:eb:fd:e0:cf:a9:8d:
2e:df:3f:ed:9e:b1:f4:fa:b4:5c:43:c8:c7:8f:83:bc:86:7c:
32:17:cc:0d:c7:8e:35:5b:2f:48:e7:2d:e1:b0:27:cb:69:d5:
2f:0a:d3:e8:fb:71:5f:ab:a7:a2:ce:16:37:97:f8:36:69:d9:
08:29:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:49:34 2024 by rpki-client on console-fra.rpki-client.org