Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/FSOFwv9IB_KiB3Dn7DNS796lMZY.roa
File: FSOFwv9IB_KiB3Dn7DNS796lMZY.roa (raw, json)
Hash identifier: iN4GifpjJb9kJuiExdST/NDBe02bICVeW0pEkfDcs6A=
Subject key identifier: 15:23:85:C2:FF:48:07:F2:A2:07:70:E7:EC:33:52:EF:DE:A5:31:96
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018E41AF82D6B760C266122FEC01A752D69F
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/FSOFwv9IB_KiB3Dn7DNS796lMZY.roa
Signing time: Fri 15 Mar 2024 10:36:45 +0000
ROA not before: Fri 15 Mar 2024 10:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 86.38.145.0/24 maxlen: 24
86.38.191.0/24 maxlen: 24
89.117.212.0/24 maxlen: 24
89.117.214.0/24 maxlen: 24
89.117.240.0/24 maxlen: 24
89.117.242.0/24 maxlen: 24
89.117.251.0/24 maxlen: 24
217.9.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:af:82:d6:b7:60:c2:66:12:2f:ec:01:a7:52:d6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 15 10:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=152385c2ff4807f2a20770e7ec3352efdea53196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:41:10:4c:81:58:aa:57:ba:6e:60:01:28:
6d:a6:3e:f8:04:dd:0a:f3:94:0e:17:11:28:9a:49:
59:ad:05:97:c0:f0:dc:e3:bf:d3:f1:22:8a:18:b4:
fd:8b:0a:15:96:ca:47:b9:9b:0b:6b:f4:d3:7f:ef:
6f:c6:54:1b:7c:68:3c:8b:09:bd:ca:b0:69:fd:ea:
b3:9e:5f:9c:80:ab:46:c7:0c:59:29:de:5c:aa:51:
de:a7:46:c5:f9:e7:73:6f:84:06:61:15:0a:4e:6b:
92:3c:f9:b5:75:79:25:f3:2a:64:35:73:85:f9:1a:
9c:ed:d0:c5:45:c6:74:7b:26:2c:fd:0f:a4:f8:97:
e4:bd:6e:35:f9:40:53:55:dc:05:a4:0a:44:4a:02:
33:e8:45:5c:e6:7a:3f:1f:85:a3:3e:e0:9f:a4:9d:
37:55:81:03:27:91:1a:cb:4e:8d:00:05:49:a4:01:
ae:21:06:df:77:97:0d:60:d7:11:25:1c:b9:a3:e6:
78:62:0d:e8:e8:d9:26:63:d0:d5:64:4c:4c:01:11:
89:3c:6f:ff:6a:60:c7:84:e2:85:b8:48:4f:d8:15:
a7:2f:55:73:20:28:d5:5f:ca:5e:94:3b:4d:e3:a7:
10:f7:82:48:b6:bd:26:11:24:8b:3b:4f:51:f8:d0:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:85:C2:FF:48:07:F2:A2:07:70:E7:EC:33:52:EF:DE:A5:31:96
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/FSOFwv9IB_KiB3Dn7DNS796lMZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.145.0/24
86.38.191.0/24
89.117.212.0/24
89.117.214.0/24
89.117.240.0/24
89.117.242.0/24
89.117.251.0/24
217.9.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c2:aa:1a:1a:99:32:42:f7:bc:8b:35:24:ec:4f:60:38:04:
fc:a1:eb:d4:c3:84:b3:b5:ed:e8:80:9f:ab:52:a1:10:25:02:
4b:df:2a:29:2f:4d:dd:2b:ab:2d:7b:ff:7b:6b:36:12:8a:de:
63:1c:6e:f6:56:32:6c:17:92:b3:c5:c2:bb:8b:05:c9:77:78:
50:97:3b:82:6a:bc:a1:c5:7e:69:f7:f7:cd:10:bd:55:c3:ba:
04:70:3f:5a:f3:ea:5a:48:8b:4e:be:69:36:2a:5e:60:1c:87:
b2:ab:85:d6:2d:01:b8:85:ef:ca:40:21:b2:9c:33:f7:d8:2c:
ea:f8:46:00:61:68:c2:e5:b0:5a:a2:f8:5d:5d:85:09:8e:e5:
37:09:68:74:0c:6e:9c:57:06:49:9e:9a:de:da:e6:0f:8b:7b:
3e:01:2d:7e:da:71:e5:df:fa:e5:e5:81:67:4a:66:ca:66:9c:
98:b0:19:d2:7a:74:5b:b8:34:12:ba:ff:d7:6b:22:12:08:b5:
0b:db:65:d4:d6:c1:5a:e9:64:f5:37:36:c2:08:38:e7:9f:79:
ba:3c:75:35:55:41:56:f2:a0:a8:1f:64:c9:59:cc:83:e0:38:
77:5c:64:5c:e6:76:b0:20:e1:60:84:53:a3:57:b8:c4:58:c8:
7c:19:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:35:04 2024 by rpki-client on console-ams.rpki-client.org