Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/FxWIRDLB6fvTv-llIk-6DsM_ulo.roa
File: FxWIRDLB6fvTv-llIk-6DsM_ulo.roa (raw, json)
Hash identifier: i/e6xVHhHq/WGcqGyracNMUagmnzz3eqOcb+CKJfpUQ=
Subject key identifier: 17:15:88:44:32:C1:E9:FB:D3:BF:E9:65:22:4F:BA:0E:C3:3F:BA:5A
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 018CC72663EB340940886C27EDC33E064298
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/FxWIRDLB6fvTv-llIk-6DsM_ulo.roa
Signing time: Mon 01 Jan 2024 22:30:31 +0000
ROA not before: Mon 01 Jan 2024 22:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50140
IP address blocks: 193.104.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:63:eb:34:09:40:88:6c:27:ed:c3:3e:06:42:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jan 1 22:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1715884432c1e9fbd3bfe965224fba0ec33fba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:57:99:3c:82:ff:d8:21:5f:fb:42:27:c0:
0d:26:56:b0:fc:6a:23:6d:6c:4c:d2:cc:dc:62:fb:
d8:2c:4b:81:04:cc:33:6a:4f:ec:95:14:d5:15:ba:
17:d9:ad:14:c5:ae:f5:33:ce:74:0d:b1:55:ef:5d:
b2:2a:5a:61:8b:74:5e:54:ed:0a:9e:6a:40:10:a1:
d6:ad:f1:3a:ed:b2:7b:6d:17:bf:b7:c3:96:37:ba:
1b:e5:d8:21:94:89:6b:bb:da:9d:2a:2c:fc:79:ce:
12:d9:97:b3:71:f3:86:a2:e1:21:ae:36:49:df:8b:
34:98:0c:b0:8e:31:10:86:33:0f:a2:42:5f:10:ac:
56:4a:4d:47:98:c6:4e:b7:4d:a4:03:b7:a4:77:ef:
b9:61:43:19:ae:a8:bf:a2:75:c9:73:17:5a:de:c9:
6d:a0:47:dc:50:00:9f:5a:03:36:27:40:c2:c5:ab:
d6:53:51:16:21:ab:43:61:cd:af:62:52:5c:21:49:
f9:68:53:a8:85:a8:bb:26:2b:0b:7b:f8:3b:f8:0b:
6b:5c:71:29:68:b9:64:96:e8:1c:27:7e:e9:87:8a:
2b:b1:8a:50:e4:8a:00:86:f7:8d:2e:df:5d:69:c9:
52:4d:91:6f:1c:ee:b8:bf:bb:77:2d:2b:a4:2c:d1:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:88:44:32:C1:E9:FB:D3:BF:E9:65:22:4F:BA:0E:C3:3F:BA:5A
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/FxWIRDLB6fvTv-llIk-6DsM_ulo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.145.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d9:be:69:d0:62:ec:69:bf:ee:0f:de:1d:28:04:f8:0e:ec:
07:70:9f:53:49:3a:6f:83:0a:ec:90:03:3e:1d:db:64:f9:16:
9b:e2:e8:55:5e:6a:78:96:f4:64:ad:61:a6:d0:a1:78:28:26:
2f:54:56:0f:38:78:b6:a2:68:35:2b:e7:a8:20:7a:bc:39:c0:
3d:9b:ef:35:42:b0:65:59:65:19:4a:e7:39:59:c4:0b:3d:dc:
34:1d:7e:13:f1:e8:9c:99:92:39:a8:cd:6e:6f:cb:e4:ed:0b:
49:c6:f8:d0:ac:e2:1d:f5:11:fd:d0:30:39:57:d8:a8:5e:cb:
8b:3f:48:c9:0a:31:ee:21:b9:fa:34:dc:1d:e2:76:bd:32:23:
09:a3:65:16:df:a7:63:35:28:4a:8e:3e:56:39:4f:1c:f6:74:
08:ee:7a:68:d9:1b:f5:08:2d:01:ac:bb:e7:ed:6d:9b:0a:e6:
b2:4c:84:ca:e8:35:74:b0:08:c6:9c:3a:0e:d1:38:21:87:3e:
0c:8a:a8:41:72:98:d1:5d:f4:04:cb:7b:78:62:26:fc:c8:d9:
0a:80:37:99:7e:8e:70:53:3d:9d:d7:aa:f7:d6:0e:69:46:ae:
ae:44:4d:8c:0e:16:51:0c:7d:03:06:af:62:e9:89:fd:e5:4d:
5e:7a:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:58 2024 by rpki-client on console-ams.rpki-client.org