Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/fgA8eG8OiiUwOlpIAfVqbyFIGUo.roa
File: fgA8eG8OiiUwOlpIAfVqbyFIGUo.roa (raw, json)
Hash identifier: QVenHOakNN7iaPQuosh7/Do740EZOWuf7xHyLzedZ4A=
Subject key identifier: 7E:00:3C:78:6F:0E:8A:25:30:3A:5A:48:01:F5:6A:6F:21:48:19:4A
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 018CC94E58F46E3F1DACE3A76057530268B2
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/fgA8eG8OiiUwOlpIAfVqbyFIGUo.roa
Signing time: Tue 02 Jan 2024 08:33:24 +0000
ROA not before: Tue 02 Jan 2024 08:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63956
IP address blocks: 94.250.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:58:f4:6e:3f:1d:ac:e3:a7:60:57:53:02:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e003c786f0e8a25303a5a4801f56a6f2148194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:77:a7:fc:81:70:67:34:c1:3a:92:9e:3d:
75:49:e2:5c:30:e9:41:46:03:91:4d:8a:04:17:90:
a8:0e:52:32:a1:70:89:94:8b:e5:f2:77:b8:18:ed:
af:8d:a7:ff:a1:36:e2:b3:74:23:12:db:4b:f7:f6:
3d:47:f4:bf:85:e5:47:27:c8:23:fe:b1:07:9f:0a:
63:19:26:04:2c:fd:2c:57:8a:8c:bb:90:fd:39:4d:
05:6b:55:65:3f:43:08:5b:b0:e4:a8:ba:8e:f6:42:
14:ae:e4:8c:a9:54:15:c6:03:9e:88:ce:c2:75:e5:
d0:07:23:46:2a:8c:f8:5c:55:32:96:97:02:a5:42:
f4:26:92:3a:1d:70:81:bd:01:f4:a6:90:71:94:15:
af:42:30:e3:88:6b:36:6c:ca:ed:4a:6f:3e:e5:9d:
64:c2:c7:3e:cc:11:d4:c8:2e:b6:e2:52:9f:b0:38:
54:f7:27:65:aa:9e:a4:31:5b:3a:b1:17:00:f4:7b:
74:31:49:7f:bf:62:c5:5e:98:7d:cd:c6:8c:7f:b5:
37:f3:05:0c:c9:09:ca:e2:e8:01:6e:01:3e:4c:77:
13:0a:df:54:9a:c8:34:38:77:dd:fa:59:0b:15:4f:
96:54:8f:85:ac:dd:1a:6a:36:9f:7a:6f:09:75:49:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:3C:78:6F:0E:8A:25:30:3A:5A:48:01:F5:6A:6F:21:48:19:4A
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/fgA8eG8OiiUwOlpIAfVqbyFIGUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c1:35:bb:5a:40:b6:5e:ed:48:43:5b:26:4f:22:d3:0b:33:
cd:62:36:fb:76:62:33:ad:8b:2d:03:91:63:ee:f7:25:00:e8:
b9:32:bb:1d:42:89:c6:76:27:01:21:f5:db:49:ef:9a:19:b9:
e1:3f:07:5a:29:32:eb:46:8c:93:c9:65:71:32:f7:77:2e:2d:
95:52:11:81:fb:c0:54:d2:b2:d5:13:b2:d3:a7:e5:4f:bc:f1:
8a:11:0a:1f:c5:c5:bf:ff:66:36:1e:0e:5d:f5:24:7c:93:8d:
0c:34:da:c7:50:97:7e:e7:01:81:33:2e:94:dd:cb:cb:b3:63:
32:07:ce:02:b3:03:17:91:a7:78:37:4f:d8:13:ec:5f:da:7a:
41:08:5a:c4:06:70:ad:bb:b5:36:9d:0b:61:bd:e6:99:d7:af:
79:d7:99:f0:51:5f:f7:da:fa:65:a0:9c:e8:45:11:86:c2:c4:
a9:09:9c:a4:55:6b:5b:77:f6:74:45:fe:68:55:20:1c:59:0e:
f9:05:f1:c2:96:76:6c:e8:1f:b8:c4:a2:9f:a3:e7:45:6f:3f:
2a:b4:27:bd:44:17:0b:80:44:3b:5d:25:97:4e:dd:82:6d:d4:
a0:5d:49:9e:56:3d:50:ba:f8:73:dc:b4:4a:1b:27:76:3e:c5:
77:c4:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:27:47 2024 by rpki-client on console-fra.rpki-client.org