Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/FFVRt2yFbmdXZMCBqWc5kgyaRUI.roa
File: FFVRt2yFbmdXZMCBqWc5kgyaRUI.roa (raw, json)
Hash identifier: nBGqLtyPBRP8XKA3Q+Jy8QFI63iI95ZNF5cy9ueK0LY=
Subject key identifier: 14:55:51:B7:6C:85:6E:67:57:64:C0:81:A9:67:39:92:0C:9A:45:42
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 018CC86F15496AC99C44D6C0A8E022CD67DF
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/FFVRt2yFbmdXZMCBqWc5kgyaRUI.roa
Signing time: Tue 02 Jan 2024 04:29:32 +0000
ROA not before: Tue 02 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33918
IP address blocks: 194.6.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:15:49:6a:c9:9c:44:d6:c0:a8:e0:22:cd:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=145551b76c856e675764c081a96739920c9a4542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:e0:e8:b3:77:06:94:61:4f:a0:3c:5b:2f:
e9:70:bc:c9:84:52:24:46:5e:42:3d:d4:c5:44:d6:
37:d6:a6:fb:86:c2:bb:03:83:eb:dc:5c:77:f6:dd:
cd:59:18:9b:33:4d:1e:d3:36:a0:d8:cb:e3:c6:41:
5c:85:cf:97:67:1e:7e:e6:78:7d:d5:ce:68:1c:61:
86:f5:b5:59:68:0d:ca:55:50:4f:0f:33:45:c7:70:
67:d4:4b:01:99:e3:59:73:df:9c:30:0d:68:5d:3f:
74:40:3e:32:be:54:07:66:d7:09:76:bf:27:32:f7:
ea:62:71:0d:88:bb:f6:1f:21:db:f9:33:fa:67:4f:
37:4c:45:d0:ce:61:74:11:4e:20:44:a7:45:d6:a5:
da:44:31:32:22:42:42:17:5e:14:40:b3:cf:0d:15:
d8:f4:dd:ab:c7:64:44:25:06:5f:b2:9f:f2:4c:31:
ed:bb:96:e8:87:cb:3b:20:c6:e2:94:61:15:89:a3:
22:68:d1:49:02:26:14:87:b8:f0:8e:dc:2e:ab:df:
d7:98:1a:bc:7b:61:10:96:d7:bc:90:94:2e:32:56:
75:82:0a:d2:6a:5e:cc:4c:41:b4:db:e2:e7:b6:c5:
b3:4a:25:3a:8d:33:1c:d4:38:f8:17:53:2f:09:bc:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:55:51:B7:6C:85:6E:67:57:64:C0:81:A9:67:39:92:0C:9A:45:42
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/FFVRt2yFbmdXZMCBqWc5kgyaRUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fc:f9:81:c1:58:67:d6:6f:00:c5:f4:33:0b:dd:a1:54:03:
ee:cd:12:bc:28:fc:6c:a9:aa:a8:d7:07:c0:6f:49:e2:69:0f:
3e:3e:69:6d:3a:59:09:44:6a:73:86:29:81:5e:d0:21:35:ea:
68:5d:db:09:30:3b:eb:36:59:1a:70:44:29:20:84:63:9b:8f:
f4:4a:4e:ea:8e:46:e9:ab:3d:cd:1c:ce:54:4a:40:e5:d2:b0:
6f:bd:f1:cf:be:7b:0f:18:35:dc:1b:04:97:bc:45:38:b2:27:
db:c8:61:22:f7:72:42:c0:f2:9d:6e:d0:b3:ed:be:4e:c0:c4:
9e:cb:e0:bc:3e:f6:8e:a4:61:d5:23:00:d4:f5:1c:3d:6b:f1:
6c:a8:e9:35:07:40:ba:5f:37:ac:de:ad:49:42:88:55:43:58:
b2:0f:f8:b7:f1:a9:e1:56:a9:99:2b:a0:3b:4a:f4:e3:ea:61:
fe:ea:0b:90:2d:d6:ff:fe:03:d4:4a:ee:f0:0a:d8:ea:21:4a:
b9:11:e2:25:49:84:23:b7:a5:44:1f:6b:ad:49:42:b3:e0:9f:
53:77:c1:d0:c0:51:c4:e7:32:7a:c1:db:1c:1c:90:10:a6:7f:
d7:b4:c4:8e:b6:76:c9:1c:ec:c4:37:23:b3:59:b1:ff:fa:e7:
af:88:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:36:17 2024 by rpki-client on console-ams.rpki-client.org