Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/FtlbV_rxSnCNqW8kBXXCQ4NjpHc.roa
File: FtlbV_rxSnCNqW8kBXXCQ4NjpHc.roa (raw, json)
Hash identifier: gF4D1ulcjV1DkZUPHBEpr1TlhF34x1rjAXBanlr4vX0=
Subject key identifier: 16:D9:5B:57:FA:F1:4A:70:8D:A9:6F:24:05:75:C2:43:83:63:A4:77
Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial: 018CC86FA59CD678E2826C67F2135860CF53
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/FtlbV_rxSnCNqW8kBXXCQ4NjpHc.roa
Signing time: Tue 02 Jan 2024 04:30:09 +0000
ROA not before: Tue 02 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 139.30.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a5:9c:d6:78:e2:82:6c:67:f2:13:58:60:cf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Validity
Not Before: Jan 2 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16d95b57faf14a708da96f240575c2438363a477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:f3:83:ef:9a:77:8b:26:89:7c:e3:c2:b4:
e3:d8:2e:d2:0a:1d:c9:86:7c:8c:4b:e4:35:96:8c:
76:ae:e4:db:52:7f:3b:cb:58:62:37:02:8f:d6:4c:
2d:2b:53:c2:c0:5a:47:28:2b:06:aa:22:ab:70:64:
c8:29:19:e1:a9:00:98:d1:ec:cd:03:dc:41:50:e9:
36:fb:5f:fe:98:36:99:c0:39:0f:e0:d8:52:f7:29:
d1:10:b7:83:f6:cf:2c:1b:6d:a5:8c:3f:9c:35:40:
04:21:f0:0d:19:9f:ec:a5:e2:46:57:fe:26:9d:da:
6d:e6:67:34:29:10:5e:b7:a6:9c:e0:e0:5e:73:9b:
85:87:3c:10:08:02:97:b4:1a:e2:ab:e7:72:d4:3d:
43:0a:70:08:43:29:e4:34:be:f9:4e:73:64:67:33:
40:21:8a:16:ae:11:40:e1:94:c4:cf:bc:f8:2f:d8:
14:fa:fe:dc:77:57:b8:e6:ba:e7:fd:37:b7:85:cd:
b3:e8:6a:6f:0a:5d:76:70:8e:b4:bf:f7:64:78:5a:
27:ac:2b:f4:76:d2:fa:97:86:9e:8e:85:fa:d5:19:
b4:9c:10:21:a1:f3:e9:dc:44:f9:5c:dd:7b:8c:f4:
87:82:cc:a9:59:d1:48:6f:0f:69:93:6b:52:47:76:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:5B:57:FA:F1:4A:70:8D:A9:6F:24:05:75:C2:43:83:63:A4:77
X509v3 Authority Key Identifier:
keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/FtlbV_rxSnCNqW8kBXXCQ4NjpHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:b7:28:a3:40:aa:2d:d8:3d:e7:19:00:72:d3:b4:0b:3b:2b:
9f:ab:0a:c3:e3:54:6e:ba:b2:fe:5b:78:b2:52:d8:91:89:32:
6d:a7:fb:74:c3:d0:0a:68:d9:20:e8:f8:e9:49:4b:42:a4:66:
60:a4:d5:9d:ef:5c:f8:e8:a1:d4:3c:a7:fd:ef:c6:a3:e9:4f:
56:23:e7:3d:62:14:e5:95:48:16:aa:74:19:a3:ab:7a:ae:21:
5b:70:ee:cf:52:a4:f0:67:28:ec:9f:3f:5c:da:69:01:36:3c:
4e:e6:d9:98:d3:b9:09:32:c6:5c:e9:72:4f:81:f8:07:4e:58:
f5:3c:99:8e:b5:bb:7c:ea:aa:d6:05:0b:45:c7:cb:f8:1d:d9:
96:74:86:03:97:c0:60:0b:6c:de:0f:4c:63:80:62:44:fc:b1:
e1:3d:94:13:d0:73:4b:89:b4:0c:fd:84:5d:e7:5b:f5:47:45:
0a:88:2a:43:32:2e:03:0f:99:39:da:1d:5e:cc:d1:3c:c4:04:
0a:73:12:2b:0b:90:b9:d7:62:05:d4:28:da:83:dd:69:23:92:
e3:60:89:1e:d2:c9:01:29:9a:6e:d4:7b:88:1f:a3:a5:23:81:
49:3c:4b:ed:9e:c8:96:24:9a:35:d2:d5:dc:9c:33:3c:26:8d:
06:03:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 20:16:18 2024 by rpki-client on console-fra.rpki-client.org