Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/FPEFXkOfFuvpl1yl-8vq03dhvl8.roa
File: FPEFXkOfFuvpl1yl-8vq03dhvl8.roa (raw, json)
Hash identifier: Yu45Y/BzRQFLqrP55U+8hubE7MFm+ulcWwC/2yfYawE=
Subject key identifier: 14:F1:05:5E:43:9F:16:EB:E9:97:5C:A5:FB:CB:EA:D3:77:61:BE:5F
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 018DA2EDA6D692CAFC9374D41CACC142666A
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/FPEFXkOfFuvpl1yl-8vq03dhvl8.roa
Signing time: Tue 13 Feb 2024 14:45:00 +0000
ROA not before: Tue 13 Feb 2024 14:45:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28761
IP address blocks: 91.194.163.0/24 maxlen: 24
193.27.242.0/24 maxlen: 24
193.27.243.0/24 maxlen: 24
193.238.108.0/24 maxlen: 24
193.238.109.0/24 maxlen: 24
193.238.110.0/24 maxlen: 24
193.238.111.0/24 maxlen: 24
194.9.26.0/23 maxlen: 24
195.3.244.0/22 maxlen: 24
2a05:5840::/32 maxlen: 32
2a05:5841::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:ed:a6:d6:92:ca:fc:93:74:d4:1c:ac:c1:42:66:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Feb 13 14:45:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14f1055e439f16ebe9975ca5fbcbead37761be5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b2:ee:ac:30:e6:20:4c:f4:fc:be:79:9f:ce:
2c:73:d0:8d:c0:89:33:0a:f1:7c:91:83:fc:98:24:
e8:87:c0:c6:c1:54:ed:d1:e4:9d:99:be:de:58:d8:
b7:59:63:ec:68:cf:8d:0d:b2:f2:a8:82:f0:ec:4d:
6d:cf:2d:fd:7a:2d:a9:9e:07:46:c1:13:70:62:c2:
2d:20:ca:ef:25:41:2f:c3:0a:1b:1d:73:9c:c0:44:
06:9e:1d:68:9f:4b:c0:1e:d1:a6:f5:4e:e7:99:39:
fd:c6:d4:e1:c8:a7:48:8b:10:39:a3:a5:9b:01:e1:
6d:f9:57:ea:82:f3:1e:d7:63:05:81:7f:17:97:55:
85:81:de:6a:bf:d7:65:39:26:dd:25:9a:f1:80:b8:
56:cd:02:a4:15:68:ca:05:1b:4b:19:35:df:0d:f7:
f8:e8:17:66:6f:03:76:82:84:40:d4:b0:17:11:18:
ae:a4:ed:34:19:a9:ea:c2:2e:f4:da:bc:34:ce:97:
95:96:35:f4:24:b7:74:4e:6a:c0:4d:9a:aa:6d:9f:
e4:c4:23:e9:ae:d9:dd:04:bc:9e:e0:e9:f8:ca:7d:
71:e1:73:03:10:65:03:1d:54:eb:ac:20:48:ae:26:
a8:05:69:1b:e8:cb:2e:5d:37:a3:c2:d3:55:e4:87:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F1:05:5E:43:9F:16:EB:E9:97:5C:A5:FB:CB:EA:D3:77:61:BE:5F
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/FPEFXkOfFuvpl1yl-8vq03dhvl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.163.0/24
193.27.242.0/23
193.238.108.0/22
194.9.26.0/23
195.3.244.0/22
IPv6:
2a05:5840::/31
Signature Algorithm: sha256WithRSAEncryption
3a:7e:7e:3d:6f:70:a4:09:e2:73:7b:34:f2:a7:77:05:a0:60:
9d:15:e3:00:41:1b:6f:70:b0:c8:3e:40:8d:56:fb:af:51:6c:
19:ed:a5:a4:49:c2:3c:45:36:c0:67:60:31:1b:a8:fa:05:30:
ae:67:9e:8d:9a:5b:24:83:b9:d6:3d:33:3d:3f:f4:64:9e:09:
84:9c:03:89:97:fc:55:7d:a3:30:3c:02:9d:2a:ef:07:9a:3c:
d5:09:c6:e1:e4:91:1e:04:99:b9:ca:d6:11:d8:c2:b0:04:e7:
55:e4:19:90:ca:8d:80:e1:0d:01:51:3e:a6:00:79:d0:b7:ad:
15:d0:a1:ee:a6:46:20:72:50:df:7a:df:d8:a7:17:7c:44:ed:
fd:32:14:90:68:08:62:f8:79:ca:f3:63:18:60:74:dc:69:1e:
80:6f:73:c8:c9:84:76:96:4c:3b:2f:f8:f6:37:22:37:7d:91:
a8:d6:d2:36:81:ff:a7:87:34:e3:5b:e9:be:7e:0a:e7:21:f8:
cc:fe:9c:8f:44:42:ba:3d:e4:3e:d2:e6:c2:07:24:6e:6a:90:
60:aa:1c:58:b4:c1:fc:92:3b:32:75:4f:fe:b8:76:cf:d5:7e:
67:18:8d:16:ee:ed:64:8d:a3:71:32:27:8a:dd:08:db:db:5a:
e2:20:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:58:34 2024 by rpki-client on console-ams.rpki-client.org