Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FoV_hpIcp3Ty4hMrXmcwXLAJH9Y.roa
File: FoV_hpIcp3Ty4hMrXmcwXLAJH9Y.roa (raw, json)
Hash identifier: mWghZqfh4qQkQxCVj3wqDxHfdaIMT2d8Yj3WrBmoM+M=
Subject key identifier: 16:85:7F:86:92:1C:A7:74:F2:E2:13:2B:5E:67:30:5C:B0:09:1F:D6
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01906373E7500D92B16BB758B65918D089BD
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FoV_hpIcp3Ty4hMrXmcwXLAJH9Y.roa
Signing time: Sat 29 Jun 2024 10:04:18 +0000
ROA not before: Sat 29 Jun 2024 10:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 86.111.230.0/24 maxlen: 24
86.111.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:73:e7:50:0d:92:b1:6b:b7:58:b6:59:18:d0:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 29 10:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16857f86921ca774f2e2132b5e67305cb0091fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:1b:4d:5d:33:92:87:8f:4c:8a:5f:fa:aa:
ea:09:40:e6:db:40:39:79:44:ce:73:a5:aa:b3:85:
cc:d4:61:b4:49:0c:e7:f6:29:e2:0f:0f:87:50:ae:
30:fe:59:03:20:ec:c1:e9:38:35:46:ea:35:a3:46:
42:9b:c2:e7:f7:f9:2a:73:94:89:73:54:4e:64:4b:
a6:da:53:94:f5:cc:5c:fe:26:d2:2a:8d:0a:08:78:
fe:92:b2:86:02:07:bc:59:53:dd:74:5e:45:de:e3:
0a:b7:23:7a:06:4c:36:05:36:33:f1:6d:31:95:f4:
b0:1e:7a:7a:6e:97:0b:28:8e:19:3c:71:50:7c:d0:
1c:0c:d9:9a:4e:03:79:48:b5:a0:85:90:b5:00:79:
03:a7:c0:70:e1:6d:88:05:b7:cd:22:9c:fb:53:14:
47:1c:ab:7b:20:35:01:f2:6f:ba:ea:c8:c7:a5:39:
7b:dc:a9:0f:eb:d5:35:fe:d3:01:6d:d5:47:e6:7c:
d6:d1:fa:a8:d5:1d:b5:a5:7b:ec:ae:7a:cc:d5:69:
05:5a:bd:e7:a7:00:d5:02:3f:9f:61:a1:93:1a:8e:
12:b9:8c:6b:10:2e:58:27:8c:2a:8a:a5:f6:93:a8:
36:8c:eb:c5:b1:73:5c:cb:4c:c2:0a:ab:38:dd:68:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:7F:86:92:1C:A7:74:F2:E2:13:2B:5E:67:30:5C:B0:09:1F:D6
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FoV_hpIcp3Ty4hMrXmcwXLAJH9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
57:be:6e:7b:5d:e1:fe:c6:1c:13:b0:42:6a:9f:6b:b5:46:f9:
5a:b1:de:ec:37:5e:29:04:36:15:65:1f:c7:31:9d:30:57:a7:
7b:8a:79:a7:cc:4f:e8:ef:1a:ae:3a:97:46:fd:43:65:e2:09:
5c:48:0a:4d:7d:ba:85:88:c9:91:f9:f8:ab:5a:85:03:4c:86:
ff:15:e0:bf:07:4d:18:dc:24:c8:95:75:9a:89:37:c7:0e:0d:
54:52:33:9f:a7:ea:66:b7:fb:72:c3:ae:cf:04:94:4d:e3:92:
65:30:0a:54:ac:ee:0a:cb:50:9e:7d:37:1c:4b:91:3a:c8:31:
49:f5:d1:ba:a5:74:e1:c8:cd:0f:29:46:4a:59:a6:33:91:c3:
8d:f8:e7:c8:1c:d5:03:6d:7d:91:3e:7d:d3:3c:25:e2:31:f0:
ba:c2:ef:42:9a:bd:6e:22:ee:01:53:74:b3:15:d9:5f:4c:a5:
d2:4d:43:63:3d:d5:56:2b:7f:1e:c5:1b:81:9f:f6:dd:c6:5d:
91:78:9e:f5:f7:01:46:31:d6:87:eb:ef:cc:67:53:62:a9:19:
51:b6:e0:c2:0d:fd:f9:0a:45:78:0f:7a:24:bd:52:2e:e9:49:
83:20:4c:30:05:21:b3:b7:6e:b0:f1:23:c3:0e:4c:1a:f5:a2:
97:ab:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:15:44 2024 by rpki-client on console-ams.rpki-client.org