Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/FnY5vRyZ-3NM6QwSOP_MMQVvbvM.roa
File: FnY5vRyZ-3NM6QwSOP_MMQVvbvM.roa (raw, json)
Hash identifier: sbZM9wt7CLP51CeVRRcBe5g3k1vD31jUGT6pgRyr1yo=
Subject key identifier: 16:76:39:BD:1C:99:FB:73:4C:E9:0C:12:38:FF:CC:31:05:6F:6E:F3
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 018CC56EE50F19F657060043FEF63F59DE2C
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/FnY5vRyZ-3NM6QwSOP_MMQVvbvM.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.201.28.0/23 maxlen: 23
185.1.218.0/24 maxlen: 24
2001:7f8:10::/48 maxlen: 48
2001:7f8:10::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e5:0f:19:f6:57:06:00:43:fe:f6:3f:59:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=167639bd1c99fb734ce90c1238ffcc31056f6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:b6:3a:82:cb:ab:5e:ae:3b:b7:9c:0e:79:
12:be:7e:46:19:ed:77:c0:e9:46:3d:28:8e:4a:14:
bb:0d:db:b5:b3:8a:d5:57:46:ae:39:81:f1:7b:4d:
dc:a1:55:cb:32:92:b5:8e:56:d8:e9:12:3b:ac:5b:
de:ee:ee:51:20:66:cd:82:c2:77:69:c9:37:53:a5:
ac:1e:d9:7f:c1:51:73:ef:ca:8c:ef:33:b4:49:f0:
60:66:47:47:03:6d:02:5c:54:a7:4c:21:40:70:b7:
bc:5d:27:b1:d7:84:21:29:f5:65:2d:e5:28:d9:9d:
d7:76:34:bd:e7:51:a8:20:52:17:19:a5:e0:15:81:
08:3b:3a:40:86:14:a0:b6:d4:26:d6:e7:7c:73:8e:
05:5a:61:6e:d4:13:aa:8c:ef:cc:67:2a:7b:1c:b7:
c4:76:22:a7:c7:33:64:ec:1b:68:69:4c:84:07:3f:
7d:4b:e4:8b:d1:9d:6a:e3:53:79:51:e6:4f:0d:9f:
7e:e6:42:41:9d:a7:c4:be:ae:99:47:05:d2:f9:f5:
1a:d0:4a:44:84:11:94:1c:2c:ec:5d:22:70:29:b7:
2f:cd:5d:44:53:f9:88:a5:13:db:50:c0:77:8a:62:
ee:18:68:7e:65:13:32:d3:4c:41:a7:20:d5:76:93:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:76:39:BD:1C:99:FB:73:4C:E9:0C:12:38:FF:CC:31:05:6F:6E:F3
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/FnY5vRyZ-3NM6QwSOP_MMQVvbvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.218.0/24
193.201.28.0/23
IPv6:
2001:7f8:10::/48
Signature Algorithm: sha256WithRSAEncryption
91:0d:44:5a:1e:03:36:5e:4a:88:32:7e:4a:63:5d:ad:98:ce:
d2:78:56:ba:65:c3:dd:5a:77:51:37:b5:47:d3:89:61:75:2a:
03:35:29:d6:dd:0a:d7:c2:ad:74:39:10:5f:ae:d4:1b:22:17:
7b:8f:df:fe:42:d2:e8:48:92:34:88:b7:9b:a7:7d:98:ab:b8:
59:b1:27:79:b1:c7:94:bb:90:da:85:3c:f7:e4:5a:f7:23:38:
4b:af:ed:63:85:83:d1:34:fc:d1:08:db:e1:bc:b9:f0:4b:e3:
b5:ba:a3:07:e7:ec:71:07:26:db:4d:dc:c8:c0:71:74:11:ce:
9f:83:da:4a:ff:65:26:13:72:b3:4c:00:5f:1a:13:5e:bf:09:
c0:41:95:f3:a3:62:b2:45:a1:5e:44:7c:06:11:f3:22:82:02:
5a:58:af:04:67:87:40:f8:76:5f:22:e8:77:c2:1c:03:c0:ee:
23:a5:ed:77:f7:43:52:b2:4b:03:59:8c:37:00:98:da:67:e0:
7c:af:ae:a0:46:4a:6f:b6:93:97:d3:87:1a:ae:48:2a:67:8a:
9c:1b:49:49:e5:0d:0d:2b:4a:f5:a0:92:68:3e:75:e8:55:ae:
25:a6:1a:25:07:64:83:4e:da:cc:eb:3a:4b:69:40:d7:22:7a:
04:12:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:29:40 2024 by rpki-client on console-fra.rpki-client.org