Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/FE9lL77pIOSWfFw82hjoFGHGAH8.roa
File: FE9lL77pIOSWfFw82hjoFGHGAH8.roa (raw, json)
Hash identifier: VOtH+pcsdiqI7XGAZ6Q7w/pDTq3Dz6gLm0FVrWm/33o=
Subject key identifier: 14:4F:65:2F:BE:E9:20:E4:96:7C:5C:3C:DA:18:E8:14:61:C6:00:7F
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 018CC3B728373CAB902B97276D8782D467A8
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/FE9lL77pIOSWfFw82hjoFGHGAH8.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212012
IP address blocks: 91.240.72.0/24 maxlen: 24
185.42.232.0/24 maxlen: 24
185.42.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:28:37:3c:ab:90:2b:97:27:6d:87:82:d4:67:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=144f652fbee920e4967c5c3cda18e81461c6007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:71:be:fb:6b:d1:39:00:fb:fd:49:da:e8:
0b:c4:7d:a1:9e:4d:7d:a0:ab:fe:ab:fd:11:6e:ab:
ec:89:e1:13:5f:91:78:1e:c1:4f:ee:6c:d0:a0:63:
b1:3e:04:87:fd:a3:e2:18:40:81:3c:c5:12:66:cc:
80:2d:34:f2:60:eb:d2:21:df:82:3b:9e:6d:5e:e5:
77:bc:11:da:3e:45:bd:b9:1b:c8:5e:97:5d:ad:0f:
29:41:0a:00:ee:77:34:ea:d9:f6:12:95:18:95:e0:
df:26:24:a3:58:eb:7c:5a:83:56:f3:ab:c7:96:78:
59:23:f9:ca:42:42:61:1f:e7:8c:13:09:85:c5:8d:
24:bc:7f:97:b7:93:51:da:2e:be:b1:a5:49:02:30:
4b:18:1a:8a:e7:cf:08:bb:0f:2b:3a:c5:10:aa:a9:
ef:c5:cd:82:fd:a3:02:50:ed:4e:9a:a0:b4:a7:4a:
b8:b3:e6:85:55:d6:9b:1e:6f:dc:d2:49:d5:ef:e0:
de:c8:79:c0:72:41:7d:59:e6:75:41:a6:b0:37:a7:
5e:dd:8f:ed:b3:67:db:0a:56:c2:e2:5b:e0:8a:08:
87:d1:21:f1:98:4e:b1:d2:4a:0a:fe:ee:25:de:9e:
52:83:0e:e9:3f:9c:11:d4:77:cd:83:43:e4:ad:91:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:65:2F:BE:E9:20:E4:96:7C:5C:3C:DA:18:E8:14:61:C6:00:7F
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/FE9lL77pIOSWfFw82hjoFGHGAH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.72.0/24
185.42.232.0/23
Signature Algorithm: sha256WithRSAEncryption
69:ae:0c:06:48:f4:a4:7b:d6:0b:a2:4f:91:e5:1f:d1:84:a6:
bd:8f:e9:6e:07:33:13:41:1e:0d:24:88:21:d3:31:fc:d6:7b:
fa:cb:ce:95:be:82:e1:a8:73:54:4d:b4:ef:56:f1:ae:f0:d7:
f3:b1:8f:4c:72:34:34:99:9a:00:af:27:a5:e0:6a:9c:97:eb:
39:b0:80:36:ca:75:ed:16:44:88:c3:c9:89:0b:e9:1e:ec:d7:
44:8b:ea:29:ae:8d:b3:c9:f7:85:97:cd:ef:8d:4f:81:1f:6c:
78:2a:d0:c0:66:0b:6e:4b:7d:cc:53:10:c8:d4:2b:62:db:8e:
d8:e5:bc:42:d0:65:4a:77:ba:73:21:9d:a2:79:22:74:05:36:
e2:37:9f:22:c0:1a:4d:d2:3a:37:55:ba:de:ca:36:d8:14:ca:
bb:e2:3b:9b:9b:04:84:26:a3:5d:b6:5d:a2:d6:4b:10:6e:54:
49:36:2f:05:40:a6:32:4a:e7:7e:ea:87:a9:ef:77:8e:01:f8:
6b:38:8b:04:e1:9b:60:65:37:a1:3e:ef:a9:b6:7a:ff:4b:93:
82:b4:94:d5:ff:5d:da:97:4b:b9:0d:08:b5:28:b7:0d:f7:fc:
e5:fb:92:a6:ef:a4:fa:cd:a3:53:e3:68:ba:2e:92:56:4f:5a:
66:85:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:27 2024 by rpki-client on console-fra.rpki-client.org