Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/FxV3Y_5foeiBO07lxzXTkTIRT8A.roa
File: FxV3Y_5foeiBO07lxzXTkTIRT8A.roa (raw, json)
Hash identifier: TObIQhIrd+jkMqh5NNeTCeki27I7eYxZwT0C7CWK8Yk=
Subject key identifier: 17:15:77:63:FE:5F:A1:E8:81:3B:4E:E5:C7:35:D3:91:32:11:4F:C0
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 018CC425051CC036FC3907E85766DB970A2D
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/FxV3Y_5foeiBO07lxzXTkTIRT8A.roa
Signing time: Mon 01 Jan 2024 08:30:09 +0000
ROA not before: Mon 01 Jan 2024 08:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59619
IP address blocks: 91.240.226.0/24 maxlen: 24
91.240.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:05:1c:c0:36:fc:39:07:e8:57:66:db:97:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Jan 1 08:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17157763fe5fa1e8813b4ee5c735d39132114fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:d8:f5:4b:16:ac:98:53:bb:6b:84:89:ba:
20:a4:ae:e3:cb:74:26:ce:ae:e5:41:c7:d7:6b:c2:
da:59:d0:66:4e:6c:9e:11:7c:20:cb:49:bb:de:36:
63:22:b0:30:75:b0:c2:35:ef:75:25:72:13:43:14:
03:aa:54:f7:78:6a:49:6d:45:6d:bd:cf:40:43:3b:
96:c4:3b:51:8a:89:2f:bb:f6:08:f2:38:f2:2a:68:
8b:7e:74:0b:fb:a5:36:98:2f:c0:c3:89:5d:2b:6e:
4e:64:82:f7:05:b9:3e:e8:be:9f:d3:a8:f9:e9:7a:
70:a6:2c:68:80:1e:95:c5:f0:e2:b2:7a:c7:90:c1:
f9:d1:99:22:b7:ba:d2:a6:24:c1:41:16:bc:38:b7:
c0:2d:c0:6c:3b:26:64:b5:3f:11:1e:97:d9:a7:90:
ed:59:bd:e2:29:68:25:87:47:b2:54:33:23:2a:06:
28:7d:35:3e:70:a0:f3:dc:e3:41:16:55:13:5f:f1:
cd:6b:2d:1a:a5:b2:27:4a:03:fa:a1:10:67:6b:75:
32:62:f9:58:92:57:7e:9d:fd:53:5f:ba:7c:8f:a0:
8c:61:23:47:cc:76:dc:dd:40:5b:8f:9a:71:f9:a6:
31:28:72:08:56:ce:b4:e5:50:72:61:4f:f9:6f:14:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:77:63:FE:5F:A1:E8:81:3B:4E:E5:C7:35:D3:91:32:11:4F:C0
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/FxV3Y_5foeiBO07lxzXTkTIRT8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.226.0/23
Signature Algorithm: sha256WithRSAEncryption
02:2c:12:71:45:a3:35:a0:2e:e4:88:38:f3:5d:8e:09:d2:e9:
e2:e4:55:41:b7:ae:16:23:b8:58:58:d7:5b:b8:24:fa:7b:37:
94:63:a7:b9:80:3f:ce:d9:17:bd:66:88:de:e8:b5:68:0e:f9:
78:97:f2:69:06:b4:74:d8:3b:68:2c:16:b8:87:fd:06:50:b9:
f5:82:3f:a6:95:7a:3e:fe:f7:e6:bf:2f:9e:1c:42:70:85:e7:
84:76:04:23:9b:92:50:0b:4d:88:e4:46:e4:3c:11:20:ff:4c:
89:b4:cb:33:30:64:ed:9e:64:71:85:9c:09:26:cb:ba:1f:9c:
43:1f:74:17:49:1d:bc:bc:fa:7a:eb:9f:df:f1:39:0d:83:e3:
b6:ff:36:fb:d3:6a:58:99:bf:18:d9:62:70:c3:78:c5:0f:d7:
f7:61:4c:98:16:a6:ef:e8:f6:90:8a:c3:89:fb:6c:57:f6:4d:
45:b5:72:38:da:03:29:b0:ee:14:7a:06:42:c8:da:75:2a:dc:
de:28:76:38:3c:05:d0:6f:28:a4:a2:01:78:8f:95:e1:fe:cd:
23:c7:4f:af:d5:60:88:f6:9d:9b:52:00:19:40:29:05:57:6f:
87:00:0e:5c:ef:df:94:19:05:28:34:67:97:87:3a:97:a3:7f:
58:57:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:28:29 2024 by rpki-client on console-ams.rpki-client.org