Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/FI_LgreZKWiEKEm-64lqweNAHAE.roa
File: FI_LgreZKWiEKEm-64lqweNAHAE.roa (raw, json)
Hash identifier: tG+QCFHYv2wRmRqGDdwnZ/nPygXM/WW4rE4SjbNbjJY=
Subject key identifier: 14:8F:CB:82:B7:99:29:68:84:28:49:BE:EB:89:6A:C1:E3:40:1C:01
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 018CC8015247756AEAB950B0DDC1BE1D5D80
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/FI_LgreZKWiEKEm-64lqweNAHAE.roa
Signing time: Tue 02 Jan 2024 02:29:38 +0000
ROA not before: Tue 02 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4805
IP address blocks: 57.70.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:52:47:75:6a:ea:b9:50:b0:dd:c1:be:1d:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=148fcb82b7992968842849beeb896ac1e3401c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:c0:4f:2a:09:17:99:a2:2f:e0:18:78:a6:
c8:a0:b1:e2:53:57:e8:a2:17:a3:99:d0:f9:ba:69:
af:30:1e:cf:17:9b:87:55:8a:2e:b0:e6:87:ec:a6:
6b:1a:bc:3d:e8:62:f4:6a:27:6d:8e:5e:e1:f8:8a:
32:6f:c4:70:6d:0c:dd:05:22:57:69:a6:ff:de:57:
94:7c:c2:3d:da:57:75:b6:09:c7:95:7d:2f:a2:5c:
33:b0:ad:90:d0:04:fe:57:de:7f:34:95:c4:de:b7:
74:f5:51:3e:c4:08:30:12:62:88:db:a9:67:35:60:
f5:72:38:cd:06:c7:b5:a7:4f:f0:5a:75:e7:3b:7e:
a7:a3:92:a9:bf:3a:12:63:2a:bb:d9:33:ad:06:12:
70:a6:2c:58:0b:ca:1a:8b:26:87:ac:21:a2:29:04:
f0:d3:20:0f:24:6f:6c:06:34:1b:27:38:83:d7:09:
29:2f:74:ef:62:72:01:db:00:29:ed:d2:22:5b:b3:
5f:11:ac:2a:f3:78:f8:d6:f5:14:0e:45:08:32:76:
2a:33:00:a0:d5:9d:20:92:c7:40:30:61:71:cc:50:
42:b4:b2:84:fb:5f:90:66:a2:ee:1d:ac:fa:a6:1a:
ac:34:a4:03:7a:f6:bb:61:f0:af:2f:60:3d:b5:a4:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:CB:82:B7:99:29:68:84:28:49:BE:EB:89:6A:C1:E3:40:1C:01
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/FI_LgreZKWiEKEm-64lqweNAHAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:86:22:05:0f:4c:ff:c9:42:77:e7:78:76:15:f7:85:bf:54:
7c:f1:b0:fd:59:e7:3e:cb:99:e9:e2:a5:ea:99:a2:08:f4:ea:
a8:8b:9b:e9:42:a8:35:22:ba:14:36:b3:e1:bb:86:5f:6a:c6:
61:11:39:80:76:02:f1:45:71:c0:9a:94:66:8e:f8:58:ae:ac:
28:df:4f:d3:e6:ed:9b:f8:2f:7a:7e:81:03:bd:fa:4a:81:a4:
07:bb:5d:85:84:97:6f:f3:f3:d0:41:9f:54:fd:42:16:aa:f4:
e3:69:ae:b6:9f:d9:c3:3f:ce:bb:32:52:ee:a9:72:c0:3c:d0:
3e:17:97:c2:d1:58:66:f7:3e:fb:51:7c:21:2c:a1:af:52:78:
96:2b:58:b6:35:37:12:e2:f6:d8:b4:65:a1:10:8b:a8:5f:e3:
1d:7b:5b:bb:1a:d6:8b:2a:bb:b0:e8:fb:b6:7d:01:53:1b:db:
ff:9d:57:34:92:73:f9:41:28:01:23:b2:0a:46:df:2c:44:7b:
12:f9:8d:3b:df:ee:d0:97:80:c9:23:f7:34:af:91:b3:d7:44:
8e:63:e8:a2:41:33:21:bf:93:8b:c8:56:3b:1b:93:b8:92:32:
6f:f7:39:b0:40:24:30:6b:3b:73:e0:b9:9d:7d:da:47:41:f1:
5f:5a:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:15:35 2024 by rpki-client on console-fra.rpki-client.org