Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/FGZYPetkdDKfO4D24I9eO529NOQ.roa
File: FGZYPetkdDKfO4D24I9eO529NOQ.roa (raw, json)
Hash identifier: xwqesQkcI8KVrnKVHliFdxTZ4Z1GoM39CR+MvpnOiNU=
Subject key identifier: 14:66:58:3D:EB:64:74:32:9F:3B:80:F6:E0:8F:5E:3B:9D:BD:34:E4
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 01903AAC63E4A7A64EC63312B8F0909D412D
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/FGZYPetkdDKfO4D24I9eO529NOQ.roa
Signing time: Fri 21 Jun 2024 12:01:34 +0000
ROA not before: Fri 21 Jun 2024 12:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214895
IP address blocks: 193.242.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:ac:63:e4:a7:a6:4e:c6:33:12:b8:f0:90:9d:41:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Jun 21 12:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1466583deb6474329f3b80f6e08f5e3b9dbd34e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:ff:8f:c0:d1:02:4b:ad:91:8f:8f:60:8f:
3a:a0:2f:57:0d:d5:f9:66:fd:46:d3:f6:d0:de:04:
d0:88:3f:a8:d7:db:fe:8d:92:4d:ae:ea:c3:b6:38:
eb:1b:40:4c:63:74:9a:f6:45:8f:f2:ee:77:8d:14:
db:f2:fb:ae:11:f8:19:4d:92:d8:52:04:ca:57:24:
ea:7e:e1:9b:e2:c6:fb:3b:e8:dd:ea:a3:36:d0:88:
4b:ca:2a:f3:03:99:a8:03:07:50:94:6a:01:46:ea:
de:5b:ee:3b:45:e1:c6:89:c7:e5:30:dc:ed:05:e1:
e1:6f:ca:48:d4:58:a1:c6:fb:8a:61:81:65:2b:fd:
ed:53:fb:bc:e6:4e:ef:16:7a:cd:47:00:fd:59:6b:
bf:7f:dd:f7:70:a0:1d:30:c1:1e:47:65:7c:04:c5:
80:93:69:ce:13:23:5a:26:8a:52:f7:b3:3e:e0:78:
96:a8:33:51:e4:5f:f3:62:50:2e:c6:c4:83:35:2b:
8d:f5:99:55:9d:e9:35:2b:ea:fe:5c:3d:1d:63:c0:
58:f1:7d:45:64:32:a8:25:5c:e0:74:7d:86:22:c1:
48:1b:f9:73:c9:00:ae:44:1d:55:d3:2b:03:d2:27:
04:04:bc:52:43:f4:65:22:81:71:9d:24:9a:8c:8f:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:66:58:3D:EB:64:74:32:9F:3B:80:F6:E0:8F:5E:3B:9D:BD:34:E4
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/FGZYPetkdDKfO4D24I9eO529NOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:51:45:dc:8d:d9:fb:33:5b:d5:33:14:54:6b:39:4c:aa:b9:
b3:6d:a4:92:46:dc:fe:79:5b:01:87:e1:58:02:78:67:ab:43:
bf:a0:da:40:9e:c0:28:90:38:c9:41:de:c8:ea:35:dc:49:fa:
c5:01:c4:47:9e:f3:14:44:b3:4d:40:2a:87:66:8a:e3:6b:3a:
cc:75:16:2b:25:e7:f8:e7:3b:54:56:a4:89:9c:ca:41:19:d9:
29:2a:39:93:da:29:38:7c:5e:ff:f7:a9:f6:7e:e9:a3:41:77:
c5:3e:f5:c2:e4:83:9e:4c:6b:2e:33:af:cc:67:ff:30:e1:69:
5d:ec:48:ad:71:44:ec:cd:44:93:f4:d7:61:71:d2:43:b0:4d:
c3:6e:b1:0d:e1:4a:39:98:79:5d:c9:3d:ce:63:67:fd:0e:5d:
4c:50:59:d0:e3:ce:10:4b:5a:ac:a6:75:32:e6:00:0e:64:d9:
8e:67:bc:e1:c0:bd:ad:01:27:9d:99:7a:22:ec:d1:38:e9:71:
90:88:72:ea:b7:b2:1a:a8:e8:f0:11:f3:2e:8c:3c:9a:dd:f5:
67:e2:48:2c:ea:a2:76:0f:0e:43:b4:96:bc:7e:79:c6:a3:21:
8e:96:25:87:3e:8a:f8:2a:73:77:a1:fd:66:7d:a7:92:ba:5d:
51:9e:56:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:22:18 2024 by rpki-client on console-ams.rpki-client.org