Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/fBIKhGuDs2L4EbfNdPCgcHXUXww.roa
File: fBIKhGuDs2L4EbfNdPCgcHXUXww.roa (raw, json)
Hash identifier: E1Lg4+WA7U1e0033zKsPtjQLujuHu6WKSG7Jgjhfuk0=
Subject key identifier: 7C:12:0A:84:6B:83:B3:62:F8:11:B7:CD:74:F0:A0:70:75:D4:5F:0C
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 018CC8018BC10A3D4FD5D7C72374030C5C4E
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/fBIKhGuDs2L4EbfNdPCgcHXUXww.roa
Signing time: Tue 02 Jan 2024 02:29:53 +0000
ROA not before: Tue 02 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59882
IP address blocks: 185.153.210.0/24 maxlen: 24
185.153.208.0/22 maxlen: 22
185.153.211.0/24 maxlen: 24
185.153.208.0/24 maxlen: 24
185.153.209.0/24 maxlen: 24
2a07:88c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8b:c1:0a:3d:4f:d5:d7:c7:23:74:03:0c:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c120a846b83b362f811b7cd74f0a07075d45f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:07:90:23:db:6e:a0:ef:00:5a:21:17:4c:
26:3a:02:0e:73:9a:0c:45:12:7d:46:97:5e:7e:73:
39:d5:b6:ec:40:72:5d:09:52:ad:f8:37:ba:c8:96:
10:c3:98:5c:c5:5e:89:89:72:7a:b2:3f:56:9d:6b:
5c:9b:34:e7:b1:3f:b7:3a:2e:28:5a:fd:07:c3:cf:
e0:09:0c:91:73:06:e0:50:f6:70:e9:79:65:88:31:
8d:8b:9b:f1:09:4e:46:24:7c:15:ef:d2:1a:81:1d:
d1:66:a0:b5:69:29:ba:ea:46:01:40:97:9f:d8:ff:
f1:e3:3d:c6:a5:19:c3:a6:f4:39:aa:34:57:d3:d0:
dd:62:e9:df:77:1e:ac:88:a6:41:c7:18:1f:c8:48:
5f:3a:1c:c0:d5:27:94:a5:17:39:95:c0:85:a9:d4:
38:4a:d3:75:41:61:43:a8:af:9a:ef:cf:80:65:dd:
3e:8b:03:f4:a2:50:92:cb:a9:52:b1:5d:cd:02:f0:
e8:d6:53:26:9f:74:b0:0c:f0:19:e7:78:f8:d1:22:
4b:e4:9e:02:49:0a:68:5c:7e:3d:7c:1c:4a:68:51:
19:58:dd:c4:13:ba:0c:19:7a:e4:72:8d:32:7c:3d:
a4:53:a5:cb:3a:9e:23:0d:8a:a2:e4:64:2a:36:b2:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:0A:84:6B:83:B3:62:F8:11:B7:CD:74:F0:A0:70:75:D4:5F:0C
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/fBIKhGuDs2L4EbfNdPCgcHXUXww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.208.0/22
IPv6:
2a07:88c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:a9:bc:fc:3d:c8:12:75:32:2f:e9:d1:a3:e7:6f:ac:02:3f:
d3:d3:68:24:6c:40:0d:5c:67:cf:17:da:3c:2b:00:4e:f1:79:
f7:f9:19:21:94:07:64:eb:f9:44:4d:98:a1:7f:b8:d1:5d:85:
7f:90:17:b5:13:4e:fe:9c:49:0e:4d:49:84:94:f5:10:df:08:
b4:04:31:fc:d6:e0:32:0e:da:66:7c:73:78:e6:ef:6d:fc:0f:
b1:f4:73:6f:75:d1:b3:5c:d1:68:ad:7a:2c:e9:b2:43:83:75:
8b:f3:43:c5:b0:0a:07:a5:2d:31:2a:aa:88:e1:15:31:02:c0:
17:ac:eb:98:29:86:a3:89:64:0f:c7:90:d1:04:a0:25:88:c5:
33:1b:24:e6:01:87:60:9f:94:1c:cb:be:45:85:36:39:4c:5b:
f6:af:51:b2:77:6c:30:b9:1a:ff:ee:05:20:a8:c7:4f:2d:29:
9a:76:7d:7e:d2:e1:59:d3:5d:a6:c7:67:47:e4:d3:43:54:3a:
7e:42:4f:5d:05:c0:c1:40:7b:98:1e:95:bd:7b:cb:97:84:f2:
46:34:2a:6e:3e:12:00:c2:82:a5:6d:0d:34:c6:dc:61:87:7f:
6e:13:aa:c3:08:97:5c:e5:43:c2:45:b1:0f:4f:56:8a:56:ae:
d3:8f:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:03:40 2024 by rpki-client on console-fra.rpki-client.org