Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/_N-SC-fVtybmowmxbq702Hn4ojw.roa
File: _N-SC-fVtybmowmxbq702Hn4ojw.roa (raw, json)
Hash identifier: jK0Nl1dfWTKYN1mvSTX6y7ioUz4JTzjisrgb00Digjc=
Subject key identifier: FC:DF:92:0B:E7:D5:B7:26:E6:A3:09:B1:6E:AE:F4:D8:79:F8:A2:3C
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0190E34F9FD50DEFBFB1345397A8B12180CC
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/_N-SC-fVtybmowmxbq702Hn4ojw.roa
Signing time: Wed 24 Jul 2024 05:56:04 +0000
ROA not before: Wed 24 Jul 2024 05:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135391
IP address blocks: 94.124.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:4f:9f:d5:0d:ef:bf:b1:34:53:97:a8:b1:21:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jul 24 05:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcdf920be7d5b726e6a309b16eaef4d879f8a23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:a7:4c:0f:58:95:e5:0b:aa:8b:2f:fc:2e:
f4:17:ae:ee:2c:45:3f:b5:60:00:84:07:a9:57:c6:
99:3d:97:bd:d8:62:5f:ce:ba:3f:b3:7b:bf:dd:67:
ca:6d:d2:ca:26:88:ee:fe:72:c8:26:54:df:98:b8:
d4:b9:9d:e1:27:9e:71:17:c8:f1:a0:59:f7:93:b4:
22:23:bd:a1:31:4c:0f:03:f6:60:b4:4d:77:61:16:
d7:28:3e:f2:8a:a1:d3:f6:1e:5e:99:ec:1b:1e:53:
7e:1c:18:04:4f:7a:a3:b7:21:df:bc:c1:d4:15:d9:
01:9d:42:14:12:14:42:c8:ab:e1:e5:c1:a1:20:e5:
ed:ee:26:d0:c6:b4:d9:01:ac:7b:49:77:c5:ec:aa:
fb:f7:96:83:d2:03:f2:3b:95:c8:8a:5e:6f:b2:24:
e7:11:b9:c4:55:84:29:97:f9:dc:8b:51:a1:e2:8d:
4d:0d:83:16:d2:25:2e:65:d1:7b:4f:3e:6c:c2:c2:
69:7a:cc:30:f3:50:17:30:89:5e:51:2e:f6:2c:e3:
ac:8c:43:93:46:5c:cc:eb:e2:65:6c:48:b5:44:79:
6d:80:c8:96:57:ed:d2:36:26:90:94:f7:1d:25:47:
e1:4a:9b:b9:3c:3c:3c:4a:44:66:5b:9c:34:f4:e4:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DF:92:0B:E7:D5:B7:26:E6:A3:09:B1:6E:AE:F4:D8:79:F8:A2:3C
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/_N-SC-fVtybmowmxbq702Hn4ojw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.161.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7e:c1:70:00:86:bd:f6:10:c6:ed:80:62:36:37:fb:60:09:
f7:53:89:0d:c3:b0:52:0d:5d:f5:dd:13:f8:1b:52:06:14:55:
eb:3f:60:3d:1f:0a:b5:13:86:81:85:5a:96:11:d7:82:87:aa:
af:20:a5:ac:83:9a:a4:ae:ad:f8:3a:e0:92:3e:d7:77:8a:ef:
0a:ab:1c:23:76:2a:3e:89:13:5b:a2:e0:d7:af:ce:34:26:51:
a1:40:b0:4e:70:fb:a7:dc:28:7b:04:af:e6:fe:1f:f2:60:66:
b3:0a:f8:2c:e5:0b:ac:4f:ee:09:9b:27:0a:1c:66:ce:2a:e3:
1c:32:1c:b8:50:81:1b:86:62:a2:40:a2:58:a3:35:96:76:0d:
4a:47:4e:29:f3:a2:c7:35:84:b6:66:46:4e:93:ba:13:e2:c7:
71:4d:7a:cf:03:b5:39:5e:1b:6f:a4:b0:e4:bc:b8:d5:ad:c8:
5e:c1:1f:36:a3:50:59:03:73:93:90:d5:54:d9:b9:c5:35:f0:
c0:62:79:09:9d:7b:af:78:d4:dd:f1:24:81:24:b2:e6:55:14:
e8:4d:7a:48:18:f4:d5:bd:eb:0c:3e:c9:ce:6d:a7:a5:b6:61:
09:b2:23:ea:7c:b6:72:46:f5:c2:64:7c:b9:9d:74:4b:d8:dc:
7f:9c:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:26 2024 by rpki-client on console-ams.rpki-client.org