Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/pFIBpkBbl6SdbnzieNcHwh4TB4c.roa
File: pFIBpkBbl6SdbnzieNcHwh4TB4c.roa (raw, json)
Hash identifier: KUZcxXn5O8nYgS0DSgdg7W7XdJIbPcE5aAmCDDsk5PY=
Subject key identifier: A4:52:01:A6:40:5B:97:A4:9D:6E:7C:E2:78:D7:07:C2:1E:13:07:87
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 018CC79551DE82BD6977D848E43FDCEE296D
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/pFIBpkBbl6SdbnzieNcHwh4TB4c.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 51.199.252.0/23 maxlen: 24
51.199.254.0/23 maxlen: 24
2a06:5901:8000::/40 maxlen: 48
2a06:5901:8100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:51:de:82:bd:69:77:d8:48:e4:3f:dc:ee:29:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a45201a6405b97a49d6e7ce278d707c21e130787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:01:fd:f6:f8:6d:f9:4b:d7:36:94:07:b1:
99:c4:5e:37:0f:f3:c8:b7:73:14:14:40:30:ac:2d:
38:1f:3e:76:fc:a4:65:b5:c6:29:f5:d7:18:5c:44:
45:2c:8d:53:44:24:cc:71:87:e9:d5:6d:92:9c:f4:
c4:49:1a:b1:df:87:eb:e1:c8:d0:a7:a7:ce:c7:9e:
03:26:fc:65:b7:61:4f:58:e6:ba:a8:76:df:a0:eb:
09:08:52:eb:bc:c7:6b:c0:42:33:09:46:5d:1e:9d:
11:6a:af:97:9c:2c:f1:8d:78:82:4e:1c:f9:40:7c:
69:ce:45:7c:d1:6c:7b:d8:4f:7e:94:92:cd:ef:cc:
12:50:2a:a2:7d:e8:9e:8e:fe:2a:0c:0f:02:61:8f:
c1:28:b6:7a:7d:61:51:c6:7e:7c:e7:67:d2:44:e9:
86:e1:1b:09:22:10:58:6d:c7:2f:4a:bd:18:ad:71:
d3:40:0d:9c:9e:6d:74:60:cb:22:b0:8d:d7:6c:b5:
e1:75:30:7b:d5:5d:01:54:1b:98:16:f1:87:45:1f:
23:6c:f0:07:e0:98:7b:8f:1b:1b:02:3e:9c:26:2a:
7c:a3:ba:70:b7:1f:71:07:79:5f:de:49:0a:64:1f:
e1:73:bb:d6:ae:0d:00:28:61:3e:42:05:3d:2d:b6:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:52:01:A6:40:5B:97:A4:9D:6E:7C:E2:78:D7:07:C2:1E:13:07:87
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/pFIBpkBbl6SdbnzieNcHwh4TB4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.199.252.0/22
IPv6:
2a06:5901:8000::/39
Signature Algorithm: sha256WithRSAEncryption
5e:e3:09:df:5e:12:92:34:30:1c:5c:92:38:28:dc:18:91:42:
60:2f:5c:6b:34:be:78:5c:63:90:65:53:14:93:74:2d:39:01:
ec:b4:de:a3:b8:64:4b:f5:58:82:ed:74:d7:4d:0d:4c:47:80:
2a:37:4a:59:60:6c:6c:cc:63:c7:d7:88:98:c6:91:8d:25:b2:
ae:89:64:6b:45:5d:04:ab:bf:b6:f6:c3:36:87:a0:3f:a9:74:
44:49:11:54:34:dd:f7:a1:c2:d0:05:64:fc:33:6b:23:e2:16:
1f:c1:28:65:e1:ce:d7:41:60:70:77:2c:34:fc:9b:2b:25:20:
4f:1f:74:ce:5e:90:47:43:dd:4a:a7:64:9a:e8:37:26:d8:4a:
b7:72:54:fc:12:b1:e2:b4:0b:b3:aa:cd:79:ba:4d:93:2f:51:
8b:4b:4e:25:a5:42:0a:73:5e:37:af:d1:2d:27:36:44:a2:1c:
89:6a:b5:6a:f6:cc:b9:26:ea:50:0c:b0:83:27:31:05:7d:81:
56:65:04:db:14:64:eb:d0:32:9c:61:3d:99:d9:9b:b0:2a:4d:
f4:55:2e:ea:74:12:f5:7c:92:0d:52:ae:a6:f2:38:56:cd:1c:
0b:ba:17:f9:74:31:b0:ac:9f:e6:b1:ad:33:95:e7:aa:8d:b0:
4c:99:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:17:46 2024 by rpki-client on console-fra.rpki-client.org