Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/FuOG29ocQHRhgP6CDn5E7DrO18Q.roa
File: FuOG29ocQHRhgP6CDn5E7DrO18Q.roa (raw, json)
Hash identifier: Sn+6ISTJgp5vgYg5EldyecK0d1G7gmZcudtCHryntBI=
Subject key identifier: 16:E3:86:DB:DA:1C:40:74:61:80:FE:82:0E:7E:44:EC:3A:CE:D7:C4
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 018CC4933EA783CC5E6A6C987C941FA92D50
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/FuOG29ocQHRhgP6CDn5E7DrO18Q.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200742
IP address blocks: 185.97.125.0/24 maxlen: 24
185.97.124.0/22 maxlen: 22
185.97.124.0/24 maxlen: 24
185.97.127.0/24 maxlen: 24
185.97.126.0/24 maxlen: 24
2a06:600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3e:a7:83:cc:5e:6a:6c:98:7c:94:1f:a9:2d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16e386dbda1c40746180fe820e7e44ec3aced7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:d8:9e:c5:6f:a7:7e:3a:26:29:73:7b:86:
10:dd:04:82:ec:19:45:a0:37:fd:8d:33:54:b8:51:
0f:60:b8:39:50:e5:72:11:94:2b:27:7a:22:e0:5a:
35:6c:a6:f1:9b:a3:81:45:d2:72:41:fc:ad:c8:97:
70:1f:ff:ec:11:88:99:86:2a:f1:52:22:5e:6c:3e:
ae:96:94:84:33:cf:5a:c7:1d:dd:a7:43:f1:eb:84:
15:5d:d0:c4:18:f6:af:d0:42:86:9b:cf:df:24:98:
c2:d0:b2:91:09:88:5c:37:cf:e5:05:71:d3:3e:12:
f2:a8:df:f4:04:fc:ae:29:47:ca:c4:a8:04:6c:78:
56:36:be:6d:bd:99:c9:7c:0f:6c:80:d8:88:ac:14:
5e:f9:4e:df:4a:20:9f:b9:2d:31:39:05:ca:87:a2:
5e:e7:2c:0b:ed:9b:a6:fe:42:b1:ec:26:45:e9:ec:
64:a6:e2:50:7d:9c:f8:3b:71:7f:34:de:52:e0:24:
67:fa:72:38:c5:f9:23:a0:f6:3f:d6:43:da:c4:1b:
dc:1a:df:32:7b:2e:b0:35:ab:04:58:1e:8f:48:98:
ed:ad:8d:5c:55:df:d2:49:e4:97:71:b6:a1:e5:fd:
a5:34:8b:f4:6f:c9:10:d2:cc:a6:46:5b:de:c6:cb:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:86:DB:DA:1C:40:74:61:80:FE:82:0E:7E:44:EC:3A:CE:D7:C4
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/FuOG29ocQHRhgP6CDn5E7DrO18Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.124.0/22
IPv6:
2a06:600::/29
Signature Algorithm: sha256WithRSAEncryption
65:49:e4:37:3a:0d:1a:e9:ce:77:42:f6:e3:8f:9d:a0:85:8b:
d5:ad:fd:3e:4c:5c:c0:f6:8d:f7:ef:4c:aa:17:da:28:3f:cd:
bc:56:e3:c6:cc:73:3b:02:3d:ce:e4:b2:46:50:86:81:fd:43:
18:26:d9:93:be:cf:70:15:d3:68:ee:31:8a:f3:a6:6e:40:4b:
0c:c2:cb:77:8c:11:85:ba:9e:71:02:2c:67:83:a2:05:7a:b1:
92:3b:b1:d5:b8:34:e5:a7:ec:8d:7b:88:23:09:00:0d:e8:ea:
a9:fb:dd:3e:ee:e0:d8:02:dd:95:ab:41:91:e8:f8:f0:0a:37:
4e:58:bb:46:3b:d5:ed:e4:f3:d1:64:c7:de:06:a3:11:99:79:
39:29:c8:97:53:5d:11:2c:9b:d7:db:3b:9e:56:0f:cf:6e:a2:
67:5b:06:d9:5c:8b:e2:6a:8f:82:2e:85:54:ea:10:30:ea:94:
28:53:7e:97:9a:68:a8:6a:1e:7b:45:1a:f2:8e:e0:7a:ef:3a:
1f:40:85:55:30:c0:68:e3:76:16:67:c4:19:f9:cf:d6:c2:4e:
c0:cf:eb:64:b9:a5:d1:30:ff:2b:c4:ef:b5:ff:4f:2f:af:48:
d5:ec:6f:bc:10:32:8a:b7:c1:df:92:fe:e5:5a:ff:36:9a:a6:
cc:8f:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:42:32 2024 by rpki-client on console-fra.rpki-client.org