Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/FHe9rpCRTWJDYSpdYwNzlO9cp9M.roa
File: FHe9rpCRTWJDYSpdYwNzlO9cp9M.roa (raw, json)
Hash identifier: 1iTgN/CBjuvhhAw/Zae5augb1xDKVpaSvynLbYaZMmg=
Subject key identifier: 14:77:BD:AE:90:91:4D:62:43:61:2A:5D:63:03:73:94:EF:5C:A7:D3
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 018CC8DF11E598E9DB78AFA3C94BC6836B3A
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/FHe9rpCRTWJDYSpdYwNzlO9cp9M.roa
Signing time: Tue 02 Jan 2024 06:31:51 +0000
ROA not before: Tue 02 Jan 2024 06:31:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15525
IP address blocks: 192.188.10.0/24 maxlen: 24
193.236.121.0/24 maxlen: 24
193.236.123.0/24 maxlen: 24
193.236.120.0/24 maxlen: 24
193.236.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:11:e5:98:e9:db:78:af:a3:c9:4b:c6:83:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Jan 2 06:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1477bdae90914d6243612a5d63037394ef5ca7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:57:d9:27:2c:7e:5e:3c:6d:7e:27:63:c7:
2e:71:6a:e8:5d:83:be:2b:ed:ce:d6:6b:f4:d3:04:
5c:2d:b4:e9:14:2a:cb:29:8e:09:7e:88:05:fd:7b:
74:e9:cd:84:09:5c:11:5f:f5:52:2b:3b:5a:f3:e5:
ae:ac:b7:fd:88:a0:ec:5a:49:e6:f6:f7:40:8e:f0:
c0:9f:42:8d:09:91:e7:6c:e2:b9:f4:ee:39:f1:e9:
7d:8f:e6:82:6b:01:dd:f6:25:b8:24:a4:fd:50:cc:
81:09:2b:f3:06:b9:67:15:0e:36:c1:f8:61:73:93:
66:a6:71:b5:24:ba:a1:67:70:74:cc:8d:f9:16:a6:
f7:1b:0b:2d:2f:96:59:77:58:18:29:31:36:3e:d2:
8c:cd:2b:79:3c:58:47:5d:e6:06:ab:5c:6e:ce:6d:
36:30:ce:35:29:12:29:8d:76:64:3b:ca:b6:62:11:
d8:6f:07:7c:f1:30:1e:f2:c4:33:42:86:20:59:87:
35:81:6b:ae:45:73:33:84:bf:ea:a9:7e:e2:bb:7e:
24:2f:f2:5b:e9:61:7f:28:8b:e6:1c:33:e9:99:c5:
d4:7d:59:30:21:82:d2:7f:0f:19:d7:cf:94:2b:a1:
bc:01:b3:09:4f:3f:a7:b8:10:d9:27:cc:40:a3:3b:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:BD:AE:90:91:4D:62:43:61:2A:5D:63:03:73:94:EF:5C:A7:D3
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/FHe9rpCRTWJDYSpdYwNzlO9cp9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.10.0/24
193.236.120.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:69:d7:5a:81:5e:8c:e9:2a:87:41:60:0b:3c:bd:09:ca:25:
34:36:9b:10:9a:96:3e:7e:43:97:fb:dd:c0:dc:56:6d:f1:37:
b8:b6:28:e8:0f:c9:4d:dd:74:01:dd:9c:2f:50:d2:92:1a:63:
4c:b9:f7:3a:d2:f0:c3:57:dc:90:57:8c:f6:0b:c2:ec:62:c3:
39:c8:1c:86:a2:47:fd:ab:6d:88:b1:f3:ff:ed:bc:e7:10:9e:
d5:a7:d6:cb:8a:95:6e:24:2f:63:b9:92:0c:27:32:2e:63:cb:
0b:09:75:f5:f0:3b:61:c3:cf:46:ca:7e:72:a3:f1:20:74:fa:
25:af:e0:81:4c:c7:87:7f:68:df:13:40:0e:50:11:10:09:ee:
e7:a4:99:66:04:0d:8b:30:64:cc:31:0d:cd:ed:5d:20:0b:d0:
21:ab:24:f5:20:11:63:9d:a0:6c:e4:58:da:1b:c6:0f:56:7a:
ed:64:d4:36:1b:60:06:19:3f:58:12:58:f1:83:38:5b:ea:c8:
98:e8:d1:49:f1:08:e5:72:c0:79:6b:0a:ac:a8:ec:96:31:96:
4e:14:37:92:00:26:cd:16:20:40:de:8f:ad:8d:88:71:d0:42:
56:a8:09:8c:81:98:a4:14:52:a2:7a:6e:38:7c:f1:eb:11:6e:
4f:ed:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:41:26 2024 by rpki-client on console-ams.rpki-client.org