Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/fJj7CEyJYAazEsfhRdkFdGrnI08.roa
File: fJj7CEyJYAazEsfhRdkFdGrnI08.roa (raw, json)
Hash identifier: th6x2ePYuT4N6IkQf790hS9a8qAd8dnp3DKO0FrPXtg=
Subject key identifier: 7C:98:FB:08:4C:89:60:06:B3:12:C7:E1:45:D9:05:74:6A:E7:23:4F
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 018CC4254531DE238B850BDA6A8497BF530E
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/fJj7CEyJYAazEsfhRdkFdGrnI08.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9158
IP address blocks: 212.6.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:45:31:de:23:8b:85:0b:da:6a:84:97:bf:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c98fb084c896006b312c7e145d905746ae7234f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:9e:72:96:ea:7a:b6:a5:a5:2a:39:46:2e:
45:5e:8d:09:cf:89:f3:a1:e2:35:bb:f9:bc:fd:e5:
3c:61:34:20:09:67:9c:42:41:13:fe:29:ee:76:44:
7f:e2:e8:22:36:4b:42:73:03:63:10:93:f2:24:6c:
e6:f9:67:b9:18:9d:7a:23:e2:28:ea:07:22:9c:83:
a0:87:54:d6:dc:d0:3e:04:5f:95:c3:d6:aa:09:7e:
81:4c:1d:cd:9f:32:63:15:98:6e:ab:be:a9:98:5e:
f7:e9:ee:d1:42:26:4a:4d:48:fc:44:16:bd:34:4e:
ae:63:03:e2:6c:e9:e9:46:91:df:c5:0a:3f:1d:1e:
56:b2:b2:d7:21:4e:0d:0c:fc:04:a2:35:26:1d:62:
b2:89:8b:3e:11:0f:29:0e:e5:0b:31:67:2c:10:06:
e9:b7:cc:1e:be:68:ac:ff:4c:0b:ca:4e:75:24:26:
a0:17:51:b5:70:0d:03:2c:ce:be:fa:84:e3:4b:a7:
8d:16:95:d2:16:cd:75:a9:d1:67:a9:c1:f9:0f:09:
e1:92:79:90:c4:d6:22:62:6a:49:bc:e4:6a:4a:96:
a5:64:98:d3:7b:0d:0d:c4:cd:27:22:04:a9:11:ed:
1e:03:20:4a:05:02:62:a3:fb:19:6c:ad:8d:97:ce:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:98:FB:08:4C:89:60:06:B3:12:C7:E1:45:D9:05:74:6A:E7:23:4F
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/fJj7CEyJYAazEsfhRdkFdGrnI08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d5:f3:09:5e:20:23:e2:fd:7b:70:eb:e8:5a:b3:23:23:1d:
c0:12:8e:02:bc:dc:86:21:a5:e9:4e:90:12:18:7e:57:c9:73:
b0:ba:0c:bf:10:e0:bf:47:4e:cb:9e:f1:93:2f:48:5c:69:fc:
ae:9a:cc:35:3e:60:85:00:4f:27:63:91:66:e4:c1:b7:a0:9c:
6b:64:98:2c:d9:98:f7:52:d7:ad:4a:b6:93:32:19:2d:bc:12:
41:2d:9a:b5:80:5e:47:58:7e:ac:37:af:7c:72:97:10:bd:f3:
dc:9a:2e:c8:7b:22:46:4d:16:12:a2:b8:1c:17:c9:13:e0:a3:
2a:5a:22:7d:0d:d0:85:43:d1:9f:77:f8:c0:88:25:32:6c:ba:
fa:47:17:35:b6:b0:bf:21:ea:d7:ca:cf:87:1c:46:93:52:d0:
1a:5d:c1:f8:24:10:0b:d3:ae:fa:30:ed:a0:95:6b:5b:08:ef:
f7:32:54:82:2b:f6:ac:58:2e:7c:ce:8e:04:5c:c9:63:ef:15:
34:c6:11:6b:0a:6d:f1:43:3c:92:22:8d:2b:0c:b2:ad:e2:8b:
4d:93:7e:e1:43:c1:ac:b0:b1:14:85:ff:4a:a5:29:d7:2a:25:
20:f2:81:ce:d6:0f:ff:73:fe:00:12:42:18:0a:2f:94:b1:d3:
8e:22:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:12:27 2024 by rpki-client on console-fra.rpki-client.org