Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/FNSTOEK2he45M-KGg2M7gj_gkj0.roa
File: FNSTOEK2he45M-KGg2M7gj_gkj0.roa (raw, json)
Hash identifier: OuK87egS2Bt2hFCqZv0LLr3PuwE6qQpyXYNv0J8ToRA=
Subject key identifier: 14:D4:93:38:42:B6:85:EE:39:33:E2:86:83:63:3B:82:3F:E0:92:3D
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 018CC4938E8D6174460CAC8C9EA04477F87D
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/FNSTOEK2he45M-KGg2M7gj_gkj0.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 91.234.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8e:8d:61:74:46:0c:ac:8c:9e:a0:44:77:f8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d4933842b685ee3933e28683633b823fe0923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:df:b0:10:2f:7f:d8:13:17:0a:9a:98:b0:
92:5c:5e:37:c5:bc:0c:9c:4e:47:64:cd:5f:d9:66:
7b:d8:06:0b:e0:05:12:e6:0f:05:5b:09:e0:8a:61:
9e:10:73:47:bb:21:83:0a:9f:a0:48:3d:f1:4f:01:
31:df:f7:68:fe:cf:dc:50:00:0e:6b:2a:ee:8e:77:
3c:7a:87:2e:c5:47:77:79:0d:2e:5c:34:17:87:d7:
b1:e8:ef:d4:ac:d9:8d:17:28:f7:59:ae:6e:58:3a:
80:2e:f5:6a:19:b7:aa:5d:a8:4b:1f:3e:f2:e9:d2:
9d:b1:88:cb:9b:f0:5e:7b:34:af:1c:7b:38:61:2f:
2f:60:6d:5d:d4:40:10:ca:74:e5:a3:6c:37:8a:b7:
ce:e4:1a:86:ea:78:8c:ee:b1:38:f8:cd:fd:ca:fb:
a4:df:9c:9a:03:6d:91:40:9d:1c:9b:66:e3:9e:d9:
d1:cb:f7:5b:76:11:46:c0:cd:cb:f4:7e:fa:9b:ad:
f2:f0:e8:19:81:dd:09:2e:ec:0d:fa:db:58:2d:c4:
33:c0:c5:57:5a:bb:0d:52:55:b0:14:19:c5:ee:32:
03:07:28:f0:a7:f7:1f:71:9b:a9:cd:1a:d9:f5:83:
63:e9:26:e6:cf:36:d2:70:c7:68:d4:31:0c:87:f4:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:93:38:42:B6:85:EE:39:33:E2:86:83:63:3B:82:3F:E0:92:3D
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/FNSTOEK2he45M-KGg2M7gj_gkj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b9:fd:c0:47:ef:b7:5d:67:97:78:4e:4f:56:34:20:0c:33:
6a:4f:90:67:8a:77:b0:38:0b:dd:b8:1b:61:50:7a:fb:94:ef:
b4:b9:9b:60:31:ab:40:b5:24:c8:94:20:ba:6e:e0:ea:26:80:
e0:ac:ad:13:13:02:03:9a:1e:98:77:57:ca:79:7d:69:48:72:
2e:c3:7b:18:6d:2a:ec:6d:92:ad:9f:b7:24:13:8b:94:89:7b:
14:a7:fc:94:f3:bf:d3:d6:22:9e:93:cf:7e:e3:dc:6a:a8:62:
bb:d1:b5:95:6b:e0:c2:51:36:4f:38:34:f1:ac:8e:13:ea:83:
cd:c9:e1:bd:90:77:86:2a:eb:21:16:52:90:5e:ff:2b:8f:2b:
1f:ec:f5:ee:0e:16:e3:2f:8d:9a:a1:e1:90:fd:08:48:a7:3b:
ad:f1:aa:d5:01:7d:4f:60:5a:d1:8c:bb:25:c3:36:f4:c8:36:
c7:81:0f:94:f1:ba:15:c1:0d:c8:63:71:9f:cb:f0:7d:04:ec:
a3:c9:a6:c4:62:3a:03:ac:cb:52:98:95:68:0a:7e:de:d1:f5:
7d:f8:d4:f2:37:94:3d:ad:6f:fa:a5:25:b7:e6:71:64:ed:11:
3d:b6:7d:26:df:04:33:f7:04:45:64:7d:56:de:ce:96:9c:08:
51:c0:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:21:23 2024 by rpki-client on console-ams.rpki-client.org