Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/fpv2oevyhi9v0RTbCJ4AEj0xqgc.roa
File: fpv2oevyhi9v0RTbCJ4AEj0xqgc.roa (raw, json)
Hash identifier: 3exVzYa5Fe22qbKTl+hpAKFuwkdUG6WDHizierfKqXA=
Subject key identifier: 7E:9B:F6:A1:EB:F2:86:2F:6F:D1:14:DB:08:9E:00:12:3D:31:AA:07
Certificate issuer: /CN=e187d5794d0ae8ab856ea0c26107720acd446d3a
Certificate serial: 018CC49370BE48847AD02478465ADB2F48A1
Authority key identifier: E1:87:D5:79:4D:0A:E8:AB:85:6E:A0:C2:61:07:72:0A:CD:44:6D:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YfVeU0K6KuFbqDCYQdyCs1EbTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/fpv2oevyhi9v0RTbCJ4AEj0xqgc.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202308
IP address blocks: 185.241.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/4YfVeU0K6KuFbqDCYQdyCs1EbTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/4YfVeU0K6KuFbqDCYQdyCs1EbTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YfVeU0K6KuFbqDCYQdyCs1EbTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:70:be:48:84:7a:d0:24:78:46:5a:db:2f:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e187d5794d0ae8ab856ea0c26107720acd446d3a
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e9bf6a1ebf2862f6fd114db089e00123d31aa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:22:9e:de:c3:7d:b5:2b:09:57:75:a8:06:
27:05:21:7b:81:1e:7a:65:ee:38:ac:19:6e:e2:29:
cf:4f:27:f8:98:3a:8e:52:99:5d:73:b2:38:dc:7a:
0c:0a:ca:33:48:2f:55:f5:07:d0:ea:cb:7f:88:e3:
e0:f6:7f:da:3c:05:8e:2e:73:0b:77:5f:bc:9e:02:
e8:23:1a:1c:26:20:66:97:0b:3c:c6:0c:eb:6c:91:
b9:04:84:ca:11:27:fa:4b:4d:ee:3e:a6:b0:1a:9c:
93:8f:f4:6f:00:e0:4d:af:ad:d9:db:3b:02:9a:03:
21:ea:b0:f2:fd:d5:2f:79:a9:1b:72:18:1b:78:b8:
33:54:37:9e:2c:dc:73:30:53:c5:48:7e:ec:5c:8a:
28:29:8e:51:b2:ea:b0:02:f1:83:e6:e4:44:d3:e5:
0d:73:c4:ba:e6:35:ec:53:42:09:b2:c3:d0:6f:71:
f9:a9:ad:aa:3f:4b:0b:fe:75:69:50:e3:eb:7c:1d:
b7:21:8b:62:30:e6:ed:56:3d:7a:06:da:5c:7e:ae:
50:d1:f0:ff:76:b8:f0:95:df:06:ed:60:d3:9f:a7:
ff:37:4e:9a:b3:9c:bc:ec:16:da:df:4d:6c:a7:83:
d0:e4:38:d9:3e:1b:33:58:cb:8c:a4:85:23:06:d7:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:F6:A1:EB:F2:86:2F:6F:D1:14:DB:08:9E:00:12:3D:31:AA:07
X509v3 Authority Key Identifier:
keyid:E1:87:D5:79:4D:0A:E8:AB:85:6E:A0:C2:61:07:72:0A:CD:44:6D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YfVeU0K6KuFbqDCYQdyCs1EbTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/fpv2oevyhi9v0RTbCJ4AEj0xqgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/4YfVeU0K6KuFbqDCYQdyCs1EbTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.16.0/22
Signature Algorithm: sha256WithRSAEncryption
55:51:c3:a4:2e:0b:14:81:d7:87:f6:a8:43:6c:d4:81:6d:1d:
f2:6d:46:72:5c:59:4e:45:18:6b:80:00:ea:b5:ee:55:c7:9a:
b5:6e:99:22:7b:28:68:05:de:b3:d8:14:5a:f2:51:08:ea:2d:
ff:9b:e8:83:ab:72:8e:28:06:f0:33:d8:6c:60:47:2f:a4:a1:
c0:6b:3d:49:f9:f3:ef:6e:26:7a:fe:7d:51:15:fa:cb:03:f5:
bc:f0:2d:5d:63:c7:44:55:d5:d7:16:ea:67:8c:e7:dd:a7:86:
18:01:c0:cb:e4:5a:39:00:34:82:a7:2c:df:35:31:17:ce:69:
73:b8:7f:fc:73:ad:3c:e7:09:ac:f6:8a:54:fe:8b:10:7f:61:
83:88:ed:06:71:ce:4d:27:6a:91:99:60:85:79:52:63:5c:92:
fc:0b:35:aa:19:bf:c6:19:8f:f7:56:71:90:76:bb:33:9e:00:
e9:be:b7:71:42:49:80:6d:fb:6a:d3:65:65:28:e5:8a:5a:6e:
8a:ff:55:13:10:ef:e6:f1:a0:24:86:b8:83:84:c7:c3:95:0d:
74:16:49:60:4a:01:e0:9d:86:87:51:bb:f7:15:dd:eb:ce:4b:
8b:c1:df:24:42:4a:e2:18:d5:0b:70:1c:79:f1:72:cb:5c:48:
19:2b:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:49:05 2024 by rpki-client on console-ams.rpki-client.org