Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/FSunDsZPo9t54s5KoUGzBS-A5jI.roa
File: FSunDsZPo9t54s5KoUGzBS-A5jI.roa (raw, json)
Hash identifier: gu1rSxI0yjWmo8gAsD3+ubZiZGCDNwJpDlFMswo3fzk=
Subject key identifier: 15:2B:A7:0E:C6:4F:A3:DB:79:E2:CE:4A:A1:41:B3:05:2F:80:E6:32
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 018CC80254925860F339BAA1005E7F01E426
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/FSunDsZPo9t54s5KoUGzBS-A5jI.roa
Signing time: Tue 02 Jan 2024 02:30:45 +0000
ROA not before: Tue 02 Jan 2024 02:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207066
IP address blocks: 91.199.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:54:92:58:60:f3:39:ba:a1:00:5e:7f:01:e4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jan 2 02:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=152ba70ec64fa3db79e2ce4aa141b3052f80e632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:65:83:4b:d4:5f:d9:2f:30:f4:cf:a6:8c:
d5:37:99:26:a6:ad:0b:66:81:f7:4e:66:f6:de:2b:
3a:30:6f:f1:b0:ea:a7:2b:b3:8d:ba:00:fb:ad:a3:
80:b0:39:c6:e5:52:d2:bd:5b:4e:f4:19:23:98:e5:
cd:93:ab:01:f4:4c:f0:22:1e:cb:94:b1:e1:15:1f:
58:40:1a:4d:5c:ea:c0:fc:2e:d4:a5:a3:71:62:b1:
2d:10:8e:4a:98:60:ff:bc:1d:a1:dc:c6:fb:5a:86:
12:c3:65:c6:37:12:f9:36:8e:25:e5:0a:2b:29:19:
e9:49:45:0b:92:af:4d:f3:25:d0:d0:d5:92:50:66:
96:62:e7:a8:60:5d:4a:42:90:58:0a:0b:87:db:b8:
0d:e0:e6:35:d9:46:55:4b:58:47:32:34:54:c0:85:
89:44:08:4b:f3:0b:3d:12:be:24:25:5e:13:69:b0:
96:b3:8f:3e:1c:ca:bb:90:37:3e:d6:b8:5e:a1:2b:
c0:b9:13:1b:ca:2a:6e:89:9b:49:aa:91:ae:1b:62:
dc:d4:c3:00:70:9c:9d:1c:5c:30:cc:cd:93:7a:93:
6d:e2:b1:50:e4:5c:e5:d5:23:35:bf:32:05:61:83:
be:d5:3d:14:29:fc:83:f3:4e:63:62:f8:57:14:56:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2B:A7:0E:C6:4F:A3:DB:79:E2:CE:4A:A1:41:B3:05:2F:80:E6:32
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/FSunDsZPo9t54s5KoUGzBS-A5jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.86.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6e:20:c8:cc:ee:86:45:5a:24:9a:3d:b6:f2:34:ae:be:5a:
c0:6a:ac:58:e1:0c:ef:76:50:50:77:3e:aa:bf:4b:4a:82:cf:
77:d7:6d:7c:96:cb:65:58:dd:d4:56:95:58:2a:a0:ef:ee:3c:
02:68:35:d7:09:5d:e7:ca:33:5d:55:d8:d9:73:c1:c4:26:3e:
32:32:bf:d6:14:18:28:f6:83:68:ac:26:e0:f2:57:f7:7e:a8:
30:ab:b9:6c:a8:8f:94:44:5f:48:26:07:4e:c2:66:7b:fc:d7:
70:91:83:09:6c:83:b0:8a:e9:ca:0b:fe:67:ab:6a:c6:06:13:
52:6b:9a:b3:2a:1d:40:47:f5:40:04:d6:7d:20:13:05:65:c6:
f9:6b:d7:ba:64:33:9f:0f:87:b7:46:40:60:25:6a:8e:53:93:
0b:e3:7c:bd:d5:f0:97:82:07:c5:d0:3b:26:80:59:70:8e:a9:
7a:5a:30:08:f8:65:68:0f:62:55:be:92:20:d2:a4:da:89:68:
cd:55:9f:55:cf:e4:c5:cd:8a:28:24:64:49:f9:74:ac:0d:a1:
2f:1c:3d:ab:59:bc:df:39:4e:ca:a7:1e:97:b6:ba:1e:bb:2e:
e7:fc:a7:10:fe:05:59:88:c8:70:56:04:e0:a3:7d:04:dd:55:
88:4c:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:04:24 2024 by rpki-client on console-fra.rpki-client.org