Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FU27zZqmDtVs0pJPWwt_j1cpxOQ.roa
File: FU27zZqmDtVs0pJPWwt_j1cpxOQ.roa (raw, json)
Hash identifier: mw6g+ucV39+5+USMUGsQNrWEy/Ir4QTj5I/BzqP5TJM=
Subject key identifier: 15:4D:BB:CD:9A:A6:0E:D5:6C:D2:92:4F:5B:0B:7F:8F:57:29:C4:E4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018E381CA5969D0D6FB85CF487474A7F535F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FU27zZqmDtVs0pJPWwt_j1cpxOQ.roa
Signing time: Wed 13 Mar 2024 13:59:45 +0000
ROA not before: Wed 13 Mar 2024 13:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12310
IP address blocks: 85.120.152.0/23 maxlen: 23
85.121.14.0/23 maxlen: 23
193.230.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:1c:a5:96:9d:0d:6f:b8:5c:f4:87:47:4a:7f:53:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 13 13:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=154dbbcd9aa60ed56cd2924f5b0b7f8f5729c4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:26:b5:d1:e2:21:42:1e:95:63:41:bc:47:
a0:be:41:35:16:82:7c:80:cf:20:e3:90:ca:3a:59:
6b:61:19:d9:ce:40:9e:01:21:68:7c:e8:4b:94:de:
28:f6:62:e3:8f:52:f1:a6:cf:23:25:f8:0f:de:bb:
60:4f:01:58:3a:00:de:39:14:b9:3e:3a:32:47:df:
c6:4a:cd:25:1f:d8:5c:a1:52:ab:b1:e3:51:c1:ef:
7e:1b:14:72:c5:19:92:69:d3:85:94:a0:bc:8e:01:
69:25:82:83:48:f8:37:2b:be:e9:38:c9:52:d4:a2:
c3:05:b9:26:43:c9:53:c0:72:53:6e:89:94:6d:5f:
40:50:cb:d5:bd:14:f3:e5:be:19:b8:b2:21:7c:0b:
94:f8:24:fa:9c:d7:c6:3b:f9:c0:46:ec:12:55:3f:
28:46:ba:5b:b3:e7:85:05:d0:69:39:5c:70:f1:1a:
3b:4c:d7:6f:66:10:ce:c0:57:87:92:94:50:5b:42:
22:8f:97:cf:d9:18:88:7a:e9:78:0d:9e:d3:28:c4:
b4:33:d4:ee:bf:24:c1:83:6e:f2:b5:3c:9f:e2:a7:
af:4e:5a:6a:67:d2:db:5d:32:a7:2d:41:f3:a6:4a:
ac:eb:aa:ff:6b:76:4a:2c:11:7b:58:7b:34:06:3f:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:BB:CD:9A:A6:0E:D5:6C:D2:92:4F:5B:0B:7F:8F:57:29:C4:E4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FU27zZqmDtVs0pJPWwt_j1cpxOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.152.0/23
85.121.14.0/23
193.230.170.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:03:e6:35:f7:8d:0b:61:b9:7a:7c:dd:22:7c:b1:de:15:c8:
74:92:55:ee:f2:6e:60:28:d8:e8:2b:28:5f:43:50:90:25:c7:
ec:2e:a6:00:72:21:01:14:b9:d9:11:9d:38:7a:15:07:6e:42:
7a:08:e4:5b:c3:06:34:98:86:3b:11:4d:b4:dd:bf:9f:c0:8f:
85:d7:9a:87:e9:03:83:8c:be:31:d0:5d:62:4b:ff:92:53:04:
82:28:76:90:47:dc:3a:92:08:d7:95:15:d4:0b:a3:76:be:61:
3b:3c:bd:7b:49:61:48:cf:c2:6b:90:6e:60:42:a7:e0:86:9c:
3e:39:27:15:21:65:e8:06:fd:de:ca:10:ea:67:c6:bd:a6:dc:
b3:10:de:2a:3c:4c:a6:52:5e:af:4d:e8:a0:16:e0:42:0c:e9:
2d:46:61:f3:d3:22:81:cd:a4:3f:ee:15:63:3c:3a:6d:81:30:
47:15:93:99:a8:24:c0:3b:b2:e2:03:84:68:8b:20:91:46:de:
93:72:40:2e:1f:a8:b4:a0:ad:4f:26:36:0f:bb:c2:a2:32:33:
9a:15:d0:a2:39:4a:40:04:4e:c3:10:03:17:18:46:32:ac:0b:
8a:3e:a5:5c:ba:d4:3f:15:9c:07:ea:2c:62:a2:97:0b:4a:31:
9c:9f:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 16:08:46 2024 by rpki-client on console-fra.rpki-client.org