Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/fjxXPR5R9L4p09Z-3H9nxIyAgbI.roa
File: fjxXPR5R9L4p09Z-3H9nxIyAgbI.roa (raw, json)
Hash identifier: y0li4YYSB6f1rh/mWGn5hcqBhrs9UAItKoVjR6MqRCU=
Subject key identifier: 7E:3C:57:3D:1E:51:F4:BE:29:D3:D6:7E:DC:7F:67:C4:8C:80:81:B2
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019276277C8374AC72A4BCCA4DDB6A775B9A
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/fjxXPR5R9L4p09Z-3H9nxIyAgbI.roa
Signing time: Thu 10 Oct 2024 11:19:11 +0000
ROA not before: Thu 10 Oct 2024 11:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 195.245.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:27:7c:83:74:ac:72:a4:bc:ca:4d:db:6a:77:5b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Oct 10 11:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e3c573d1e51f4be29d3d67edc7f67c48c8081b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:29:02:d5:f0:3e:c0:f3:e9:32:e7:fd:7d:
6a:95:db:a1:82:d2:93:a9:ff:c8:ba:cb:8e:3a:b0:
d7:38:78:06:a3:c6:e8:79:3a:c6:cd:ad:ea:48:98:
aa:70:6a:9b:51:a3:fd:b0:51:5f:a5:bb:bc:b1:77:
7d:1c:2f:18:7b:b0:79:af:42:4c:57:0d:11:43:0e:
ab:53:7a:7f:cc:60:be:9c:0b:f6:e7:dd:7c:93:0c:
0e:a6:37:ba:cb:78:15:d3:06:7b:b8:74:df:98:3e:
64:01:a2:0f:8b:34:9d:65:ab:74:a6:ea:17:e9:66:
6c:7d:1b:e5:12:51:52:42:e7:68:9e:cd:1f:bf:4c:
cd:26:e7:cf:15:74:63:16:f9:e3:f0:33:b6:1f:c2:
d2:9f:da:29:81:38:24:d5:cf:43:39:1c:31:e8:95:
f6:f8:60:11:84:8e:72:9c:61:73:88:00:3a:6a:5f:
4d:1b:ac:cd:2a:0d:66:63:4f:1a:43:e9:05:65:e0:
e0:44:1a:bb:73:47:00:32:78:93:fa:1b:42:80:a8:
2e:ab:c1:a5:80:cb:02:dc:d8:13:2e:f9:23:55:ec:
90:dd:0f:e0:9a:51:0d:d4:7f:1b:d8:d5:06:e9:75:
fd:fb:a6:6b:e3:19:a7:0e:38:5b:67:98:2a:74:10:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:57:3D:1E:51:F4:BE:29:D3:D6:7E:DC:7F:67:C4:8C:80:81:B2
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/fjxXPR5R9L4p09Z-3H9nxIyAgbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.122.0/23
Signature Algorithm: sha256WithRSAEncryption
56:44:19:a4:56:49:8f:1b:e1:35:55:5d:a1:22:84:1d:06:20:
d5:02:0a:3e:1c:bb:fb:8a:0e:d8:9b:48:4e:ab:41:e2:ea:da:
74:57:80:86:2d:e7:6f:2a:7b:d2:e6:a0:89:66:f6:36:87:dc:
05:b8:ed:c0:6f:9e:b7:b2:fc:34:2f:14:90:9b:2e:9b:ee:b4:
17:eb:b4:a1:3f:0a:da:ce:7c:a9:86:e2:0d:2f:71:b7:e8:f6:
22:ef:76:d6:f6:fd:23:a1:6a:d0:d6:4f:a7:c4:7b:1c:27:b4:
1a:ce:86:54:24:19:06:c7:80:53:1a:f7:b3:67:6a:bd:6e:87:
b8:2f:70:dd:2a:2e:5d:57:da:e3:f5:e1:c8:85:ee:df:cb:c3:
fe:a7:15:ca:0e:58:41:e4:8b:8c:d4:a4:93:d4:41:e4:e1:1a:
fc:b2:79:93:07:88:07:19:bd:b7:12:54:f9:16:db:92:54:e7:
62:33:d4:ce:eb:b6:49:cf:e7:a1:ed:95:4e:19:18:9c:47:08:
37:28:e5:b5:27:cf:6c:46:f1:92:81:b2:e8:f0:20:79:80:df:
ce:10:f9:de:18:6e:22:4c:1c:e3:a6:f6:1e:98:fc:9c:38:c3:
a5:49:63:bb:30:27:9a:ab:94:38:72:58:5c:a5:6f:4a:d8:96:
05:2a:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:18 2024 by rpki-client on console-fra.rpki-client.org