Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/FGsrFdvbGIDOAaUa5SP7Rkoy1jk.roa
File: FGsrFdvbGIDOAaUa5SP7Rkoy1jk.roa (raw, json)
Hash identifier: MOCAZ/ifaUCNd8a2OXxGVgW0FYrtcfXG0dctHGyr1uo=
Subject key identifier: 14:6B:2B:15:DB:DB:18:80:CE:01:A5:1A:E5:23:FB:46:4A:32:D6:39
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 018CC2DAC85B5C49FFD891EF265E30EF4277
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/FGsrFdvbGIDOAaUa5SP7Rkoy1jk.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31034
IP address blocks: 185.8.196.0/22 maxlen: 24
83.136.104.0/21 maxlen: 24
94.198.96.0/21 maxlen: 24
95.141.32.0/20 maxlen: 24
94.198.101.0/24 maxlen: 24
158.58.172.0/23 maxlen: 24
158.58.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c8:5b:5c:49:ff:d8:91:ef:26:5e:30:ef:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=146b2b15dbdb1880ce01a51ae523fb464a32d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:c2:20:85:b4:8a:b2:a8:45:76:99:26:f7:
30:43:1a:da:e3:74:36:da:e0:c1:97:83:29:ff:d0:
c7:48:7a:2f:ca:30:aa:87:4d:1d:24:c2:cd:5c:09:
29:15:48:69:6d:df:dd:33:cd:99:b0:2a:06:eb:d9:
fe:9d:eb:14:48:d1:77:3d:53:a7:f5:eb:75:d3:75:
ee:11:d0:1f:e9:c4:1c:b9:48:44:a5:bf:3e:d9:bb:
1b:42:a6:f1:29:27:86:c2:a4:9a:7c:8d:46:05:9c:
e6:8b:b4:a5:92:8f:32:c7:2c:19:b3:7c:66:f4:e5:
2e:f2:5a:8b:12:2e:33:06:2e:d6:98:08:bf:98:5f:
d9:43:a3:74:42:40:98:26:69:ec:cc:d9:5b:69:c1:
15:94:6c:2d:79:d8:cd:d1:05:83:da:eb:a6:b5:54:
b4:67:a6:c7:e6:b3:44:f6:f5:b7:44:be:5b:cc:5e:
25:57:22:b4:3a:f7:ea:ee:66:1e:1a:b9:ae:38:58:
b0:80:7a:66:68:28:82:2e:71:a4:ad:05:7e:1a:bb:
93:10:06:c4:86:7f:40:c1:02:62:c5:05:75:23:d9:
64:6a:60:fc:d5:6e:e6:91:d8:c6:14:87:86:f7:96:
e9:10:5e:5a:b6:94:a1:38:41:81:36:25:a2:3e:b9:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:2B:15:DB:DB:18:80:CE:01:A5:1A:E5:23:FB:46:4A:32:D6:39
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/FGsrFdvbGIDOAaUa5SP7Rkoy1jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.104.0/21
94.198.96.0/21
95.141.32.0/20
158.58.168.0/21
185.8.196.0/22
Signature Algorithm: sha256WithRSAEncryption
20:5f:4a:a2:f6:f0:84:8e:2c:3a:6a:a6:bd:b5:4d:75:af:7b:
ae:1a:fd:66:3d:dc:2e:2f:da:51:bf:af:2f:71:1c:01:a0:4a:
8c:12:66:1b:68:d6:6c:16:be:3c:41:b4:52:a1:86:5a:f3:e3:
c2:e0:0a:ad:41:90:be:f2:1f:13:f4:4f:b9:ce:0b:c5:5c:17:
01:a4:d1:34:67:ec:17:f2:b2:93:8a:96:59:63:55:72:65:ab:
d6:44:04:47:9f:11:08:c7:a3:30:ed:fb:83:0c:68:27:39:de:
24:08:0d:21:3f:80:2c:d3:cd:e4:b2:26:74:27:ba:fe:5c:b5:
ec:66:bc:b5:cb:2f:d1:bb:01:b1:1e:23:73:f6:40:19:68:ef:
a1:46:9f:51:b0:c3:80:30:0c:0e:8c:5d:98:9b:8b:99:27:fd:
c1:34:ac:80:8d:cd:29:d6:7d:e3:ca:93:9b:a1:eb:5a:bc:32:
2a:24:fe:0c:e3:17:cb:5c:66:57:f5:ef:d3:0c:63:61:0c:ef:
50:f4:1e:fe:0a:1a:bf:8d:0c:c3:f1:b1:42:0e:f9:6b:51:b3:
44:6d:52:9d:94:c5:19:09:f8:09:ee:34:cb:49:56:85:02:05:
32:2d:c7:7a:3e:92:2c:79:4e:4e:08:ca:14:46:eb:72:d6:7a:
9c:08:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:11 2024 by rpki-client on console-fra.rpki-client.org