Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/FTDR2wfkCs037pb7wGon1vkbRT8.roa
File: FTDR2wfkCs037pb7wGon1vkbRT8.roa (raw, json)
Hash identifier: b4lx9XrjrAkui/v6MPs3lpfuakeptytvJJs8h5EQlLY=
Subject key identifier: 15:30:D1:DB:07:E4:0A:CD:37:EE:96:FB:C0:6A:27:D6:F9:1B:45:3F
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 018CC72770BFFC58F2F9656B5F39806C8703
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/FTDR2wfkCs037pb7wGon1vkbRT8.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199479
IP address blocks: 185.14.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:70:bf:fc:58:f2:f9:65:6b:5f:39:80:6c:87:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1530d1db07e40acd37ee96fbc06a27d6f91b453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:86:02:e7:33:75:a3:3a:b6:fc:4f:86:b7:
7f:4d:38:00:b0:c4:db:d1:c7:e0:9d:88:de:58:a0:
19:5a:d6:3a:b8:96:3a:64:ae:e8:14:6b:c2:35:9d:
88:68:d9:9a:9c:af:ae:6e:76:5a:aa:43:74:0c:60:
a1:3f:2d:3a:66:a0:48:ee:98:60:8b:a4:12:e1:14:
fc:d1:a6:7e:71:95:05:e8:40:65:74:dc:06:38:30:
b6:f1:2e:fe:5a:da:9d:31:b0:3a:ea:92:ed:00:b5:
a8:c4:62:dc:58:91:2a:e7:b5:12:19:ba:cf:fc:c3:
55:dc:2a:24:9e:9c:fe:ae:c3:34:1e:72:43:86:da:
bf:f0:21:8a:2f:5b:23:37:81:e4:71:84:5f:99:a6:
f1:6c:f7:1f:87:01:d6:27:26:d2:07:c9:e7:a0:67:
fe:51:8d:67:8b:05:66:50:8c:45:90:b8:85:c5:c0:
e0:2d:41:86:d2:15:f1:41:04:4c:fa:0c:e0:82:b0:
a0:c9:cd:ce:9f:28:0a:c8:25:0b:12:08:17:31:5b:
d6:12:d1:20:e5:39:46:5c:e0:02:cb:1d:71:54:2b:
15:8d:f3:e2:93:06:e2:93:3a:7a:39:4e:bd:e2:3a:
e0:64:b2:b5:be:92:19:ab:e2:27:5a:c8:a3:83:6d:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:D1:DB:07:E4:0A:CD:37:EE:96:FB:C0:6A:27:D6:F9:1B:45:3F
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/FTDR2wfkCs037pb7wGon1vkbRT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.84.0/22
Signature Algorithm: sha256WithRSAEncryption
48:cf:01:4e:c0:15:0e:3f:bf:bd:ed:ce:3d:52:3f:d9:a1:01:
34:fd:15:6a:12:b8:d3:8d:37:2f:18:01:62:08:46:e0:9e:ce:
12:03:e6:91:ab:f7:20:8d:19:28:8c:b3:25:fb:e9:ee:b2:b5:
a5:27:8c:b1:9b:2b:fe:e1:d9:a1:1a:8c:a7:72:ba:54:a6:2e:
3b:08:e2:53:ba:ae:04:63:d7:d5:c1:ae:60:8c:02:1f:ea:0a:
00:87:2b:69:93:a5:ac:33:5d:92:1e:7c:ea:15:91:db:33:2c:
a5:9a:3a:40:1e:f5:df:62:2d:2d:8d:cc:3d:b6:1b:da:b1:ea:
6d:e7:d7:63:03:09:43:d9:15:ac:45:97:68:8f:f6:a9:0a:4b:
8f:e9:1f:bf:3e:ac:01:23:fb:d4:af:f9:52:da:b0:50:e0:fe:
69:c1:0f:d8:2a:21:be:54:21:e8:94:f9:bd:ff:2d:df:ce:32:
f2:1e:77:b5:0c:25:56:9c:d6:0e:7e:1a:15:99:c8:d3:18:da:
2c:88:e9:88:95:68:a9:0c:21:c1:fd:58:21:e6:d5:d8:4a:b0:
03:00:d8:40:d9:4f:8d:21:45:04:be:f3:3d:5c:3b:1d:c1:b7:
0c:ec:85:84:93:ab:1a:c5:de:53:3b:1d:f6:de:41:bd:b6:c1:
2a:f6:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:16:11 2024 by rpki-client on console-fra.rpki-client.org