Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/FpMBtReFR_7JTcHdFPaNkpGAu4w.roa
File: FpMBtReFR_7JTcHdFPaNkpGAu4w.roa (raw, json)
Hash identifier: 94lZnhgzyF4I49Q9SzlV6doO/xHovYFZqGLgOJoVIvY=
Subject key identifier: 16:93:01:B5:17:85:47:FE:C9:4D:C1:DD:14:F6:8D:92:91:80:BB:8C
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 018CC56E894CE92D6B2303E3E0080268B383
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/FpMBtReFR_7JTcHdFPaNkpGAu4w.roa
Signing time: Mon 01 Jan 2024 14:30:04 +0000
ROA not before: Mon 01 Jan 2024 14:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199635
IP address blocks: 185.8.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:89:4c:e9:2d:6b:23:03:e3:e0:08:02:68:b3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Jan 1 14:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=169301b5178547fec94dc1dd14f68d929180bb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:cf:58:df:91:9b:b8:b2:88:6b:82:99:d6:
96:58:81:49:c5:32:bd:3d:30:c3:97:ca:a4:b7:e5:
05:f0:bc:65:45:49:0f:70:50:8a:a0:cc:89:57:f2:
30:c0:a7:36:e0:36:fc:99:17:e5:d0:b0:ba:be:a9:
04:07:5f:ac:01:e5:6e:ba:ae:88:63:70:3a:08:f5:
62:bd:93:c4:f9:e8:c3:b2:ff:be:a9:ae:a8:b8:0e:
cd:ad:82:1b:ae:f4:fe:c8:69:93:e7:85:de:7d:9a:
36:0f:19:af:33:3c:f7:86:a3:bf:fc:10:78:3a:54:
cb:16:09:e6:bf:6a:d0:80:bd:b8:8b:86:e2:88:8f:
94:0d:2b:6b:26:04:04:14:19:84:85:64:3e:ae:c6:
bd:8a:00:f6:c5:f4:d7:a3:b6:a0:37:da:2e:99:25:
d0:75:8d:34:5c:9b:86:c5:01:91:8a:54:c1:3f:80:
50:91:1e:ab:6b:5e:27:c2:ce:7d:a9:5b:33:15:23:
56:6a:4a:79:cc:06:35:25:17:dc:67:3c:34:6d:60:
eb:b7:56:d9:c0:25:e6:d1:4b:bb:c5:58:cc:8e:3e:
e8:33:f0:22:f3:5e:f0:56:f8:8c:73:de:63:bc:d1:
a2:bb:dc:19:78:5c:f8:3b:f1:2f:0e:86:57:43:27:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:01:B5:17:85:47:FE:C9:4D:C1:DD:14:F6:8D:92:91:80:BB:8C
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/FpMBtReFR_7JTcHdFPaNkpGAu4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.216.0/22
Signature Algorithm: sha256WithRSAEncryption
95:3e:e4:91:1c:f2:cf:a3:1b:b2:b5:95:b9:5c:44:ad:11:ee:
b8:14:5d:46:cb:a5:26:e1:cb:09:9a:92:eb:67:f2:0d:d8:05:
4e:37:75:12:e8:69:64:ac:b8:41:87:7f:c3:c3:31:31:3d:ca:
9d:fc:e4:85:71:82:33:ad:88:dc:ab:28:c1:7c:cd:eb:af:f3:
de:bc:c7:3e:8e:ac:86:cf:89:9f:ca:5e:48:67:ad:fc:c8:81:
98:fa:96:15:ec:ba:cb:93:4d:cd:23:0c:6c:b1:74:fe:af:1a:
e6:5a:cf:f3:35:60:aa:42:85:6e:c1:a5:ba:b7:dc:6b:bf:f1:
e5:2a:dd:c4:c0:2c:a1:54:e7:ad:d6:1f:10:2f:bf:18:24:cd:
21:f4:02:a0:7e:fa:44:08:0d:7f:5a:b7:d8:e9:a0:93:fe:02:
37:80:eb:1d:9b:c2:8d:cd:62:ff:eb:1b:f4:03:46:d6:7e:2a:
10:8c:cd:97:5b:4d:83:ac:d1:5a:d5:19:fb:d9:09:14:0c:93:
88:47:4e:b6:9f:4f:c2:65:9d:81:f4:3d:dc:4d:f3:0a:f3:62:
40:78:bc:9f:27:05:42:ea:bd:28:8d:55:c7:ec:f6:41:38:57:
62:1a:c7:2c:1d:18:61:94:fe:a8:02:c1:f9:d1:9b:fe:e5:d2:
7a:b9:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:29:29 2024 by rpki-client on console-ams.rpki-client.org