Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/FJGAQWukucgbWfWIdHuB7RuKsCU.roa
File: FJGAQWukucgbWfWIdHuB7RuKsCU.roa (raw, json)
Hash identifier: OaZoPDRBHuVw6GJh7MoG0xgN0vxlCvDMFbDKJ8+tXjQ=
Subject key identifier: 14:91:80:41:6B:A4:B9:C8:1B:59:F5:88:74:7B:81:ED:1B:8A:B0:25
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01908D6AB4DBBAFF7039EDDC53E7B2812058
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/FJGAQWukucgbWfWIdHuB7RuKsCU.roa
Signing time: Sun 07 Jul 2024 13:38:18 +0000
ROA not before: Sun 07 Jul 2024 13:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51517
IP address blocks: 2a10:e300::/32 maxlen: 32
2a10:e300:8411::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:6a:b4:db:ba:ff:70:39:ed:dc:53:e7:b2:81:20:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 7 13:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=149180416ba4b9c81b59f588747b81ed1b8ab025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:76:8b:c9:38:df:8d:06:ee:10:28:f5:7f:
21:7f:93:8c:f9:b7:0f:13:a2:63:2e:a7:56:21:31:
8c:86:c9:2b:99:06:d4:79:78:74:0f:65:c2:f8:dd:
b4:4b:24:37:65:cc:5a:71:28:f5:bc:09:8f:a9:ef:
9c:af:8c:6f:eb:a0:7b:9c:3d:f1:43:0b:35:3c:21:
d2:05:91:ef:7b:33:3f:5b:29:97:c2:70:ee:88:48:
71:23:d1:a3:97:a2:7a:dd:38:ff:0e:eb:41:ee:0c:
fb:2a:11:03:86:cc:98:5b:41:e4:cb:31:cc:57:d8:
d6:66:15:86:38:66:eb:58:e6:0a:ed:da:c5:90:e1:
61:7c:70:9d:d3:ab:4e:64:c4:39:fc:ae:c4:96:23:
cc:ff:c0:af:15:be:e7:e5:5f:14:a8:32:95:92:c9:
37:0d:1f:13:57:08:02:b1:0c:9d:8b:79:b1:9e:45:
4e:dd:4f:d0:2b:01:8a:36:f3:3c:bd:3c:dc:60:21:
e9:32:a4:5d:86:53:5c:56:10:4d:31:4f:b3:14:52:
e9:97:0e:e7:65:07:95:e0:1f:ea:67:3e:bc:58:89:
fd:20:b4:9e:d7:fc:7d:8a:93:9a:74:5c:97:65:bd:
c7:2e:ab:9c:fc:f4:37:e5:94:9b:c9:d2:94:5e:34:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:80:41:6B:A4:B9:C8:1B:59:F5:88:74:7B:81:ED:1B:8A:B0:25
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/FJGAQWukucgbWfWIdHuB7RuKsCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
9a:51:fa:b3:d7:2b:df:6d:96:da:b1:ec:aa:41:a5:c7:ff:ec:
92:ca:9e:f2:90:ac:0d:bd:06:1f:1f:c4:ee:a5:f1:ac:16:8e:
ef:c4:68:75:82:a0:0c:13:b8:8b:d9:c7:44:c9:d7:69:73:40:
be:2e:e0:12:10:34:91:1c:98:6a:89:7b:14:61:75:8b:a5:00:
4a:b8:07:b0:cf:ac:e8:51:ba:62:b7:9f:cb:ef:6b:b4:02:a4:
28:c9:bb:12:eb:45:3e:b4:de:35:71:57:03:3d:2b:bc:6b:3e:
d0:1d:5e:29:87:b7:be:ce:5b:4c:9e:25:2d:04:7b:4a:c6:59:
f0:7d:2c:22:06:ef:13:f9:fb:4f:51:e1:80:b9:6b:9e:43:4e:
9d:bc:db:b0:e1:0c:b0:03:87:d5:aa:2a:29:12:5d:76:94:7e:
09:66:66:cc:fa:12:77:42:3c:e0:f2:97:fb:61:c1:97:5b:24:
7a:67:e9:04:d3:c9:33:06:34:c4:26:7b:30:64:b4:c0:9d:0c:
e5:1c:e0:44:26:09:cd:23:e7:87:af:67:74:4b:7d:ee:81:32:
35:a4:0a:f4:a6:54:f4:75:a4:0e:98:8a:f2:20:c5:1a:68:fe:
1e:f6:68:ee:06:a8:34:62:54:ec:63:91:cb:2f:17:6e:31:97:
d5:91:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:21 2024 by rpki-client on console-ams.rpki-client.org