Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fsp5hBxQJt5cOcyDFwpsSyvxops.roa
File: fsp5hBxQJt5cOcyDFwpsSyvxops.roa (raw, json)
Hash identifier: 9VocUCzC+ZPS36JweIw+0KOUP3QaJnx9v7aHufHBZCY=
Subject key identifier: 7E:CA:79:84:1C:50:26:DE:5C:39:CC:83:17:0A:6C:4B:2B:F1:A2:9B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB23DED365CD8CE2468DF3AE19AE82
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fsp5hBxQJt5cOcyDFwpsSyvxops.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 178.175.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:23:de:d3:65:cd:8c:e2:46:8d:f3:ae:19:ae:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eca79841c5026de5c39cc83170a6c4b2bf1a29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:1b:d0:63:34:fb:8c:4f:f4:2e:a9:a3:85:
54:72:44:8a:82:df:96:ac:4f:84:ef:11:de:39:3d:
78:73:b5:7b:77:87:52:5b:2e:9d:ef:80:2c:f8:a9:
fd:2c:da:6e:7b:82:8c:c2:13:a2:91:5a:59:b8:4e:
02:63:cb:ad:ff:67:ab:c4:38:af:44:e4:55:59:c5:
ae:8b:5f:27:cf:40:34:70:44:64:cd:47:3c:04:48:
61:e9:8f:41:ab:0c:2a:44:63:91:46:61:6f:73:e7:
8a:95:77:43:fe:be:98:65:de:d8:50:e5:58:a3:e2:
bc:66:fc:69:c6:18:26:06:d1:fd:e3:d3:c2:a2:ab:
ea:4e:2c:1d:2d:77:42:08:af:0e:74:23:92:31:92:
59:5a:31:cc:03:51:74:e3:25:81:ca:b5:4a:c0:02:
d2:7c:3e:3d:6a:b4:bd:9d:76:cd:99:43:c2:43:18:
82:ad:9f:9c:df:d5:f8:8c:76:29:54:c6:09:2f:7f:
9a:fc:4c:e9:fb:13:e7:56:1c:70:df:6d:9b:ef:b1:
4b:64:e9:6c:33:05:4c:90:fa:32:90:11:b8:71:eb:
7a:2b:46:64:b8:10:4b:dc:f2:34:01:25:9f:b0:ca:
df:4a:1a:19:cd:56:57:8c:c9:92:f9:8d:11:7c:dc:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CA:79:84:1C:50:26:DE:5C:39:CC:83:17:0A:6C:4B:2B:F1:A2:9B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fsp5hBxQJt5cOcyDFwpsSyvxops.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.176.0/22
Signature Algorithm: sha256WithRSAEncryption
66:5d:64:fd:a4:57:a3:ef:ba:e1:b3:2b:7e:19:09:14:f3:c7:
1d:26:70:ed:68:4b:04:11:34:23:e3:00:5d:fe:7b:19:29:2f:
99:dd:d3:d8:e9:05:9f:36:8b:d2:b4:c4:2f:4c:32:67:5a:0c:
9d:24:fc:6f:5c:2d:7c:a1:99:73:47:0b:cd:d6:a1:80:e7:10:
e2:3d:8d:36:0d:2a:45:4d:af:d0:3c:98:f8:0a:9b:8b:97:bb:
4b:38:84:77:83:a0:d0:60:f5:6f:37:95:47:b7:25:25:b7:a7:
65:38:15:02:e8:e5:21:62:9d:cd:cf:b3:60:37:c6:5c:0f:20:
db:31:2a:de:74:8f:43:17:8c:1f:40:c5:22:47:86:c0:44:01:
fb:65:f5:8d:7e:4b:f7:bf:48:0d:fa:57:73:59:26:6c:08:e2:
12:f2:37:5c:35:dc:e1:a3:a1:5f:76:be:13:0f:63:6e:20:0f:
88:8a:9f:71:37:a7:34:89:45:26:36:aa:53:04:7f:c7:b9:5c:
e6:79:fc:b5:82:1a:59:1f:9a:b7:d6:f5:12:cd:e1:c0:db:72:
5d:3c:9a:e9:b4:41:23:0f:f8:60:84:19:28:50:be:fc:03:fa:
aa:5a:92:73:54:5c:4d:7d:9f:32:90:97:3e:94:24:fb:ed:a1:
18:d0:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:16 2024 by rpki-client on console-fra.rpki-client.org