Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/fx7YVfJqD_6ZDaAI3zuBMUHBD7Y.roa
File: fx7YVfJqD_6ZDaAI3zuBMUHBD7Y.roa (raw, json)
Hash identifier: BfTuygQ3gH3wMmUoTQu89dJnP3h4d99ImYF9HjOhNN8=
Subject key identifier: 7F:1E:D8:55:F2:6A:0F:FE:99:0D:A0:08:DF:3B:81:31:41:C1:0F:B6
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 018CC2DB5B35FEE85458D1DFCAA295C5AEEE
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/fx7YVfJqD_6ZDaAI3zuBMUHBD7Y.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25180
IP address blocks: 195.149.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5b:35:fe:e8:54:58:d1:df:ca:a2:95:c5:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f1ed855f26a0ffe990da008df3b813141c10fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:8f:e9:48:a8:33:c9:b3:a4:cc:8a:e9:06:
16:1d:07:44:ad:56:58:85:cb:b3:e5:1d:b4:35:fe:
5a:cf:ec:3d:d3:30:cb:e7:ef:87:37:7a:e8:d1:4c:
9e:5f:92:ed:11:75:35:e4:8a:b9:a6:f9:fb:1c:e0:
22:02:c7:e6:34:26:44:6d:1b:2d:85:32:10:dc:ea:
c9:20:b2:3e:2b:80:d4:c9:43:b2:9d:67:19:b9:a4:
ea:9d:fa:ac:25:ce:9c:07:eb:34:32:6a:4d:1c:1f:
22:28:10:43:1c:b5:62:68:09:79:5e:ee:b3:17:84:
77:b4:6c:f3:37:6d:cf:77:38:18:43:05:4f:03:df:
6b:04:ae:a7:39:27:00:8c:6e:46:30:92:21:1b:9d:
84:70:f7:f7:7c:f7:44:0a:df:b6:17:b4:58:54:88:
be:af:14:cc:ee:17:29:8a:5f:0a:78:58:8c:b3:5c:
75:0f:c6:fe:6d:c1:9a:d7:ae:f6:1e:de:14:43:bd:
9e:cf:3f:b9:dd:da:c0:b2:64:3c:f7:5c:89:4f:83:
aa:1b:5f:5b:31:38:1f:67:34:12:62:08:99:9e:88:
d8:1e:55:52:e2:5c:63:e7:8a:46:ae:27:f9:f8:63:
9a:06:ed:8c:1e:2e:2c:dc:58:70:de:f7:bb:6f:1b:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:D8:55:F2:6A:0F:FE:99:0D:A0:08:DF:3B:81:31:41:C1:0F:B6
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/fx7YVfJqD_6ZDaAI3zuBMUHBD7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:74:94:a8:b8:f9:84:4e:c4:03:1e:e5:a7:7d:40:56:74:7d:
7c:0a:b7:11:3b:4a:51:36:f6:36:4d:b0:91:10:1c:37:e0:5e:
bf:f8:a4:47:35:1d:e2:20:8d:f4:80:ea:03:28:f6:55:f2:9b:
41:53:99:fa:23:6a:8b:06:61:d4:90:50:64:0d:c7:e3:f1:34:
3b:13:f1:fb:c5:84:23:d8:15:8c:5e:fe:74:f8:18:60:b9:00:
64:53:02:34:12:5f:44:5e:e4:3d:2d:9b:16:ef:77:55:86:26:
43:22:06:9e:61:13:94:c9:d9:b2:c9:45:64:6d:c7:4c:48:a7:
b5:f7:7d:ea:d5:1f:7a:1b:b6:a5:46:2b:71:98:b4:09:61:a0:
01:95:69:94:27:8c:96:3b:52:d9:b7:4a:c7:1f:b4:db:1d:ac:
a0:f5:29:ce:97:d5:33:b3:08:fe:12:49:64:64:e9:61:f2:6f:
3f:72:13:e1:f4:cb:fc:49:9c:d5:32:95:b0:ed:04:fb:73:ca:
9e:eb:85:b7:7d:ba:b7:83:b4:0c:a7:b1:56:9a:24:a5:fa:a3:
6c:ee:5c:20:e1:ea:76:9e:29:ab:79:56:52:cb:5b:b7:62:51:
1f:7d:4c:a3:91:9e:f2:59:17:ba:05:de:f1:ac:e0:17:dc:39:
60:e2:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:31:39 2024 by rpki-client on console-ams.rpki-client.org