Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/i6-BWqM-pso1n7P1up5fzYb3K-c.roa
File: i6-BWqM-pso1n7P1up5fzYb3K-c.roa (raw, json)
Hash identifier: SmSPKT91ttcc/cWR7vBIxvj7QvQosp4NdzdKlEwpj4g=
Subject key identifier: 8B:AF:81:5A:A3:3E:A6:CA:35:9F:B3:F5:BA:9E:5F:CD:86:F7:2B:E7
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CC56E1A3B923BB8DEE58A647F160AE3D9
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/i6-BWqM-pso1n7P1up5fzYb3K-c.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20521
IP address blocks: 213.169.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1a:3b:92:3b:b8:de:e5:8a:64:7f:16:0a:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8baf815aa33ea6ca359fb3f5ba9e5fcd86f72be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:b5:42:6b:3a:77:fd:7a:b7:b6:72:18:23:
a8:55:b6:89:5c:9b:51:25:61:78:3b:55:41:9a:b1:
61:ef:21:c7:b9:90:21:75:ab:3f:ec:8a:11:94:7f:
16:e4:4d:d7:b7:0c:52:86:9a:16:e7:d2:35:5a:9a:
89:2a:29:f9:71:01:be:cd:57:6d:36:0a:d9:bc:7b:
06:cd:7a:5a:9a:22:de:78:71:63:df:1c:b1:15:e0:
13:c7:bc:6e:82:1f:af:78:5f:62:33:22:2e:2c:3f:
32:76:c5:45:2c:c4:0d:6a:2d:d1:39:f7:3a:19:f3:
3a:27:b2:aa:09:d1:47:12:00:68:84:73:39:c7:e6:
0c:64:81:8e:e0:87:1d:02:06:24:2f:02:88:8b:02:
52:2c:7f:53:c8:1a:6b:3e:9f:2f:d8:6a:bd:fa:0a:
b3:1c:b5:96:85:bf:f2:30:7b:a0:3e:cb:32:ea:43:
51:12:c7:51:6d:85:cb:78:d1:ed:48:d5:8c:c1:d5:
f1:9d:ab:0d:30:07:d7:63:7d:71:3d:2a:c9:1a:b5:
cd:df:10:be:04:bc:aa:39:be:33:36:16:0f:54:32:
fc:22:bb:c7:1c:4b:d3:61:95:5b:e6:b6:e6:b8:12:
e1:da:ca:1b:ce:20:eb:e1:f6:73:24:57:34:5d:92:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:81:5A:A3:3E:A6:CA:35:9F:B3:F5:BA:9E:5F:CD:86:F7:2B:E7
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/i6-BWqM-pso1n7P1up5fzYb3K-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3b:33:4a:b1:01:e5:52:57:02:34:4b:01:e1:2c:ab:0f:d5:
77:0a:b2:71:df:64:4c:af:64:93:8c:e6:f8:00:43:d3:df:d5:
0b:ab:44:6d:52:15:d0:8a:b8:06:7f:1e:17:72:58:32:0a:fb:
55:7b:ce:c1:e4:a8:2c:20:89:e1:ce:85:c9:d6:bc:94:b7:f4:
82:78:3d:59:64:7a:09:3b:68:3e:ba:27:29:ae:8e:ad:ad:2f:
0f:3d:a8:40:31:0f:d2:8e:89:83:4b:31:54:c5:ca:05:b4:53:
ee:98:f8:a9:c7:34:a6:8c:8b:0d:0f:5a:29:cb:57:46:b5:1a:
92:ad:c6:47:b7:47:f2:bc:d5:c3:df:ca:5d:f9:cf:00:a9:04:
92:7a:b7:e0:e2:dc:1d:f6:56:22:21:c3:53:99:87:28:38:9d:
d6:2b:67:23:37:96:86:5a:7d:5e:3b:ea:ff:3e:c0:96:d3:b5:
51:3b:bf:84:18:65:fa:d0:f5:22:84:20:d7:d5:41:39:a2:6d:
ae:8d:d9:85:5c:5e:47:28:e1:95:f7:08:a1:6d:71:43:76:cc:
b7:8e:b7:14:ae:28:e2:65:ee:53:ac:24:95:57:dc:d1:8b:d3:
42:07:2a:3c:78:7b:53:22:6e:f4:72:d2:2e:39:71:56:38:2b:
93:c6:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:52 2024 by rpki-client on console-fra.rpki-client.org