Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fxH8BxpHzFidomE0XCJJPxAkvfo.roa
File: fxH8BxpHzFidomE0XCJJPxAkvfo.roa (raw, json)
Hash identifier: 4clGHVP+188JqOhG8iffMZwz3knpnbXGxdj1B6Ky1Bk=
Subject key identifier: 7F:11:FC:07:1A:47:CC:58:9D:A2:61:34:5C:22:49:3F:10:24:BD:FA
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 018D30559517A05A306F05AAC0A78F48BEAF
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fxH8BxpHzFidomE0XCJJPxAkvfo.roa
Signing time: Mon 22 Jan 2024 08:42:11 +0000
ROA not before: Mon 22 Jan 2024 08:42:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205561
IP address blocks: 147.12.64.0/24 maxlen: 24
185.160.220.0/22 maxlen: 24
185.160.220.0/24 maxlen: 24
185.160.221.0/24 maxlen: 24
185.160.222.0/24 maxlen: 24
185.160.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:55:95:17:a0:5a:30:6f:05:aa:c0:a7:8f:48:be:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Jan 22 08:42:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f11fc071a47cc589da261345c22493f1024bdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:37:93:a2:4a:29:d2:bf:ff:9e:12:a4:dc:
aa:5c:36:b6:7d:68:0c:8a:86:1c:f9:57:24:84:23:
f6:2d:54:25:69:ab:b7:68:bc:2a:6e:51:0c:a0:e0:
4f:7b:ed:48:22:fc:4f:14:7a:e5:13:96:bc:4e:ce:
20:82:a6:18:67:88:da:22:52:2b:97:57:3b:e1:9f:
fa:1e:b1:12:d3:c6:76:42:05:b7:8d:41:a1:67:ef:
b6:db:4f:cb:4d:c2:68:08:6a:3f:ba:81:66:f4:e0:
92:41:a0:e0:4a:d5:37:45:75:ed:ba:01:58:db:30:
23:9c:e4:9a:ce:81:43:01:58:2b:60:ba:d6:4a:07:
4e:44:30:bd:ae:dc:4e:2b:2a:b3:9a:52:9b:1e:0a:
3b:8a:12:48:88:a0:33:9d:26:ba:51:32:ce:8e:5d:
7c:8f:38:9c:8a:9d:b3:aa:d4:e6:7d:55:cb:8d:15:
21:e0:a3:30:b6:09:c0:0f:71:d7:8a:7a:d9:0c:af:
68:e7:90:a3:8f:0e:15:b6:42:4c:11:a7:34:a1:f0:
f5:25:6e:90:81:34:2d:3f:3e:b3:8c:42:d1:b6:01:
47:c5:6d:ac:0f:29:95:b8:7d:f6:a2:7e:cd:e2:16:
e2:64:c4:43:26:45:4e:60:fe:60:18:69:d1:60:d1:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:FC:07:1A:47:CC:58:9D:A2:61:34:5C:22:49:3F:10:24:BD:FA
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fxH8BxpHzFidomE0XCJJPxAkvfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.12.64.0/24
185.160.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:c0:98:4e:5e:b9:84:dd:55:b7:fa:bc:23:db:fb:cb:0c:94:
bb:14:0d:34:32:81:67:a8:1d:00:03:62:bd:54:80:78:d9:ff:
68:84:ee:a1:54:57:13:2e:2b:ca:9b:39:67:7f:f9:3b:59:69:
2a:8b:59:40:9c:a0:9c:d2:ae:03:c5:e3:bc:62:48:d8:13:ac:
37:19:5c:45:d0:81:0a:9b:49:9e:34:8b:02:e0:20:a6:33:d9:
09:bf:f4:4c:9c:0e:5a:51:0a:a9:53:78:60:c4:c4:cc:a0:bf:
14:e0:bb:cb:3b:b0:12:4a:c5:87:08:81:95:a6:e0:3a:a7:ad:
d3:a9:51:d9:6a:93:0a:85:ea:dd:29:8d:af:b3:59:a5:81:22:
01:ae:b4:fc:b5:a7:f6:41:3f:08:dc:e3:79:ea:2b:70:de:22:
bc:90:42:68:d7:ce:49:31:e1:9f:ce:72:6a:2f:6b:5e:f9:f6:
33:72:2f:7e:9b:d9:26:1a:fe:bd:8d:15:93:c1:83:fb:7d:dc:
73:9f:74:f7:01:99:3b:26:cd:b9:a9:e5:29:5f:01:04:7f:4b:
f1:bc:b5:7d:bd:69:ed:c7:61:5f:7d:df:7e:2a:0a:d2:d4:d9:
e6:b3:a5:8e:96:ac:45:76:bb:82:dd:ed:12:8e:f4:4e:e2:63:
87:43:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:48:50 2024 by rpki-client on console-ams.rpki-client.org