Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fxAKV33SlYEGz-2uq2ECopG5rWU.roa
File: fxAKV33SlYEGz-2uq2ECopG5rWU.roa (raw, json)
Hash identifier: 4S8vZFhv2ShNS1suWYh+dNB+vvW37sFUo2A+zEHQsLk=
Subject key identifier: 7F:10:0A:57:7D:D2:95:81:06:CF:ED:AE:AB:61:02:A2:91:B9:AD:65
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019350A598A6DF5761A709738709E7C8BCD7
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fxAKV33SlYEGz-2uq2ECopG5rWU.roa
Signing time: Thu 21 Nov 2024 21:34:09 +0000
ROA not before: Thu 21 Nov 2024 21:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 103.83.87.0/24 maxlen: 24
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a14:4080::/32 maxlen: 32
2a14:4081::/32 maxlen: 32
2a14:4082::/32 maxlen: 32
2a14:4083::/32 maxlen: 32
2a14:4084::/32 maxlen: 32
2a14:4085::/32 maxlen: 32
2a14:4086::/32 maxlen: 32
2a14:4087::/32 maxlen: 32
2a14:4380::/32 maxlen: 32
2a14:4381::/32 maxlen: 32
2a14:4382::/32 maxlen: 32
2a14:4383::/32 maxlen: 32
2a14:4384::/32 maxlen: 32
2a14:4385::/32 maxlen: 32
2a14:4386::/32 maxlen: 32
2a14:4387::/32 maxlen: 32
2a14:4480::/32 maxlen: 32
2a14:4481::/32 maxlen: 32
2a14:4482::/32 maxlen: 32
2a14:4483::/32 maxlen: 32
2a14:4484::/32 maxlen: 32
2a14:4485::/32 maxlen: 32
2a14:4486::/32 maxlen: 32
2a14:4487::/32 maxlen: 32
2a14:4980::/32 maxlen: 32
2a14:4981::/32 maxlen: 32
2a14:4982::/32 maxlen: 32
2a14:4983::/32 maxlen: 32
2a14:4984::/32 maxlen: 32
2a14:4985::/32 maxlen: 32
2a14:4986::/32 maxlen: 32
2a14:4987::/32 maxlen: 32
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:a5:98:a6:df:57:61:a7:09:73:87:09:e7:c8:bc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 21 21:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f100a577dd2958106cfedaeab6102a291b9ad65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:30:8a:d8:07:6a:ce:b7:f4:5d:ec:7f:a4:
c3:5a:72:7f:c2:17:56:6d:be:f9:16:e9:62:29:7f:
ae:38:03:73:13:f1:bf:47:9a:35:fe:8b:13:71:87:
76:14:86:09:b1:33:ee:e0:98:74:27:3b:c1:d3:a7:
61:58:f0:89:d2:da:22:9b:37:58:71:40:5d:43:85:
14:b1:5a:f1:4f:ef:c3:fb:fc:b4:86:c3:7b:1e:8c:
e7:09:31:39:b4:eb:c5:15:1a:a8:0b:4d:4b:b2:a9:
5c:4f:21:0a:6b:65:50:46:d0:61:d1:cb:f6:fa:03:
ad:8a:8d:eb:b1:af:78:8b:42:27:2b:de:19:c7:0a:
0f:f5:62:79:39:37:11:21:12:ce:b0:4c:73:cb:e2:
fb:cc:00:53:bb:4c:06:30:06:e3:b6:c1:b7:49:06:
e4:4c:7e:11:b2:e8:bf:2d:d2:de:53:40:c1:b5:6b:
67:49:49:09:ee:eb:b5:ae:f3:9a:7d:d2:0b:29:c7:
f4:e3:83:05:68:23:21:d2:cd:2a:33:19:00:e5:0c:
c8:bc:2d:86:87:6c:94:ad:d8:16:a1:65:bf:36:ad:
40:9a:b0:ef:8c:d5:dc:2e:5d:2d:61:22:75:4d:8f:
6a:74:b6:74:76:d9:e8:26:8d:a1:e0:0b:a3:76:77:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:0A:57:7D:D2:95:81:06:CF:ED:AE:AB:61:02:A2:91:B9:AD:65
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/fxAKV33SlYEGz-2uq2ECopG5rWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.87.0/24
IPv6:
2a0b:9800::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
41:3f:11:24:0a:87:43:54:3c:5e:a7:b1:09:ff:6f:e6:c0:29:
9a:21:7c:e9:6f:b5:6c:cd:84:31:d5:a9:60:6f:81:a6:3a:84:
d1:8c:4c:ee:54:67:fe:6e:d1:99:4c:46:26:18:2f:cd:c4:ac:
7c:16:f8:15:45:42:e9:1e:a0:04:54:d4:6d:4a:29:8e:9c:6b:
4b:8d:a4:cf:2c:0d:ff:31:07:62:28:f1:f6:8a:18:53:09:1e:
ae:8b:04:a6:66:7e:a0:04:63:ad:d1:b9:df:df:c2:e4:f8:34:
bb:de:b1:c9:55:12:c9:eb:b6:73:bc:32:61:2b:e9:3e:e8:8b:
80:d5:8b:fd:b0:d3:6c:f2:7f:6a:98:51:32:b4:58:cf:bc:59:
f0:95:5f:0f:6e:56:ff:6b:11:99:63:4d:20:1b:17:21:ae:8d:
3a:d9:c2:03:ec:b3:02:e8:7b:8a:03:75:c2:89:23:15:c2:b8:
b1:4e:dc:e0:da:b2:38:b6:fd:68:8d:aa:b2:61:04:ea:7f:db:
7c:b2:1b:9d:18:ff:84:79:91:76:17:36:47:cc:ce:f1:1d:58:
77:b5:ca:12:2a:b2:1c:ba:a4:5b:35:03:59:c9:50:14:56:c3:
c4:3f:90:a5:c6:d5:a9:bc:b5:2d:0d:cc:fc:59:57:97:44:83:
be:cd:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:33 2024 by rpki-client on console-ams.rpki-client.org