Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/fb9aF9mQtCBvKwFIJnRauWvLbLg.roa
File: fb9aF9mQtCBvKwFIJnRauWvLbLg.roa (raw, json)
Hash identifier: olZhEutK00SUBDopHKVZBCPyfYh3dJf5re+puavBrvc=
Subject key identifier: 7D:BF:5A:17:D9:90:B4:20:6F:2B:01:48:26:74:5A:B9:6B:CB:6C:B8
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 018CC7947A6EA28EF56F7E31C14EC9AF951D
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/fb9aF9mQtCBvKwFIJnRauWvLbLg.roa
Signing time: Tue 02 Jan 2024 00:30:45 +0000
ROA not before: Tue 02 Jan 2024 00:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206983
IP address blocks: 193.228.186.0/24 maxlen: 24
193.228.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:7a:6e:a2:8e:f5:6f:7e:31:c1:4e:c9:af:95:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Jan 2 00:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbf5a17d990b4206f2b014826745ab96bcb6cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:69:62:bd:0b:e9:1b:12:8b:55:e7:6e:6c:
83:c0:99:0a:6b:34:1f:02:95:22:9e:56:5e:d2:05:
ec:59:3d:5f:b9:df:7d:e9:a3:08:e6:d6:f6:b1:bc:
43:ae:cf:35:b2:17:db:22:ad:6d:43:d3:8f:45:5a:
98:68:2a:67:94:9f:b0:08:21:e7:99:7f:fe:bb:93:
3b:8c:2e:e6:65:dc:10:3a:fd:b6:8d:67:d1:cd:ee:
ba:1a:03:94:f3:c5:6a:00:75:83:74:3c:e2:13:f7:
85:f8:d8:73:c6:a2:e9:a6:c7:55:a1:5f:c7:b8:99:
38:a7:f1:88:5d:8c:e5:82:a3:bf:59:48:44:e8:be:
f0:b7:e3:2f:cb:b2:fd:4c:45:73:4d:cd:66:f0:b9:
8f:d2:ff:39:9c:a8:5a:b1:cf:9a:b0:41:af:a7:e7:
3d:c7:65:e1:f2:0f:6e:76:92:28:da:f8:63:f2:80:
27:37:7e:31:04:65:d2:a1:42:d6:70:8b:b2:36:35:
56:68:a8:bd:59:60:4d:27:4a:80:59:4d:43:e3:8e:
55:30:6d:d3:3a:1d:c4:1a:90:e0:6f:a8:ad:37:28:
49:e7:2f:b4:53:e8:02:b4:1b:45:02:e3:39:6d:31:
68:06:0a:62:2c:14:40:e0:1b:24:2b:8d:c6:76:6a:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:5A:17:D9:90:B4:20:6F:2B:01:48:26:74:5A:B9:6B:CB:6C:B8
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/fb9aF9mQtCBvKwFIJnRauWvLbLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.185.0-193.228.186.255
Signature Algorithm: sha256WithRSAEncryption
8b:2c:d0:3b:bd:bd:c3:76:64:39:82:e1:50:5f:10:dc:af:9f:
28:ba:f7:a3:16:f3:73:10:72:0c:2d:d8:d5:c5:92:8e:7f:a0:
e0:f4:81:15:ac:f8:b2:9a:ca:55:c0:aa:3c:b4:e1:a9:e5:23:
55:3f:d7:b2:c8:22:19:2f:a5:dd:06:c5:22:71:7c:8b:d2:c3:
53:f2:fc:ba:8e:22:8e:6e:8c:a0:88:09:e5:fb:ea:f0:69:05:
31:cd:cf:c4:18:43:3c:08:c1:c6:59:76:67:4b:5b:fd:7a:a1:
88:ae:2b:53:ae:fe:0e:2c:f1:c3:9b:18:66:d7:75:78:e6:49:
48:16:33:6c:fd:d7:1f:b6:0c:00:8a:fd:e8:e8:54:70:6f:b5:
5a:a9:68:47:4f:fd:7b:90:3b:4d:ed:2a:c6:de:34:4d:f6:e6:
00:5d:e6:08:63:bc:36:63:0f:f4:97:ef:42:bd:41:bd:87:61:
1e:c6:f5:a8:76:c1:b8:7b:7e:fa:13:60:6e:96:d3:c1:ae:9a:
f9:38:58:64:b9:6b:66:96:81:3d:30:dd:4b:12:ad:37:d4:62:
75:85:a6:a5:9c:c7:89:f5:d9:84:29:2c:2f:fa:22:bc:35:ca:
bf:77:72:3a:50:ea:5d:17:8c:6f:3c:82:10:87:a1:6e:30:53:
76:4c:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:35 2024 by rpki-client on console-fra.rpki-client.org