Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/febjGQxMyYhRFClWBw76UpIOKDk.roa
File: febjGQxMyYhRFClWBw76UpIOKDk.roa (raw, json)
Hash identifier: Pru0+2cek1/ZfzN5siC5gQZ6HMICgxerr4wa8SAo64I=
Subject key identifier: 7D:E6:E3:19:0C:4C:C9:88:51:14:29:56:07:0E:FA:52:92:0E:28:39
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 018EEB885C097B7D81732F6D686F6F85226E
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/febjGQxMyYhRFClWBw76UpIOKDk.roa
Signing time: Wed 17 Apr 2024 10:09:25 +0000
ROA not before: Wed 17 Apr 2024 10:09:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215092
IP address blocks: 146.66.160.0/19 maxlen: 19
146.66.192.0/20 maxlen: 20
178.252.64.0/18 maxlen: 18
2a0b:c0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:88:5c:09:7b:7d:81:73:2f:6d:68:6f:6f:85:22:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Apr 17 10:09:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de6e3190c4cc98851142956070efa52920e2839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:8a:77:63:e1:d5:56:2a:9b:fb:87:5f:51:
c7:96:4f:33:7b:10:39:5d:41:a2:34:63:04:aa:8a:
50:d2:d9:ea:d5:70:ff:5c:ee:dc:58:ac:7c:24:97:
1b:df:8e:64:b2:97:54:22:ce:21:07:5f:68:03:b5:
ba:09:84:b9:0f:76:c2:8f:f7:db:b4:ae:de:18:ef:
00:6a:19:3d:5f:e7:1a:b5:c2:bc:fb:e8:45:a6:11:
94:c0:e5:25:59:f3:0d:12:03:ac:c2:0a:be:b5:ff:
c6:ab:d7:63:b0:e7:e3:f4:19:d6:ad:52:b7:9e:19:
ca:0b:7a:46:3b:ff:88:36:ef:7e:16:a1:f4:bf:f8:
21:55:1a:00:c1:74:28:e5:cc:59:81:f4:ad:d6:65:
58:a8:75:56:49:59:53:4b:c3:20:79:c6:bf:64:e2:
f2:8f:a3:ac:77:08:97:b3:83:a7:1a:e9:32:4d:7e:
e7:db:be:6f:31:d4:04:b5:17:9b:1d:5f:67:be:c4:
9b:b1:56:cd:b5:7d:a0:bf:06:76:4b:63:b0:b5:01:
66:26:f5:0c:1d:a7:75:6b:ca:7d:08:92:e6:4e:2b:
4e:6a:f9:b1:5d:89:1d:40:1d:ea:0e:8b:19:f2:7d:
28:19:45:21:ce:18:d4:b4:ef:15:26:83:f6:a6:aa:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:E3:19:0C:4C:C9:88:51:14:29:56:07:0E:FA:52:92:0E:28:39
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/febjGQxMyYhRFClWBw76UpIOKDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.160.0-146.66.207.255
178.252.64.0/18
IPv6:
2a0b:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:ac:54:87:6a:d8:60:4e:a6:43:db:5b:19:1d:83:1d:c7:15:
ae:cc:90:72:59:86:29:8c:a3:dd:42:5b:1d:1d:e3:22:34:30:
49:9d:a7:f7:7c:da:1d:28:09:4d:4c:25:62:d8:7d:14:84:33:
b6:03:66:f2:02:2f:d0:14:0e:8c:2b:ea:59:4b:27:b9:94:32:
6b:6b:9e:d2:f8:9b:a5:f2:24:0a:9c:1a:63:70:1c:c3:cc:ec:
5c:1c:26:58:c3:f7:ce:73:02:3a:89:01:11:d9:e3:38:06:18:
ba:77:8b:86:e4:28:2a:9c:1b:22:88:f5:af:46:02:ea:c4:fe:
aa:a2:b8:d3:85:c9:42:de:c3:ac:bc:44:2c:0e:3f:8e:b8:63:
1f:52:30:de:1c:b9:ea:aa:5e:d2:94:8d:c2:a6:cf:41:9d:17:
fb:ba:cd:c8:77:75:b3:05:b7:6f:28:35:ac:1d:ef:e1:c0:62:
7b:ed:09:8b:ca:98:2d:1d:8b:9f:9e:cb:a5:cb:8d:b7:ce:cf:
07:b2:db:0a:fb:ec:50:dd:37:0b:d5:2b:a8:44:93:65:5e:16:
da:ec:f4:8c:ff:66:94:9c:1e:be:0c:76:31:1c:a8:f8:b4:b5:
1f:e9:54:82:4e:be:e1:f1:22:f6:cb:d8:bc:03:a0:73:3a:97:
2e:01:12:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:48:20 2024 by rpki-client on console-ams.rpki-client.org