Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/Fw0GP7pgzQxJBoLlMw7E-oEpq0I.roa
File: Fw0GP7pgzQxJBoLlMw7E-oEpq0I.roa (raw, json)
Hash identifier: ihTMNHlXsFz1Ejm+9h705A0QPTNM1/X8Ts6EzsyyKIo=
Subject key identifier: 17:0D:06:3F:BA:60:CD:0C:49:06:82:E5:33:0E:C4:FA:81:29:AB:42
Certificate issuer: /CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Certificate serial: 018CC9BCA561FB895FF0DCD832BA9B2592DE
Authority key identifier: 6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/Fw0GP7pgzQxJBoLlMw7E-oEpq0I.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61045
IP address blocks: 188.93.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a5:61:fb:89:5f:f0:dc:d8:32:ba:9b:25:92:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7fa05e6b4d8a51294407504d9641ad3e02043f
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=170d063fba60cd0c490682e5330ec4fa8129ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:7f:22:e7:81:2f:63:f0:64:0f:66:e6:ae:
8d:83:88:22:69:38:0e:3a:0a:bd:d7:37:f2:6d:c0:
f8:33:4e:de:92:83:65:d6:f2:d7:fa:2a:d9:b3:88:
f1:7a:21:4d:c1:c2:52:38:51:72:52:56:2a:50:1e:
96:02:00:0e:f2:36:63:fb:53:ff:e5:33:43:7d:18:
ef:85:88:f2:7c:fa:5c:91:ed:c7:76:7d:39:35:19:
be:54:a9:01:69:fb:7b:6d:b1:25:81:af:80:2f:e4:
07:f4:e7:57:db:a4:4b:fd:5c:93:f3:24:0c:a9:12:
25:d1:e7:3b:48:84:e0:79:f3:24:a0:60:30:58:2b:
99:a6:d8:0a:45:db:94:27:59:a4:76:15:1c:47:a1:
b4:dc:fc:31:7c:97:40:d6:a6:4f:14:08:05:08:b8:
ca:b6:e6:58:91:08:11:20:22:80:80:47:03:7c:10:
25:a9:e4:8e:24:10:9d:f7:09:9b:28:d1:de:a7:ad:
e4:03:fc:39:5c:49:b4:5b:03:ab:ef:46:66:c8:11:
48:78:40:fb:92:68:3c:cd:45:f9:b6:d5:42:04:4f:
91:dc:47:e8:db:d1:73:e4:88:ed:41:00:84:19:5d:
05:36:ed:c3:09:ec:9c:56:94:1f:ba:85:4a:37:85:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0D:06:3F:BA:60:CD:0C:49:06:82:E5:33:0E:C4:FA:81:29:AB:42
X509v3 Authority Key Identifier:
keyid:6B:7F:A0:5E:6B:4D:8A:51:29:44:07:50:4D:96:41:AD:3E:02:04:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3-gXmtNilEpRAdQTZZBrT4CBD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/Fw0GP7pgzQxJBoLlMw7E-oEpq0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/983abd-3488-4c6e-ad88-8b1cfb68366e/1/a3-gXmtNilEpRAdQTZZBrT4CBD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.113.0/24
Signature Algorithm: sha256WithRSAEncryption
58:be:07:bc:2d:71:be:12:aa:ad:1c:9e:79:8d:05:e5:8f:53:
fc:bd:dd:29:fe:e9:b4:89:a9:21:c0:fd:c8:b0:d4:5d:f9:0a:
1e:df:7d:dd:ce:46:1e:2e:20:f6:01:03:5d:99:34:83:58:2e:
71:d8:3a:ae:20:7e:94:e1:30:74:5d:8b:f4:44:1a:92:8d:14:
d5:3d:39:b1:b9:07:f0:6f:b0:33:c6:6e:8c:9f:af:7b:72:5c:
71:3f:13:dd:64:26:cc:eb:1f:a9:bf:60:a6:cd:24:3b:2f:82:
f4:2c:51:f6:a1:85:07:e5:0a:d6:c0:0c:47:f8:b8:d6:e2:c4:
cc:e8:14:4b:48:8f:0c:dc:d5:5e:81:4f:01:d9:69:73:4b:66:
8d:9b:96:94:10:ab:15:7b:77:00:82:e4:d3:e2:4b:ef:d8:4d:
a7:98:80:40:26:75:4d:98:64:00:ae:2b:2b:d8:28:b7:5a:8c:
90:af:36:6c:24:b5:bc:bc:b8:1d:b5:09:3a:42:7c:90:7f:c7:
30:a7:24:3e:17:82:65:da:00:5d:da:01:48:3f:4e:9a:9a:58:
75:d0:37:c9:0f:8e:bc:fd:ae:0e:39:ac:ae:07:09:c5:32:8c:
75:a7:a1:1a:79:ec:41:78:c6:b2:7f:ad:60:9d:55:ff:bc:bb:
ba:42:4f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:34:11 2024 by rpki-client on console-ams.rpki-client.org