Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/fugmZq2H-wukHSN6q8GQwR_6DtM.roa
File: fugmZq2H-wukHSN6q8GQwR_6DtM.roa (raw, json)
Hash identifier: iLrDdWhXO76aVbwbcvCGr52+D/z2ZkfCSkdA3Q6tz48=
Subject key identifier: 7E:E8:26:66:AD:87:FB:0B:A4:1D:23:7A:AB:C1:90:C1:1F:FA:0E:D3
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 018CC8DF2F9601AB1F5FF83D0E72F86D88F5
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/fugmZq2H-wukHSN6q8GQwR_6DtM.roa
Signing time: Tue 02 Jan 2024 06:31:59 +0000
ROA not before: Tue 02 Jan 2024 06:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39422
IP address blocks: 176.108.232.0/21 maxlen: 21
176.108.232.0/22 maxlen: 22
176.108.238.0/23 maxlen: 23
176.108.236.0/22 maxlen: 22
176.108.236.0/24 maxlen: 24
195.182.203.0/24 maxlen: 24
195.182.202.0/24 maxlen: 24
195.182.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2f:96:01:ab:1f:5f:f8:3d:0e:72:f8:6d:88:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Jan 2 06:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ee82666ad87fb0ba41d237aabc190c11ffa0ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:02:14:0e:f4:7c:13:b8:6f:5c:6d:e6:8b:
61:6a:d1:f1:3e:a3:84:7f:f8:62:83:51:74:25:4b:
2b:91:8c:f5:6f:48:7e:fb:40:0e:bb:f2:42:26:d7:
be:c7:52:6d:30:a0:4d:7d:40:0c:22:4c:aa:67:a8:
50:4d:ca:82:ea:b6:fa:44:a4:f0:5f:e7:f2:cd:2f:
ba:03:cf:1e:a0:75:60:3c:b0:7f:d6:12:eb:11:fb:
1b:04:ab:82:1c:37:35:f5:76:30:bf:fb:fa:16:98:
16:2c:73:b5:c8:24:be:15:70:d8:3f:11:af:56:fc:
39:c7:e5:77:4c:0e:e6:cd:9d:4a:15:eb:bc:fa:85:
40:aa:a3:6d:2c:40:5b:a6:51:90:7f:5b:e3:4c:34:
d4:9f:a5:ae:8f:7f:62:26:12:2e:05:dd:0f:61:69:
c2:9c:45:f4:6c:6e:1a:d9:bd:a8:8e:13:de:80:a9:
2a:f0:c8:c1:30:49:24:c0:f2:cc:31:45:7d:a8:1e:
fb:c7:a1:1d:d2:d0:b7:7f:b4:5d:15:ea:1f:03:a7:
6f:58:fc:c4:ec:3e:ee:68:04:29:69:7a:11:bd:ed:
e2:cd:bd:df:5c:9d:0a:a4:d6:af:5d:88:e7:88:06:
9d:e8:b7:6e:ca:5b:5e:5f:0a:8c:c9:1d:5c:d9:cd:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:26:66:AD:87:FB:0B:A4:1D:23:7A:AB:C1:90:C1:1F:FA:0E:D3
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/fugmZq2H-wukHSN6q8GQwR_6DtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.232.0/21
195.182.202.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:32:40:db:2d:ba:7f:bf:04:89:ff:22:b4:c2:dd:1d:40:69:
3d:43:e9:f2:b6:b9:4c:af:e1:f4:b0:81:a0:00:b1:43:2d:d6:
ca:26:8a:f6:f3:8a:22:1e:15:4a:61:81:38:0d:29:e1:6e:6e:
57:c5:5b:1a:63:eb:e9:81:94:54:02:4a:5e:ed:1b:c6:a8:fa:
72:cd:e5:74:fc:fa:dc:b5:59:06:95:70:e1:06:be:3c:2a:23:
e7:70:33:b0:5a:1e:6a:8e:6c:64:88:aa:7b:26:1f:62:06:c1:
02:4d:7c:a5:57:cd:0e:89:25:ec:d6:5d:43:f2:4b:38:f0:86:
89:f0:3b:ee:1a:ca:e9:79:8e:93:6f:b6:8a:ad:5f:18:07:00:
92:b0:2d:13:85:2a:c5:d4:6e:34:2e:ee:85:f8:f3:20:05:90:
9d:7c:4b:93:2d:9a:ab:f2:08:87:53:ee:94:7c:53:b9:fd:9e:
cf:77:8b:04:2e:ce:30:69:80:28:fb:fe:ff:70:11:e3:36:b2:
fc:a5:91:34:40:13:3f:ac:0d:ba:43:4e:19:bf:f1:af:26:66:
11:fc:c5:c9:a7:6a:05:36:eb:2f:7e:d2:a2:01:e9:aa:0a:e4:
74:31:b7:75:21:95:13:00:55:e8:79:45:c1:d1:35:f1:d6:44:
2e:37:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:35:27 2024 by rpki-client on console-ams.rpki-client.org