Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FXGCX9i4edzdvNFgGGSrcNoEyTU.roa
File: FXGCX9i4edzdvNFgGGSrcNoEyTU.roa (raw, json)
Hash identifier: ht4kJr7jjbpVRXkHVDUnGHyd2EdNT/L4hqKAWu4pjf8=
Subject key identifier: 15:71:82:5F:D8:B8:79:DC:DD:BC:D1:60:18:64:AB:70:DA:04:C9:35
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E190962F8572E9CD614E18E8C81E6
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FXGCX9i4edzdvNFgGGSrcNoEyTU.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207136
IP address blocks: 94.198.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:19:09:62:f8:57:2e:9c:d6:14:e1:8e:8c:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1571825fd8b879dcddbcd1601864ab70da04c935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:6f:83:16:1f:e9:65:8f:68:98:cb:3f:8e:
80:4b:57:0b:ac:64:0e:a1:c3:4b:72:c4:d9:8d:7a:
e5:b6:28:b8:bf:d8:22:60:f2:8c:85:95:9b:0e:49:
19:55:38:46:94:92:9a:2b:9c:38:06:86:64:f6:c3:
4f:26:64:b7:60:66:b0:8a:8c:89:b4:bb:0e:0b:db:
df:eb:56:02:b6:35:ae:6b:ae:84:5a:b1:e3:d2:72:
16:c2:ec:92:b2:07:de:2d:3c:d0:05:37:73:66:cf:
15:02:1d:d2:df:87:cc:94:e5:40:7b:7b:e1:b2:fa:
94:46:2a:98:bf:a7:fc:ca:0c:ad:e2:00:5c:0d:b9:
eb:04:bd:d2:15:7a:32:5f:a0:7b:89:0f:71:bb:46:
f4:a7:df:3e:15:53:ed:77:72:ce:4c:34:68:dc:dc:
e7:0d:15:9a:f8:4c:74:95:5a:90:71:64:93:b9:38:
00:2b:01:f6:c5:ca:a1:40:d8:fe:06:80:7d:19:fb:
99:21:c3:d6:57:f7:01:d1:79:f8:62:d2:41:67:4c:
e8:42:43:79:11:ca:f6:88:b1:48:d6:95:b8:29:3b:
da:43:7e:ad:27:2e:8f:b8:5c:73:5b:32:ba:d4:53:
99:ce:c8:4c:28:66:0f:f7:35:8b:c3:1d:00:4f:23:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:82:5F:D8:B8:79:DC:DD:BC:D1:60:18:64:AB:70:DA:04:C9:35
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FXGCX9i4edzdvNFgGGSrcNoEyTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.44.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1c:70:8c:9c:b4:85:d0:6b:8a:3f:00:80:77:1b:22:dc:4a:
44:21:2d:66:83:e2:6f:be:85:0f:7e:ff:c7:ff:8a:46:c5:38:
f8:9d:9b:1b:38:6a:0e:65:bc:9c:76:d5:4b:91:f6:09:0b:a0:
10:2b:f5:c6:73:a3:57:8e:29:c6:26:42:fd:b7:9c:34:12:a4:
36:19:90:cd:fa:a9:f7:8c:5a:ba:5e:5a:b6:61:3b:f2:fd:be:
e7:62:0f:77:45:5f:b0:68:bf:4e:ad:7a:f0:89:fe:68:a4:37:
d1:56:8a:27:a7:62:74:e2:be:5c:a5:c5:28:34:21:69:d7:fc:
26:6f:2f:5b:d4:77:35:d0:0e:b8:d7:f4:e3:59:ee:bc:63:9c:
84:18:92:7d:ec:4b:93:dd:7f:08:d5:3f:fa:19:1f:2e:dd:82:
5b:a7:94:d3:af:ce:62:f4:3b:b0:c8:99:c6:b0:ab:61:b2:87:
fb:de:ae:4b:98:42:24:35:f6:6b:84:7e:43:03:42:06:4c:64:
cb:91:55:91:be:49:b9:1e:07:ce:4c:c4:bb:8b:86:0a:80:f3:
38:15:32:8a:f3:21:39:79:a3:db:5d:19:37:53:d2:54:cf:7f:
53:b1:94:13:65:53:98:fd:d6:8d:02:fc:c0:ca:0e:9e:ae:df:
ff:f0:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:08:25 2024 by rpki-client on console-ams.rpki-client.org