Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F-IXDqsRKb5cJDzYIZ8keOkgEGU.roa
File: F-IXDqsRKb5cJDzYIZ8keOkgEGU.roa (raw, json)
Hash identifier: i7Tq4/WNrEIoGbwULopgi7fUV2bR8/Y/n3CWtz4mdZk=
Subject key identifier: 17:E2:17:0E:AB:11:29:BE:5C:24:3C:D8:21:9F:24:78:E9:20:10:65
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CE32650953E37292DA8794C552CA42920
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F-IXDqsRKb5cJDzYIZ8keOkgEGU.roa
Signing time: Sun 07 Jan 2024 08:59:48 +0000
ROA not before: Sun 07 Jan 2024 08:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 84.32.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:26:50:95:3e:37:29:2d:a8:79:4c:55:2c:a4:29:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 7 08:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17e2170eab1129be5c243cd8219f2478e9201065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:c5:2f:e1:82:b5:e4:bf:29:88:82:9e:df:
4f:59:ff:f6:01:ae:d6:70:7e:39:99:d4:ad:b5:c7:
36:ce:2a:35:30:4e:96:d3:c2:e3:17:e2:49:81:74:
dc:a2:c6:ed:83:20:cd:a6:c6:21:31:15:35:d7:ea:
f4:84:35:01:9c:54:df:d2:f2:a4:1a:ab:b1:d8:d2:
fd:aa:61:93:3c:cc:f8:26:f7:87:79:51:09:f7:26:
d9:d5:6a:fc:06:25:a5:68:9f:ee:fc:7d:76:af:e4:
75:62:a6:8e:3d:0b:7c:14:0b:53:8d:58:7e:ba:2d:
20:7b:a2:85:02:a6:78:4e:77:3f:81:61:c0:8f:fb:
bc:61:f5:80:36:26:ae:dc:66:20:73:89:db:e0:3c:
d0:1d:51:4e:14:42:95:a7:e2:12:6d:e8:b8:42:d6:
a5:83:8f:d5:8e:45:51:05:40:24:c4:96:42:d9:71:
32:91:34:27:51:e6:ca:8b:92:e5:38:d4:5c:22:83:
42:08:b5:12:ed:0e:b9:62:47:ef:9a:02:72:5b:6a:
0e:ef:93:26:ce:c1:6c:a4:c0:ca:bc:20:e0:87:97:
df:38:b4:87:88:24:d5:4d:8f:9a:bf:d0:89:b7:d1:
14:61:2e:a2:47:bd:ce:e5:ac:c8:5f:d4:76:ef:7a:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:17:0E:AB:11:29:BE:5C:24:3C:D8:21:9F:24:78:E9:20:10:65
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/F-IXDqsRKb5cJDzYIZ8keOkgEGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ea:fb:b4:b9:23:96:49:4e:6a:6e:db:e0:68:41:73:43:cc:
69:d0:a6:b0:9a:ae:31:78:15:a2:30:a8:ab:e3:8c:93:7e:f7:
e1:c4:6f:08:2a:b2:25:72:63:86:83:a0:61:8a:54:8d:66:50:
28:fd:9d:fa:c7:3b:28:58:d1:a5:77:70:6d:a6:e5:32:24:dd:
18:01:6e:bf:4b:b5:90:3e:c7:66:ca:63:6b:d1:2d:24:9c:6d:
69:e4:a6:46:05:a0:ba:26:d3:81:9d:1c:1d:c6:85:c5:55:bf:
72:10:9b:db:03:b5:41:d9:95:7b:f1:42:a9:c6:e8:09:e0:af:
34:8c:8d:7b:a4:fc:07:da:ea:d5:1a:c6:13:f2:e7:13:92:b8:
9d:8b:6b:46:1e:59:be:c7:4f:b2:bd:33:ec:f0:f0:84:49:bc:
22:b0:1d:a2:95:f1:d7:90:19:d9:a7:f9:ac:0b:ef:0c:d9:5c:
b5:5a:9b:81:c8:00:98:c4:e0:a2:1c:c5:d7:e9:54:59:66:90:
67:26:af:cf:90:14:c7:92:a4:53:6d:25:ef:18:44:3e:b1:0f:
2c:df:d9:2d:c6:6a:58:fe:23:8f:40:d9:ca:da:b9:b7:0f:00:
2d:5f:7a:a9:24:20:2f:af:06:1b:8c:7c:8a:ef:4c:c3:19:9f:
99:b8:96:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:52:49 2024 by rpki-client on console-fra.rpki-client.org