Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FYF9eCCTUnVbCsaD5d4Y2sWxBgM.roa
File: FYF9eCCTUnVbCsaD5d4Y2sWxBgM.roa (raw, json)
Hash identifier: 6UmixaVOeA5p3WSJj3/nlKymEuH96cqdtlZh2nfIfhE=
Subject key identifier: 15:81:7D:78:20:93:52:75:5B:0A:C6:83:E5:DE:18:DA:C5:B1:06:03
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC425589CD05084E4EEEC41F01F951B1F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FYF9eCCTUnVbCsaD5d4Y2sWxBgM.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 163.5.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:58:9c:d0:50:84:e4:ee:ec:41:f0:1f:95:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15817d78209352755b0ac683e5de18dac5b10603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:03:8a:24:7b:d7:48:c0:6e:8a:26:ff:f4:
02:5c:a0:f0:0f:31:b7:35:b8:58:f2:81:d1:a5:67:
b1:3e:81:c5:43:01:2b:ed:8e:78:ff:5d:ce:98:ac:
53:c2:09:65:b6:44:21:2a:9f:17:e5:d7:db:9a:64:
31:35:6d:48:f5:5b:71:d4:e8:27:c5:1a:b8:a7:2b:
ec:dc:7e:1a:47:03:a6:b9:85:92:da:e7:ee:7a:4f:
9e:11:36:46:8b:ef:b9:58:e3:9f:a9:33:58:ad:ba:
d4:c1:45:69:d2:07:77:f9:27:d5:14:5f:ab:54:58:
c5:74:4d:84:bb:00:bf:cc:61:f7:46:b2:c1:83:6d:
c6:22:74:98:dd:c5:0c:54:36:9b:bd:1f:06:37:e6:
e1:53:d4:db:c1:1c:78:00:e9:95:6e:0e:c6:f2:9b:
a1:33:d3:b4:85:da:10:59:b1:cb:6a:ca:87:f1:8c:
9e:51:95:15:5a:9a:aa:04:00:67:e9:81:72:3d:18:
d2:8c:ff:54:df:a7:6f:98:02:65:cd:fa:c0:47:13:
a5:87:c3:97:fd:9c:d5:2c:a4:5c:81:cc:2c:f4:81:
89:b3:99:1a:11:49:b8:ad:89:93:34:d3:4f:a2:e6:
e8:d7:0d:4d:33:4b:0a:b8:74:26:a9:ae:92:12:fd:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:7D:78:20:93:52:75:5B:0A:C6:83:E5:DE:18:DA:C5:B1:06:03
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FYF9eCCTUnVbCsaD5d4Y2sWxBgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.89.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0a:07:af:4f:5a:d8:15:69:c6:37:e5:d3:d5:d7:d4:a5:d2:
e1:56:5b:06:1e:1c:20:89:17:00:dd:52:37:eb:70:9f:77:3a:
d6:9b:a1:8a:90:93:54:35:ea:ff:ba:98:03:6d:5d:01:ba:f3:
1a:88:d0:30:af:0f:0b:78:1f:63:48:0b:ca:d0:fb:07:75:61:
7d:ea:77:b7:ce:6c:9a:d9:1a:a6:48:8b:da:d8:b7:24:6f:00:
08:df:12:3d:13:1f:a0:02:3c:cb:e6:7c:31:3b:de:1d:ab:7a:
48:50:6d:23:ae:7d:bf:12:d5:0e:9f:1b:0f:30:49:10:51:86:
a8:a0:ad:91:5b:d6:d3:3a:73:99:73:20:8b:33:6d:ca:5d:9c:
c2:99:01:ee:59:89:d8:f4:a4:84:56:15:72:62:c7:d2:52:21:
5e:ee:c1:97:42:52:10:f0:97:33:1e:77:78:82:fe:db:88:a5:
eb:99:07:a5:0c:dd:ca:ea:79:2d:73:70:08:dc:61:a7:5e:74:
91:06:86:d0:d8:b9:51:5f:f9:24:d9:11:3b:d4:06:a5:6a:b0:
87:71:1b:e1:c4:04:e7:03:68:99:7b:a1:92:df:01:20:2f:1c:
c1:bb:3e:42:ca:c8:0d:a0:6a:6a:f5:0c:41:d1:88:a4:68:26:
e9:26:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:21:29 2024 by rpki-client on console-fra.rpki-client.org