Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/FNS0RWcIBc7fy3mFZEwf_J8-kt0.roa
File: FNS0RWcIBc7fy3mFZEwf_J8-kt0.roa (raw, json)
Hash identifier: TkxzNuwxp4FRlSdpByiBli1AB/9VhPf7zbqysYXNsJ8=
Subject key identifier: 14:D4:B4:45:67:08:05:CE:DF:CB:79:85:64:4C:1F:FC:9F:3E:92:DD
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018CC5DC5DD31D2237899382E5B7D6559A0D
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/FNS0RWcIBc7fy3mFZEwf_J8-kt0.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5d:d3:1d:22:37:89:93:82:e5:b7:d6:55:9a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d4b445670805cedfcb7985644c1ffc9f3e92dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:7b:00:d4:d0:80:9b:1f:cb:f4:12:ea:e3:
94:d4:56:22:5e:9d:da:c3:67:9c:00:10:b6:18:99:
94:d7:8f:88:71:62:ae:ef:17:f7:0a:af:84:86:c1:
57:f4:fb:41:7e:d0:0c:ec:67:b4:fb:94:f6:e2:de:
3c:16:83:a0:af:eb:63:4b:6e:f8:0a:f9:a4:51:5c:
02:e9:7b:01:59:83:17:d2:3e:34:27:ed:52:2d:5f:
6e:9a:80:25:0e:ec:c7:7e:61:ad:07:4d:a3:18:d2:
dd:2e:03:ff:7c:49:62:5f:14:35:60:0b:6a:17:34:
73:bc:f7:6b:19:30:40:fa:1a:af:c5:8c:20:4a:7d:
e9:e6:0c:eb:88:46:25:89:82:c8:5b:7a:f7:d9:1f:
17:f7:6c:cd:bd:b9:26:fc:f0:0d:f3:39:68:0d:87:
4c:a4:37:16:31:41:c5:c2:ae:e9:df:05:9e:a5:60:
68:2f:93:fe:36:43:8f:57:0e:91:c8:2c:c9:86:ab:
7d:f2:db:5a:67:c8:8d:dc:97:34:5b:39:5c:0e:a7:
a1:39:10:bb:eb:30:c2:75:f2:7b:7b:01:62:f8:d1:
5d:d6:73:fd:8a:e6:9a:c4:1b:ac:30:f9:37:d1:38:
7d:09:bd:a8:e3:f1:0f:44:07:09:d6:fb:ec:62:5c:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:B4:45:67:08:05:CE:DF:CB:79:85:64:4C:1F:FC:9F:3E:92:DD
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/FNS0RWcIBc7fy3mFZEwf_J8-kt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c1:a1:64:5d:91:eb:64:ad:fc:b6:cf:32:06:fe:64:4e:af:
33:fe:3c:a7:22:00:ad:89:4d:10:8f:8d:c6:87:e7:70:aa:28:
44:d8:80:e7:bf:d8:de:69:1d:d3:1d:8e:e4:12:59:f6:ce:34:
67:c0:07:7d:1e:4e:96:81:ab:11:61:30:f4:e7:59:c3:46:fc:
aa:34:43:26:97:ec:d6:f9:bc:64:40:4d:7a:56:de:3d:0b:8c:
ad:06:c9:d5:e2:e6:ee:79:84:b1:8d:79:1e:81:12:df:28:ad:
0f:77:25:f2:82:f8:5b:cc:22:81:6f:49:6f:c9:06:ae:a9:85:
46:58:48:80:ce:22:e8:b2:f1:00:a4:f3:c9:98:7f:6f:c6:cd:
91:de:57:8a:06:c7:6c:74:6a:ea:de:e9:1f:12:51:8b:7e:db:
95:89:e8:89:88:ed:92:1d:60:24:fa:60:28:b6:63:4b:15:88:
10:d2:b2:56:86:be:a8:69:99:38:22:6b:82:1c:4e:7d:a0:d0:
8f:eb:b0:3c:4d:87:9b:9a:07:25:2e:b6:ef:5b:1f:dd:06:27:
86:31:8f:29:35:c9:2e:99:ae:65:d9:e4:5b:2d:e1:15:10:69:
97:10:00:1b:d6:d5:b1:8d:e3:44:1d:fc:a0:d1:3a:81:c7:2b:
a3:e0:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:28:39 2024 by rpki-client on console-ams.rpki-client.org