Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/fkw6LsSec9BCdr3ghfpcGABpxIk.roa
File: fkw6LsSec9BCdr3ghfpcGABpxIk.roa (raw, json)
Hash identifier: +ktxsiY6R/9lmmqu8ccbjxOtKpm4Uuh9dMR/sVl1OIw=
Subject key identifier: 7E:4C:3A:2E:C4:9E:73:D0:42:76:BD:E0:85:FA:5C:18:00:69:C4:89
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AF04743BFC4F81721883F80C81A77614
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/fkw6LsSec9BCdr3ghfpcGABpxIk.roa
Signing time: Mon 21 Oct 2024 12:19:17 +0000
ROA not before: Mon 21 Oct 2024 12:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202097
IP address blocks: 213.192.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:04:74:3b:fc:4f:81:72:18:83:f8:0c:81:a7:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e4c3a2ec49e73d04276bde085fa5c180069c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:b3:bb:dd:2c:a2:7f:5e:df:ae:ec:a1:ed:
d2:0a:90:5c:fa:76:19:97:25:98:63:61:9f:d0:7e:
3b:e3:65:83:b7:34:86:86:47:59:65:29:f9:7e:a7:
89:6d:42:ae:f6:88:f3:57:ca:c7:b6:bb:20:36:57:
9c:e0:50:c1:e5:12:db:16:70:8a:44:a6:2a:86:72:
a4:9c:56:2b:b7:06:62:9a:8a:33:e0:0e:84:f6:e9:
7c:50:4a:11:10:9a:de:84:44:53:b4:e1:9a:6d:77:
b6:0b:72:46:fe:bf:e1:7f:b9:d1:42:de:b8:45:3b:
6c:e1:c4:ea:a5:6a:4b:4e:65:38:c2:30:02:1a:5b:
24:a3:e0:39:34:02:2e:26:42:10:07:70:e3:5e:a3:
66:c4:0b:86:2e:bb:67:9b:4b:1c:29:7d:e6:bd:e1:
30:43:89:db:42:c2:f5:5f:e6:f9:30:e8:31:1c:f8:
d8:88:da:2f:af:fd:0a:ea:1e:2e:fc:6a:ef:9f:3e:
e0:40:e1:83:f1:d8:db:7e:6b:4b:c0:66:ea:85:e0:
ba:6d:f7:fa:ea:6f:58:d6:be:3d:21:51:4f:69:88:
6b:fe:46:ac:6c:a5:c1:73:8f:28:4a:9a:b8:87:93:
2b:42:1e:a5:5a:25:f4:84:3d:bc:c5:23:9f:53:7a:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:3A:2E:C4:9E:73:D0:42:76:BD:E0:85:FA:5C:18:00:69:C4:89
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/fkw6LsSec9BCdr3ghfpcGABpxIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:00:e6:63:c8:95:42:ff:ad:1e:51:16:8d:ca:a1:aa:e7:6b:
ad:b9:8c:47:24:aa:50:bd:a3:44:eb:d1:94:9e:e2:40:a3:ad:
9d:45:f6:73:3b:86:df:ff:e9:d6:5c:af:3d:58:2f:3f:e6:be:
21:0e:bb:b9:7c:a6:4a:3a:47:6d:08:e8:1e:7f:ec:4e:da:e1:
38:8c:b6:4c:d2:82:ec:2c:5e:07:1e:5f:fc:b8:4c:0f:30:11:
cc:7c:e6:03:d5:3b:51:99:a3:81:90:9c:98:28:40:b3:85:99:
bc:f3:b5:4a:fa:bd:35:21:5e:84:b5:c8:23:ef:38:be:9f:26:
5d:46:41:ba:d0:13:7e:a3:c0:03:ae:e9:87:80:7f:46:7f:8d:
a5:b9:2e:b1:37:5b:a1:aa:b5:6d:98:8e:f3:6d:28:fa:b7:82:
4a:d2:8f:3f:2f:3b:af:bd:af:15:20:9a:fc:bc:99:47:91:bc:
d9:cb:45:1b:b5:60:dc:e7:6c:82:93:2c:50:48:5e:1a:00:93:
59:df:23:73:2c:68:58:e7:0e:4e:37:fe:b8:56:d7:fe:2c:e3:
0c:d9:67:bc:fe:e2:33:6f:8c:9e:91:bc:ba:28:4d:b1:79:f1:
2a:0b:0d:12:e1:df:9c:a6:42:e4:46:58:46:1f:19:82:d0:72:
14:9c:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:30 2024 by rpki-client on console-fra.rpki-client.org