Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/0q2GEwfjI60-v02l4UbwYfqKNDI.roa
File: 0q2GEwfjI60-v02l4UbwYfqKNDI.roa (raw, json)
Hash identifier: W8CuKOh9Xb8uw1owbUAqrOb8ZcLtI07qDmstdn1HVwU=
Subject key identifier: D2:AD:86:13:07:E3:23:AD:3E:BF:4D:A5:E1:46:F0:61:FA:8A:34:32
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CC56E1CE3F03A9612DA3AB0C0ED7C852E
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/0q2GEwfjI60-v02l4UbwYfqKNDI.roa
Signing time: Mon 01 Jan 2024 14:29:37 +0000
ROA not before: Mon 01 Jan 2024 14:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206244
IP address blocks: 213.169.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1c:e3:f0:3a:96:12:da:3a:b0:c0:ed:7c:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 14:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2ad861307e323ad3ebf4da5e146f061fa8a3432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:92:4b:93:6a:09:96:0b:a5:0b:53:0d:8b:
9d:a5:4a:66:0d:f3:6f:3e:04:ef:44:e8:3f:cd:0d:
cf:8b:85:3a:25:ee:15:e6:96:bb:c5:4c:4e:f9:d9:
18:31:39:21:e5:f4:e0:e3:c3:43:8c:ab:be:22:be:
7c:66:78:c7:63:0e:4b:64:9e:17:5a:05:ee:a8:78:
70:ff:aa:6f:7c:42:ca:16:f6:8e:9d:50:ec:be:5e:
cf:63:40:87:d1:c1:14:bf:d4:a8:82:2c:f3:bb:5b:
5e:7f:83:95:08:80:c7:20:a7:26:06:ce:c8:27:bf:
8c:46:46:54:f3:20:04:b3:03:1f:9a:88:21:e0:3e:
a0:97:dd:8f:ca:b4:01:49:2c:ef:42:ca:24:6a:27:
30:52:cf:54:5b:ee:2e:15:c4:7c:89:97:dd:04:27:
4e:6d:a0:b7:95:ab:b6:24:e9:53:5d:bd:57:6f:d8:
bf:2a:83:46:8c:f9:3e:54:7d:63:ad:5c:25:7a:54:
85:51:3a:a1:fe:9e:19:9d:32:5d:bd:43:e7:0f:01:
f2:c5:fd:35:65:29:38:c8:00:c6:6f:9d:53:fa:44:
a3:f6:20:d1:d5:35:01:1e:e5:eb:7a:da:64:1c:e6:
cb:f5:d8:6a:82:1d:f3:28:6e:a8:9f:46:8e:05:57:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:86:13:07:E3:23:AD:3E:BF:4D:A5:E1:46:F0:61:FA:8A:34:32
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/0q2GEwfjI60-v02l4UbwYfqKNDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f1:35:9a:39:1f:28:74:dd:cd:a7:12:cb:0a:29:da:b5:99:
2a:46:3d:43:68:89:7a:1c:69:a2:a0:13:10:3d:3c:88:25:f6:
c3:7c:ed:41:45:12:6e:1a:10:83:da:30:4f:bb:ef:98:ab:ed:
42:f9:8a:54:83:ce:f7:a0:00:d5:8c:2f:80:2c:3f:7e:76:84:
ff:69:b1:45:a3:f6:8b:41:8d:a0:d5:33:1e:a6:1d:d5:e1:d7:
34:5d:c3:db:0a:52:36:1e:f5:98:75:22:73:63:4a:6b:c4:ab:
d9:c8:67:5c:b0:80:4f:a8:bd:ee:08:ed:f0:1f:43:36:32:49:
49:9e:ef:ca:ad:20:c7:3f:9d:2c:fe:bc:7e:89:b5:97:f2:e0:
2a:f3:4d:5b:53:63:72:e6:73:da:72:35:30:34:fa:42:52:fb:
78:01:d9:14:61:b1:7c:87:b9:92:c8:ca:1b:07:59:66:f4:83:
41:aa:a4:b2:eb:f9:22:4d:98:24:d3:b0:e8:5c:41:e4:a0:42:
07:8e:50:76:f0:37:5c:5a:64:63:56:f6:de:d4:35:a9:28:01:
5a:e9:a6:31:ea:50:2e:7c:e2:40:5d:84:ec:3d:c4:dc:71:eb:
21:f4:9f:e3:3e:f5:40:2e:f7:17:98:ce:fd:f5:98:90:f9:fb:
6a:55:16:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:14:47 2024 by rpki-client on console-fra.rpki-client.org