Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FhiS_0BY_RX__5qZ0mKP-BC0X2s.roa
File: FhiS_0BY_RX__5qZ0mKP-BC0X2s.roa (raw, json)
Hash identifier: b0HHxrQoymUYIksI9+SNLy5r1l/uyTbM+Q/b2O0feC4=
Subject key identifier: 16:18:92:FF:40:58:FD:15:FF:FF:9A:99:D2:62:8F:F8:10:B4:5F:6B
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 018CC4246EF371A78719912DC520367B7E52
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FhiS_0BY_RX__5qZ0mKP-BC0X2s.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42571
IP address blocks: 94.250.82.0/23 maxlen: 23
94.250.80.0/23 maxlen: 23
94.250.96.0/20 maxlen: 20
94.250.112.0/22 maxlen: 22
94.250.64.0/24 maxlen: 24
94.250.68.0/22 maxlen: 22
94.250.67.0/24 maxlen: 24
94.250.65.0/24 maxlen: 24
94.250.66.0/24 maxlen: 24
94.250.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6e:f3:71:a7:87:19:91:2d:c5:20:36:7b:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=161892ff4058fd15ffff9a99d2628ff810b45f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:b3:ab:76:60:41:2f:a6:bd:c6:9c:91:65:
47:ef:5b:3c:5a:cd:e9:2d:a0:52:8a:d4:52:e5:a3:
df:05:99:99:b8:30:cc:f4:a1:7e:f9:e6:97:45:f4:
93:51:89:9d:08:e1:9d:ba:ef:b3:b5:ae:e7:ca:58:
79:e0:c9:39:9f:b4:f1:b1:1a:d9:5f:d3:cc:f0:a3:
f8:28:b5:96:f5:b4:53:85:03:4d:5e:1a:8f:8a:d6:
5b:ec:34:d0:45:19:7f:8c:ee:43:27:f9:bb:db:c2:
70:0b:1f:b0:1d:8e:ae:cf:33:2a:5b:af:f8:cd:e4:
2c:2a:4e:e7:a5:63:74:ca:8e:df:48:8b:99:3e:4c:
bb:ad:58:6d:84:02:53:6d:33:2c:ab:f8:42:0c:10:
e9:02:90:01:01:8f:5c:8d:51:e9:29:25:13:49:07:
65:85:b4:64:d6:84:76:e6:14:ce:28:d2:88:74:bb:
4d:a2:8a:83:d5:6f:be:2b:5c:c4:c9:8b:76:ac:3a:
22:75:f3:81:37:c1:76:88:fb:ba:b4:5b:cd:bc:1d:
11:93:bc:52:45:fd:c2:b8:0e:3e:73:14:31:ad:7e:
24:a6:fa:12:76:2e:4d:f2:59:44:79:2f:d7:31:64:
50:6e:43:0d:27:39:be:93:f5:aa:48:9b:7e:b2:c8:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:18:92:FF:40:58:FD:15:FF:FF:9A:99:D2:62:8F:F8:10:B4:5F:6B
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/FhiS_0BY_RX__5qZ0mKP-BC0X2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.64.0-94.250.83.255
94.250.96.0-94.250.115.255
Signature Algorithm: sha256WithRSAEncryption
c7:b2:65:67:e8:36:76:ce:a3:d9:e4:0b:3c:2e:71:10:ff:14:
bf:89:82:e7:34:17:b8:03:c2:ae:53:fd:78:e4:fc:41:c4:c8:
21:4d:66:79:50:08:8b:18:47:8a:6a:c6:e2:d0:a2:b7:8b:16:
6b:f2:db:44:22:88:70:6a:64:1d:4e:b7:89:fb:9d:30:06:ca:
36:5a:61:89:2e:e1:5d:6a:69:24:c5:59:18:46:12:1e:6e:ad:
eb:eb:91:95:e2:b5:59:77:99:89:2d:db:aa:49:91:ab:fc:d7:
79:bd:33:94:69:db:bf:03:7d:fa:c2:20:5b:ab:72:7a:fd:a9:
d7:f2:53:72:3e:80:07:d0:5f:9a:3f:4c:dc:a8:97:5b:2d:64:
62:c0:3b:d8:f4:7e:fa:ad:f2:6b:41:af:27:ab:59:90:3d:c1:
3f:f5:fe:7e:c5:74:0b:a8:e2:ee:c1:b4:42:53:ed:42:a6:0e:
f7:df:3a:c1:5b:2f:d0:d7:d1:7a:f1:72:4c:51:74:26:2c:3b:
68:a4:93:17:7f:d0:fe:16:e1:a3:82:de:eb:d5:61:06:87:65:
1d:69:5f:28:79:6b:69:0f:b6:c1:73:92:dd:b7:2b:64:16:7c:
f5:94:dc:58:f8:4c:e3:37:a5:a5:1d:c8:52:51:ef:84:10:66:
ea:ea:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:14:55 2024 by rpki-client on console-fra.rpki-client.org