Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/FVHTdmEStyKgvUoouiGxyMYOMEU.roa
File: FVHTdmEStyKgvUoouiGxyMYOMEU.roa (raw, json)
Hash identifier: dZLnSTsscuOZIxhntmqXNRAQXXypIOTesa9fpj8w5rw=
Subject key identifier: 15:51:D3:76:61:12:B7:22:A0:BD:4A:28:BA:21:B1:C8:C6:0E:30:45
Certificate issuer: /CN=cf40e25606651a075484c709fa766d80dad52d9c
Certificate serial: 0190923C29CEB2F39576709284CC791AC948
Authority key identifier: CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/FVHTdmEStyKgvUoouiGxyMYOMEU.roa
Signing time: Mon 08 Jul 2024 12:05:34 +0000
ROA not before: Mon 08 Jul 2024 12:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25350
IP address blocks: 81.200.224.0/20 maxlen: 20
81.200.224.0/21 maxlen: 21
81.200.224.0/24 maxlen: 24
81.200.225.0/24 maxlen: 24
81.200.226.0/24 maxlen: 24
81.200.227.0/24 maxlen: 24
81.200.228.0/24 maxlen: 24
81.200.229.0/24 maxlen: 24
81.200.230.0/24 maxlen: 24
81.200.231.0/24 maxlen: 24
81.200.232.0/21 maxlen: 21
81.200.232.0/24 maxlen: 24
81.200.233.0/24 maxlen: 24
81.200.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:3c:29:ce:b2:f3:95:76:70:92:84:cc:79:1a:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40e25606651a075484c709fa766d80dad52d9c
Validity
Not Before: Jul 8 12:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1551d3766112b722a0bd4a28ba21b1c8c60e3045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:a3:17:30:c1:c5:a7:7f:0d:eb:19:da:f4:
3c:97:a9:03:60:24:d7:68:84:9e:b6:cd:76:53:f0:
a2:88:c7:a7:95:9a:85:e3:f2:25:b8:b9:06:2b:66:
ef:30:17:61:03:96:81:8b:cd:ce:e3:0c:41:c9:bc:
27:19:d1:c7:bf:5c:b4:07:f8:a1:ac:05:2b:7e:c5:
9b:55:08:16:eb:13:de:e8:8b:68:6c:57:d1:6f:a0:
9c:00:c0:13:32:e7:db:09:e5:97:38:50:4a:37:bc:
de:76:24:cd:a8:22:0b:95:af:79:fe:96:18:cc:4a:
7a:3e:85:70:40:34:cb:a1:ee:0e:a7:ee:92:d4:ef:
c7:de:e2:eb:bf:90:c9:f5:f0:c3:62:7a:80:75:b0:
35:33:f8:6c:3a:83:75:28:ef:50:6d:f9:ea:e6:79:
80:ae:2e:37:6f:f7:eb:3b:bc:19:e4:0f:5d:76:10:
e5:1c:23:af:fc:2c:78:4c:47:fc:a0:ba:66:68:03:
98:8b:3f:2d:34:ca:45:0e:ce:29:72:93:4c:44:a6:
ae:27:da:19:71:da:53:85:4a:0e:5a:3a:44:11:17:
2d:5a:39:b3:9b:28:e0:80:f2:90:93:b9:22:6d:09:
9a:da:d0:95:fd:34:71:30:c7:68:82:12:b9:da:83:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:D3:76:61:12:B7:22:A0:BD:4A:28:BA:21:B1:C8:C6:0E:30:45
X509v3 Authority Key Identifier:
keyid:CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/FVHTdmEStyKgvUoouiGxyMYOMEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.200.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:fb:f0:3b:6e:e8:0c:da:84:85:b8:8d:4a:1a:b5:6b:80:cb:
a0:3a:fa:e9:94:ea:1a:28:5f:64:21:50:4c:71:4d:61:9c:99:
73:8e:14:2e:50:07:d5:8d:d4:6c:37:b6:a8:16:db:ea:6a:6f:
9c:af:2a:c0:f4:a8:fd:5e:a8:61:f9:a8:6e:ec:2f:99:24:c4:
51:e2:f8:38:38:cf:24:7a:01:d2:3b:bf:78:da:e8:9a:43:03:
36:62:48:1c:3a:8c:2a:e4:62:a5:50:25:6b:e4:3f:c5:8b:57:
71:74:e8:6e:41:3e:c5:d5:2c:c4:6b:36:bc:cc:74:60:ba:9f:
8f:45:27:e5:86:25:a9:ef:6b:ca:40:0f:76:96:07:1c:40:92:
75:0e:72:63:21:91:56:ef:86:b5:95:b2:a0:6a:b3:6b:99:da:
3f:95:a8:4d:37:34:07:62:61:51:b0:3e:ea:77:6b:13:a4:6a:
40:23:a0:1a:6f:7f:d5:d4:0f:01:a5:34:97:ea:b6:94:a9:d5:
08:f1:fe:5e:b1:8d:35:f5:bc:af:66:f7:cd:19:4c:88:00:e9:
d0:5f:cf:0b:ce:3f:88:a4:2c:16:d2:ac:51:14:a9:87:ed:dd:
bf:c7:af:08:3c:11:75:de:4e:bb:1e:de:dc:e9:91:c9:f7:d2:
3f:0c:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:50 2024 by rpki-client on console-fra.rpki-client.org