Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/Fa4453lV9XKiLbyW4SN6_UU4SqM.roa
File: Fa4453lV9XKiLbyW4SN6_UU4SqM.roa (raw, json)
Hash identifier: fTLBQpgVUsusuxkAPoKuV60FlV4LUIyc3t7M+4KG4Y0=
Subject key identifier: 15:AE:38:E7:79:55:F5:72:A2:2D:BC:96:E1:23:7A:FD:45:38:4A:A3
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 018CCA9A1DFCC5CC6057C674B52C559674A1
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/Fa4453lV9XKiLbyW4SN6_UU4SqM.roa
Signing time: Tue 02 Jan 2024 14:35:46 +0000
ROA not before: Tue 02 Jan 2024 14:35:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58340
IP address blocks: 83.146.128.0/20 maxlen: 20
193.177.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:1d:fc:c5:cc:60:57:c6:74:b5:2c:55:96:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Jan 2 14:35:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15ae38e77955f572a22dbc96e1237afd45384aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:b3:01:4a:e5:f3:7f:e5:53:a9:36:26:57:
40:ad:43:40:65:19:9e:8f:3b:5a:f9:aa:30:68:d1:
ac:e0:3e:46:60:cc:48:7f:96:1d:a5:49:bb:3d:05:
67:bf:7b:fe:20:f5:85:3e:1a:32:7c:57:08:6c:dc:
1c:ad:dc:ff:f3:bf:5b:13:64:ea:a1:f6:e8:d9:40:
02:c3:56:3c:df:67:13:77:8c:90:4a:c9:2e:25:37:
52:57:08:53:0c:bc:1b:6a:62:70:84:8d:15:2e:be:
27:39:ee:73:26:51:1a:c3:c5:0b:0e:58:e7:a8:b9:
e3:a4:ed:4a:01:cf:ea:54:c9:55:58:40:21:e3:23:
ac:ba:21:e3:02:88:ee:42:c3:09:15:ac:86:c0:fc:
63:9f:7a:fd:e1:31:44:23:ee:c7:87:4e:91:94:fc:
30:66:41:b0:61:f5:dd:cd:b6:67:fd:9f:2c:cc:db:
96:7e:19:4a:dc:a9:65:2f:fa:9a:d2:c3:8b:45:4e:
1b:af:5d:d7:ea:94:78:7c:73:1b:ab:22:21:f4:ed:
10:37:f9:da:ad:73:f4:f8:a1:f5:ea:74:83:8d:21:
aa:b8:8f:ad:ae:9f:38:d2:17:af:fd:f5:4b:fa:b5:
4b:52:83:87:a1:e3:88:9f:40:5d:e8:37:05:bf:0c:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:38:E7:79:55:F5:72:A2:2D:BC:96:E1:23:7A:FD:45:38:4A:A3
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/Fa4453lV9XKiLbyW4SN6_UU4SqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.128.0/20
193.177.188.0/22
Signature Algorithm: sha256WithRSAEncryption
75:66:ac:68:bc:db:d0:76:73:13:3a:2f:95:c0:5e:ab:20:f0:
ce:c5:38:4c:79:db:8e:1a:de:ab:aa:d1:00:02:86:08:34:1a:
2f:c2:d6:68:e8:14:33:2f:1f:7a:a7:ea:31:27:fd:e7:b1:3b:
e0:a1:87:39:12:24:65:14:04:07:6a:c6:29:dc:df:68:4b:18:
99:5f:c6:1f:d4:4c:ac:21:5a:72:ec:46:64:42:81:be:32:be:
65:dc:b0:48:9b:1a:52:6f:c7:d3:11:17:bf:2b:08:fe:35:29:
0d:a0:a0:f5:c0:9d:07:f5:5e:28:b3:e7:91:ed:c2:e4:79:d4:
98:2c:0f:b7:f7:35:59:78:49:54:f6:ac:04:31:b5:2d:ab:e2:
21:b9:02:68:eb:22:5e:f6:b3:04:d5:c0:ab:2e:03:23:7f:9f:
73:2b:e6:70:fd:8e:8f:67:76:df:7e:12:1c:3b:f5:0b:99:a0:
11:3a:82:93:7a:8a:ff:08:14:8e:45:54:61:0e:99:c4:63:b0:
37:e1:73:35:b2:05:1e:5e:86:af:c4:1b:b1:cf:9d:10:d8:79:
2a:83:40:9c:47:fe:63:59:50:dd:b5:05:e6:eb:b5:b8:92:72:
f8:5b:3b:c0:8b:51:8c:92:63:f3:e9:44:28:73:14:1b:c9:c1:
c3:f5:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:34:25 2024 by rpki-client on console-fra.rpki-client.org