Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/Fi_mTkT33r_KHTqkWtjVgCEbLGw.roa
File: Fi_mTkT33r_KHTqkWtjVgCEbLGw.roa (raw, json)
Hash identifier: Bf/fRWw5+Fau09vB1lTqgkdZ+DJ3G1K92A7afKGyxuU=
Subject key identifier: 16:2F:E6:4E:44:F7:DE:BF:CA:1D:3A:A4:5A:D8:D5:80:21:1B:2C:6C
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 018CC80176367C13E579A1E70DD9A11BA45C
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/Fi_mTkT33r_KHTqkWtjVgCEbLGw.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 195.122.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:76:36:7c:13:e5:79:a1:e7:0d:d9:a1:1b:a4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162fe64e44f7debfca1d3aa45ad8d580211b2c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4d:2b:59:dc:04:a7:05:ec:1e:7c:cd:6e:a9:
10:4a:05:63:84:ca:b4:0f:aa:88:2c:e5:93:cb:5b:
4c:6b:ab:d0:da:6e:95:b6:61:b9:98:a1:33:cb:a4:
2d:63:bc:a5:8f:18:b9:40:a0:be:21:39:f3:ea:ef:
7c:cb:57:99:84:67:f0:24:05:26:08:b1:ff:25:9c:
b7:e4:06:8d:42:50:12:09:ea:5c:c8:58:d0:f7:c0:
c9:a1:b3:32:a7:7e:e5:d9:31:b7:2a:f0:59:00:54:
19:3b:0b:6f:43:75:fa:2f:47:44:e5:e2:a9:ba:e3:
cd:03:0c:9c:64:26:41:1d:ba:85:9d:70:b6:bb:71:
56:80:cf:4a:be:f4:bf:5d:21:96:b7:1a:0a:c2:00:
d4:ad:d0:16:75:e3:3a:ba:d3:db:ff:5c:7d:c8:af:
6b:8f:59:18:4c:1d:ab:38:51:18:3b:0e:11:12:6c:
79:d2:e0:ce:4b:a2:c7:20:07:67:84:31:9d:1d:99:
01:ad:1f:47:a7:2d:05:c6:14:9c:e0:a7:cb:cb:52:
a7:e1:d1:64:2c:98:d4:13:1a:3f:c1:bf:15:03:2f:
a3:53:5b:c6:67:66:ce:38:69:b4:fb:df:6b:90:83:
e7:28:c2:01:e8:f5:1a:5b:79:8b:c7:0f:36:65:78:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:E6:4E:44:F7:DE:BF:CA:1D:3A:A4:5A:D8:D5:80:21:1B:2C:6C
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/Fi_mTkT33r_KHTqkWtjVgCEbLGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
66:53:12:f7:c8:b5:4e:64:2e:ae:bd:85:5a:2c:e0:10:ff:ca:
71:b2:69:c0:bc:25:de:f8:4f:b5:59:30:3c:9d:b9:ca:e8:b1:
a7:6c:31:86:97:72:db:c1:a2:9d:0d:70:41:e7:c0:b3:b5:80:
c9:78:b7:b0:5f:2e:ef:fd:41:85:e0:18:4c:d9:80:55:4e:a6:
9f:b9:e6:16:4c:92:4b:81:dc:40:a2:76:bd:57:86:e7:a9:46:
de:04:76:39:95:5c:41:5a:32:1a:a7:96:08:cb:73:ed:91:27:
39:f2:0b:bc:57:fd:4f:8b:56:0d:82:98:4a:8c:3d:db:49:54:
b5:ce:94:22:25:f8:1f:10:98:ab:82:12:e6:9a:a0:71:0d:df:
e9:52:69:ed:d2:18:67:a3:7a:9f:ea:75:d8:f4:26:fc:06:7d:
b0:09:ad:04:69:18:14:e1:60:cf:e2:73:a7:69:97:c8:04:ac:
49:7f:c7:e2:55:25:4c:6c:ea:bc:e0:0f:1d:5f:13:7f:60:11:
69:a2:80:23:e6:fb:14:d6:c7:ea:e6:d1:4f:37:6f:50:ec:c7:
a5:86:52:e8:9c:b3:47:88:2c:b3:12:d9:48:bb:94:30:36:01:
7a:ff:25:e0:08:7b:d4:c1:7f:96:a9:8e:3e:76:62:46:09:3e:
9a:ab:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:44:59 2024 by rpki-client on console-fra.rpki-client.org