Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/Fyd1iSkWIKSYrc8LbgZvIEh7FTA.roa
File: Fyd1iSkWIKSYrc8LbgZvIEh7FTA.roa (raw, json)
Hash identifier: rW4v6N0TuiiRYB30peeVZlHzMNo2UxTxA8bz+HoImJs=
Subject key identifier: 17:27:75:89:29:16:20:A4:98:AD:CF:0B:6E:06:6F:20:48:7B:15:30
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 01932B448153604C2ED1C2AD88321B1E99B9
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/Fyd1iSkWIKSYrc8LbgZvIEh7FTA.roa
Signing time: Thu 14 Nov 2024 15:22:09 +0000
ROA not before: Thu 14 Nov 2024 15:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197068
IP address blocks: 195.43.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:44:81:53:60:4c:2e:d1:c2:ad:88:32:1b:1e:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Nov 14 15:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17277589291620a498adcf0b6e066f20487b1530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:77:9e:9f:4e:ea:81:da:fa:d6:66:43:85:
58:91:1d:df:fd:d6:51:aa:cc:8c:41:ed:9a:00:b1:
49:10:16:b2:81:0c:b5:60:e1:af:c3:c3:98:fb:24:
30:57:86:b0:12:0f:c5:0e:43:48:34:35:d2:df:df:
76:11:3f:a2:a2:02:17:db:fe:94:c7:26:fd:4e:74:
55:e9:6c:86:2e:6d:cd:ae:ea:6d:64:d5:2d:b9:61:
c6:11:a3:cc:da:1a:b8:98:a9:9a:37:86:41:01:3c:
d4:95:ac:cd:71:3c:a3:7e:f6:b9:96:98:a8:1a:34:
b2:73:03:e9:7f:f6:e5:3a:4a:76:ba:61:55:22:77:
28:4b:6e:b8:19:2c:0e:01:e2:c4:ee:37:21:05:ef:
06:a7:36:d8:b7:2e:f3:55:89:82:e8:f4:19:86:ae:
89:c2:89:c3:7f:22:d7:9f:d5:00:0e:f4:ff:12:35:
c1:9b:1c:0f:8f:50:41:59:bc:4c:e2:9c:d0:7f:c6:
12:a1:74:da:ec:c9:26:66:5f:e5:f0:25:31:e6:35:
88:2b:e3:c2:3c:e2:f8:cd:da:9f:72:f8:07:07:b6:
00:89:5e:26:86:9d:69:eb:a9:f8:4b:84:0c:e0:07:
82:1d:96:40:1b:19:2a:5d:d9:df:9d:66:f7:8f:e9:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:75:89:29:16:20:A4:98:AD:CF:0B:6E:06:6F:20:48:7B:15:30
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/Fyd1iSkWIKSYrc8LbgZvIEh7FTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:79:e0:36:6c:9d:d9:1f:5a:21:42:47:a8:64:d2:a6:a9:64:
5f:ed:72:94:a4:5c:d9:d6:21:11:2b:57:c7:c3:29:5c:20:d5:
7d:ab:d8:6c:f5:67:27:ca:a8:87:0b:14:5c:3d:25:c6:a4:bd:
49:4c:98:38:71:b9:ac:7f:99:26:80:cc:2a:cf:bc:73:dd:b7:
83:fe:2a:65:81:de:2d:c5:a2:9e:41:5a:ca:db:c1:99:c9:d2:
31:6e:6c:b9:b9:eb:e0:a5:71:e9:26:1f:6a:0c:27:ff:c5:ac:
c0:83:a1:3a:48:9a:2a:64:e3:d9:aa:55:24:22:3f:5f:08:4b:
fb:ed:08:69:05:49:1d:c7:91:86:7f:42:d7:e9:ab:cd:b5:6b:
84:b8:05:f2:0d:d0:f2:a7:82:60:97:49:2e:9f:c7:43:4e:7d:
9a:24:34:d4:30:29:b1:01:ee:e0:54:f3:de:6c:1d:64:d8:2a:
f0:04:08:d3:15:2d:d7:c5:3f:e6:11:ea:3b:30:33:de:e7:c0:
d4:72:d7:d9:dc:c2:fd:65:02:e9:fc:5d:1e:3a:04:75:0e:30:
7b:ad:ae:8d:d5:31:e3:35:89:3d:e5:90:43:15:cf:c7:d1:bf:
9e:29:11:80:12:c8:9f:bc:ff:b2:da:b7:46:df:0f:fa:33:ca:
fe:c1:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:59 2024 by rpki-client on console-ams.rpki-client.org