Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/FlnXwdVNRVaSUUuUx6jQJeV4bn8.roa
File: FlnXwdVNRVaSUUuUx6jQJeV4bn8.roa (raw, json)
Hash identifier: 9CGMxdffIruJ80vp2GL5NkhFYJorvUAyJrrziDXBStY=
Subject key identifier: 16:59:D7:C1:D5:4D:45:56:92:51:4B:94:C7:A8:D0:25:E5:78:6E:7F
Certificate issuer: /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial: 018CC8DD384A515B1B3B500B56E57FAFC474
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/FlnXwdVNRVaSUUuUx6jQJeV4bn8.roa
Signing time: Tue 02 Jan 2024 06:29:50 +0000
ROA not before: Tue 02 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 185.135.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:38:4a:51:5b:1b:3b:50:0b:56:e5:7f:af:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Validity
Not Before: Jan 2 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1659d7c1d54d455692514b94c7a8d025e5786e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:5d:b2:39:ab:44:60:b7:09:a0:7a:93:de:
06:cf:ad:31:ab:cf:02:9a:da:a0:b0:00:89:03:be:
4d:6a:29:8a:30:51:07:c5:f2:21:e0:49:11:c8:f5:
5a:4e:db:0d:6f:85:e6:fa:c4:86:30:b2:02:8f:c5:
70:59:c2:43:6f:71:ec:26:71:f2:41:e0:a7:df:0a:
3d:e5:6f:59:bb:3c:83:24:c0:0c:09:2a:b9:c6:a2:
25:90:19:b2:e3:11:ed:d9:6f:dd:5e:c7:86:2c:3e:
6b:7f:0f:0c:a1:f4:4d:52:cb:14:29:81:23:d1:d8:
e2:b9:b1:22:0a:60:b6:9e:fe:88:c4:37:61:6e:3e:
ba:89:ca:37:6b:ba:1a:87:e9:b8:87:d8:b0:59:6e:
f3:08:17:2d:7b:23:d2:a4:9d:2d:9c:de:41:9b:0e:
8d:b6:95:ff:f0:a7:e2:de:34:83:80:06:ef:9c:e0:
f0:8b:ae:48:20:f4:c8:3f:f0:e8:22:5a:83:f9:9c:
9d:08:3e:a5:1a:58:cc:0f:70:0b:c8:00:e5:d1:6d:
15:6c:04:fb:4a:49:f2:35:d4:d6:5c:07:4b:13:03:
f4:86:0f:6f:06:41:b9:f4:e0:56:e3:11:99:30:21:
dd:a8:72:3e:63:98:07:1c:94:c9:02:9d:cf:4e:ca:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:59:D7:C1:D5:4D:45:56:92:51:4B:94:C7:A8:D0:25:E5:78:6E:7F
X509v3 Authority Key Identifier:
keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/FlnXwdVNRVaSUUuUx6jQJeV4bn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.188.0/24
Signature Algorithm: sha256WithRSAEncryption
62:28:1b:a2:03:72:23:08:5f:c0:c2:a7:45:db:51:3b:cc:4a:
28:65:a2:eb:58:06:1f:b5:7a:00:79:93:3d:82:f8:f9:3e:0f:
20:98:43:8e:20:55:7d:27:d8:31:39:22:cb:c4:0d:72:0e:82:
f4:06:9e:47:75:37:81:14:e3:62:0c:2f:fa:bd:9a:cc:32:fe:
62:fc:56:ea:c9:be:b0:9b:48:cd:f3:91:8f:39:c8:07:a3:9e:
eb:5c:66:98:83:2c:de:09:4f:cf:86:8f:34:c9:08:bd:1a:3b:
95:be:3a:27:d0:fd:36:ba:6f:4c:fa:72:f8:40:8f:07:39:20:
bc:f0:79:a7:6a:40:91:e7:3d:fa:d2:a7:6d:36:42:39:8d:81:
90:16:dd:67:4c:bb:6c:f6:91:f2:28:36:8b:6b:57:cd:e1:cd:
6a:b0:1f:c0:45:4d:99:2e:4e:01:c6:a8:24:c9:bf:0a:69:8d:
de:7d:c6:d1:3c:41:59:b7:ce:0c:c4:0a:73:d6:d3:59:0e:36:
95:a5:ff:82:11:9a:2a:45:80:54:8e:55:11:03:82:c1:1e:5e:
18:d1:1e:24:90:6d:bd:0f:15:e3:1f:26:aa:36:7a:be:13:0e:
f0:a7:41:5d:91:4c:e3:37:cc:44:4d:85:80:e4:46:de:34:96:
9b:1e:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:44:22 2024 by rpki-client on console-ams.rpki-client.org