Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/fnWwyg1ce6fF4Ck6cI51IG_o4XI.roa
File: fnWwyg1ce6fF4Ck6cI51IG_o4XI.roa (raw, json)
Hash identifier: l2eXj3cGIkSMk7j9xZeKIP4fBSQc1wTxOp5RoqNmc0E=
Subject key identifier: 7E:75:B0:CA:0D:5C:7B:A7:C5:E0:29:3A:70:8E:75:20:6F:E8:E1:72
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 018CC8DF4E4C827AC27A993B8AC26C5FB6E8
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/fnWwyg1ce6fF4Ck6cI51IG_o4XI.roa
Signing time: Tue 02 Jan 2024 06:32:06 +0000
ROA not before: Tue 02 Jan 2024 06:32:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14907
IP address blocks: 195.200.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:4e:4c:82:7a:c2:7a:99:3b:8a:c2:6c:5f:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Jan 2 06:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e75b0ca0d5c7ba7c5e0293a708e75206fe8e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:0c:43:eb:e9:6f:9a:df:67:c2:d8:84:1d:
89:25:80:a9:d6:e9:40:02:0d:39:86:f6:35:56:16:
18:06:ed:82:ad:bb:63:a8:86:16:fb:18:4b:c8:22:
bc:f6:6d:6d:25:0e:9c:ee:5d:1d:18:59:30:44:1b:
fe:af:3a:ee:1e:fb:68:c4:6f:b3:9b:b3:d5:56:78:
eb:71:24:89:f8:a0:fa:c0:63:7d:e4:9e:70:99:ed:
93:d3:ee:c5:a0:bd:32:a6:cb:e2:ed:7e:c0:db:5c:
17:47:eb:18:48:da:f2:1f:62:50:54:c0:14:96:c9:
ee:86:66:da:f0:26:c0:40:f1:26:84:bb:17:41:db:
6d:14:f8:53:e2:4b:37:cb:0c:05:fe:2e:11:49:28:
e7:94:d9:e8:ec:cb:30:2d:cb:da:af:33:b0:5b:d0:
c2:3f:9e:d5:45:dd:c1:ad:f3:d4:34:a3:75:99:10:
3a:89:61:fc:c7:41:5e:8c:0c:f5:fe:47:0c:93:5b:
6f:84:29:18:61:a9:0d:a9:27:6b:da:b5:7c:65:76:
44:c2:b1:31:f5:b1:b1:39:af:97:20:10:13:6b:15:
20:15:91:48:1f:31:72:9b:cb:05:70:2c:75:a9:eb:
6f:51:e9:66:79:cf:a0:aa:19:e6:21:f7:71:41:34:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:B0:CA:0D:5C:7B:A7:C5:E0:29:3A:70:8E:75:20:6F:E8:E1:72
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/fnWwyg1ce6fF4Ck6cI51IG_o4XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:33:b6:ba:ac:e4:50:41:52:ad:77:a3:41:3a:39:b5:77:ce:
1d:79:2a:f6:92:db:a4:b6:62:29:43:df:e9:e3:95:7b:a0:8d:
9b:43:d7:0a:50:8f:d4:3b:e8:62:19:12:b9:50:3f:bf:2e:47:
bf:ad:75:57:1f:cf:6e:80:30:65:5f:72:22:3f:64:1c:84:ee:
d2:7c:58:72:4e:42:8e:40:fd:17:7f:ed:9b:b9:91:33:93:88:
0f:e4:e0:54:05:51:47:85:d6:25:1a:37:e7:46:09:0a:54:4c:
2c:57:5f:7e:15:e0:11:e1:c4:35:c2:24:23:ea:f8:98:f6:8d:
19:de:77:1c:8a:20:e4:2e:df:b2:c5:3c:05:60:7e:72:91:d7:
8c:12:45:33:10:e6:91:66:c2:1e:96:a2:7c:95:fc:7d:35:17:
be:58:36:51:d7:07:82:88:89:1c:84:10:bf:e7:ab:73:68:e2:
c4:5e:4e:58:8b:d5:2b:72:67:67:b0:c1:cb:3b:6a:94:f3:11:
d7:1f:4d:79:b2:80:a4:1f:6b:f0:2b:e3:bc:58:e9:79:f7:7c:
27:09:d3:b6:2d:a2:e5:e9:1a:fe:b6:5b:87:ae:7e:a3:06:71:
e6:97:96:f1:28:d9:1e:89:62:29:c8:96:0c:ff:3b:da:fb:35:
a1:ae:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:38:29 2024 by rpki-client on console-ams.rpki-client.org