Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/FN6BPeqVocLJ5_5Pi7_E4na0SoA.roa
File: FN6BPeqVocLJ5_5Pi7_E4na0SoA.roa (raw, json)
Hash identifier: jjcLkmJzj80u1Ff9IMYefV2DSCaYSvUoIlNARnDrkkE=
Subject key identifier: 14:DE:81:3D:EA:95:A1:C2:C9:E7:FE:4F:8B:BF:C4:E2:76:B4:4A:80
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 018CC500D4CF8610D06BFB57B17359DE0FCE
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/FN6BPeqVocLJ5_5Pi7_E4na0SoA.roa
Signing time: Mon 01 Jan 2024 12:30:15 +0000
ROA not before: Mon 01 Jan 2024 12:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44217
IP address blocks: 185.181.110.0/24 maxlen: 24
185.181.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d4:cf:86:10:d0:6b:fb:57:b1:73:59:de:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jan 1 12:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14de813dea95a1c2c9e7fe4f8bbfc4e276b44a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c0:81:2d:e3:ea:51:04:b8:0f:7a:84:88:87:
31:bc:fa:88:37:a5:4d:86:10:2d:55:e0:d6:58:66:
da:3c:9e:da:39:b0:d2:0c:b9:39:f6:51:d5:74:6e:
f9:06:8d:ce:23:67:38:46:b3:86:ee:0b:e0:17:e2:
af:25:8b:76:e8:ec:48:26:9d:4c:10:df:96:d4:7d:
21:e5:fc:b6:61:ca:a1:6a:34:55:53:96:35:75:83:
b6:46:05:09:34:23:88:f9:8b:a7:e8:66:24:5d:74:
81:b2:ed:93:64:53:11:c5:bb:41:07:5c:a6:90:cf:
6e:db:45:15:a3:6a:81:90:4f:a5:b7:3d:38:8f:45:
46:fc:95:a5:55:8f:aa:0a:8e:cc:b8:cf:ea:e7:3b:
67:1f:ce:49:c0:6e:84:c8:7a:2e:22:b1:34:74:be:
1e:50:fe:87:d0:f8:a7:2b:a1:ae:08:a7:6f:82:18:
7c:9a:15:79:10:2a:7e:e7:04:c8:df:bc:82:fb:85:
17:0d:8c:29:d8:2a:d0:6a:19:f8:1f:f3:1c:28:68:
3d:37:88:60:90:3b:fe:d0:01:6a:a6:73:a9:8b:4f:
6a:11:26:b2:9c:a1:d8:6c:07:b8:82:c2:e2:f3:7a:
c7:bf:a2:05:3f:19:eb:d9:b9:2e:1e:4a:99:ce:4b:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:81:3D:EA:95:A1:C2:C9:E7:FE:4F:8B:BF:C4:E2:76:B4:4A:80
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/FN6BPeqVocLJ5_5Pi7_E4na0SoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.110.0/23
Signature Algorithm: sha256WithRSAEncryption
96:49:d2:c6:91:45:0c:29:15:e1:48:65:b6:be:55:b4:ad:5f:
69:fb:f5:9e:e0:6f:6a:1d:76:a1:0d:7d:9f:26:07:a5:f6:a2:
fb:6d:dc:f3:51:59:0a:76:2e:98:f1:4c:ca:54:07:7b:41:71:
74:30:1a:0e:2e:39:55:d2:b7:c1:18:59:d9:2b:ba:37:c2:7f:
20:c6:99:d3:d0:3e:11:12:ce:7e:d7:b1:f3:de:0d:08:02:60:
74:69:b6:ec:7c:77:63:8d:0f:43:d4:78:bb:c7:a0:91:31:bf:
81:42:24:ea:4e:00:8e:e3:4b:64:1c:e0:ca:d2:60:4a:f2:5d:
2d:43:f0:5a:e2:85:af:4c:1d:c3:50:6e:6a:17:e7:f5:c6:3e:
c9:36:8d:e8:e3:e3:d8:fd:c5:3d:45:0c:01:0d:be:3b:e3:9d:
b3:06:8c:9a:19:95:03:95:39:b1:92:67:34:e9:30:cf:b9:2d:
95:7b:5f:e8:80:e9:a5:44:ef:b7:31:80:c6:ea:71:d5:e0:d2:
a1:d7:68:6c:d2:fe:cf:81:4c:45:1c:05:2f:3e:6a:3e:ff:21:
e6:a1:58:19:bf:bc:76:4d:71:37:c0:a5:28:3d:b8:bb:5b:d8:
e2:6c:22:31:e2:4d:c6:9d:0e:cf:74:a7:af:a5:e0:e2:26:50:
fd:29:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:52 2024 by rpki-client on console-ams.rpki-client.org