Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/FlR0SrXGXOnkjGfazFcu8EVcZQ8.roa
File: FlR0SrXGXOnkjGfazFcu8EVcZQ8.roa (raw, json)
Hash identifier: imnZFCOkqci6NiccPuSWzwHIGhMIr/PbUV0ZrmT1rvE=
Subject key identifier: 16:54:74:4A:B5:C6:5C:E9:E4:8C:67:DA:CC:57:2E:F0:45:5C:65:0F
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 018CC6B929C90B32BA4C3ACA24C6C59C3FC6
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/FlR0SrXGXOnkjGfazFcu8EVcZQ8.roa
Signing time: Mon 01 Jan 2024 20:31:12 +0000
ROA not before: Mon 01 Jan 2024 20:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21050
IP address blocks: 94.187.160.0/24 maxlen: 24
94.187.163.0/24 maxlen: 24
94.187.161.0/24 maxlen: 24
94.187.162.0/24 maxlen: 24
94.187.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:29:c9:0b:32:ba:4c:3a:ca:24:c6:c5:9c:3f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Jan 1 20:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1654744ab5c65ce9e48c67dacc572ef0455c650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:28:ba:10:57:51:da:06:d7:89:44:73:e5:d4:
b8:f3:2d:52:f7:bb:40:71:ed:88:67:44:32:e6:46:
82:cb:3b:1b:ef:b0:d7:07:e6:21:11:3b:be:d1:d9:
ea:fc:c5:d1:cd:b7:b9:49:06:83:d1:19:67:ab:ac:
59:ff:a5:1e:5e:b8:83:5c:9b:62:10:02:bc:86:02:
c5:b3:38:0b:78:86:ae:e1:0c:c2:23:32:c2:59:4f:
51:e7:41:2f:ab:85:b8:16:a5:c5:97:6e:51:df:7d:
e6:a7:a5:43:b0:ff:71:d7:ae:56:60:eb:4c:1a:30:
9f:2d:d8:06:b9:f9:c0:4a:9e:95:b5:20:f5:47:fa:
c8:f8:66:70:cc:1a:cf:ce:90:98:55:81:76:4f:3c:
49:34:e5:cd:42:39:f7:2e:ff:8b:89:43:2f:7f:a7:
bd:12:f6:a3:b8:11:24:7d:07:46:19:dd:33:af:db:
ec:d3:15:64:ae:f2:ac:28:36:57:6c:5e:15:04:1d:
3e:ba:5a:6e:f3:cf:33:69:ff:4c:12:ea:07:ad:7f:
96:94:f9:72:22:68:67:04:3d:8d:de:d3:a2:53:7f:
98:a0:be:bf:36:ab:db:44:5a:37:ad:4d:cb:94:28:
8b:e9:28:e9:e2:14:30:1d:9c:14:5d:b4:8e:97:cd:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:74:4A:B5:C6:5C:E9:E4:8C:67:DA:CC:57:2E:F0:45:5C:65:0F
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/FlR0SrXGXOnkjGfazFcu8EVcZQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.187.160.0-94.187.164.255
Signature Algorithm: sha256WithRSAEncryption
33:a1:ff:42:45:7b:91:6d:1f:84:2b:97:81:d8:00:2c:76:6b:
d7:60:70:98:e9:4a:2c:d2:05:19:2a:d9:02:ca:6c:8b:8b:cd:
11:1a:d4:7d:77:1d:89:5b:d4:20:72:34:29:69:34:70:06:c9:
58:fb:3e:bc:6f:14:e0:76:a6:b7:cc:51:04:44:55:fd:4c:2f:
9f:c7:5e:e1:94:86:57:85:e2:ef:6c:f8:0f:51:3c:6c:3b:ae:
ec:2c:3e:09:2b:84:fa:df:c7:03:22:bc:fc:bb:4f:0f:85:b2:
0f:fa:4e:f3:ac:af:36:d4:32:55:34:a6:40:99:74:01:dd:9a:
c5:10:fd:05:d5:56:6a:e4:82:11:6c:9c:4c:33:c2:83:2e:3e:
04:c1:41:f0:5e:ac:6f:b2:65:5e:3b:50:28:c7:53:1f:97:31:
8d:f8:d1:37:23:bf:a9:f6:a9:a0:c4:91:93:64:fe:7b:6c:18:
93:a0:c6:c5:87:52:b3:da:b0:f8:51:2c:cc:e3:17:24:d7:f4:
66:37:20:7f:b5:da:7f:cc:05:3f:96:3d:b1:93:09:77:27:1f:
81:80:27:6a:ff:fe:24:70:6b:bd:e0:62:d3:50:20:c2:59:9d:
93:3a:c6:e1:e6:b8:b4:c3:85:72:32:a3:8c:ea:5d:42:83:ba:
ea:1f:de:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:34 2024 by rpki-client on console-fra.rpki-client.org