Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FF0BAb52t_eershlbZUR4juZHx0.roa
File: FF0BAb52t_eershlbZUR4juZHx0.roa (raw, json)
Hash identifier: QnoU5q6rWXbwsWIlRq+eKrrg8wZKEVngym0JAYxUVno=
Subject key identifier: 14:5D:01:01:BE:76:B7:F7:9E:AE:C8:65:6D:95:11:E2:3B:99:1F:1D
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 018CC34928B9A0A0F7A75C5B8408B14C20C4
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FF0BAb52t_eershlbZUR4juZHx0.roa
Signing time: Mon 01 Jan 2024 04:30:00 +0000
ROA not before: Mon 01 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.138.31.0/24 maxlen: 32
2001:7f8:56::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:28:b9:a0:a0:f7:a7:5c:5b:84:08:b1:4c:20:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=145d0101be76b7f79eaec8656d9511e23b991f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:00:7a:9d:5f:fe:ec:10:3e:fc:94:88:43:
b4:c6:77:86:dc:b3:2b:55:1e:7c:54:f9:88:09:cc:
4c:48:d6:7c:09:7e:d0:5c:df:cc:2d:7b:0f:cc:da:
71:9f:b8:d5:12:cc:cf:8b:a3:d0:a3:05:f6:d3:f5:
0d:1c:f5:5f:75:61:07:86:3e:a3:35:e2:00:f0:c2:
c6:cb:09:1f:c9:55:53:99:d5:32:98:dc:58:13:c5:
cb:21:01:ce:31:56:cc:e3:fb:a9:34:7b:c9:95:85:
cc:e5:8b:39:4f:9a:d2:29:96:22:21:a7:e2:24:e9:
40:45:5a:46:ef:f7:f3:c7:9b:45:20:d3:32:b4:04:
e7:df:82:6c:63:19:21:8c:cc:b5:cb:57:28:a4:d4:
ca:a3:7d:64:f6:62:9c:a2:c8:98:c9:d1:54:7e:fe:
a8:30:db:3f:25:5c:95:b7:7c:77:02:f6:5b:a9:37:
17:60:14:d9:29:ef:f7:f4:e2:2e:da:11:f3:7a:c7:
ec:2f:9c:63:16:18:b8:38:f3:c8:76:14:b6:6b:81:
24:16:94:74:de:ad:d3:b1:6f:9b:31:d3:fe:32:89:
5c:3e:09:03:e6:82:85:a8:ee:50:2f:88:c8:35:3a:
b2:58:84:78:60:1f:cb:ae:9e:05:db:69:1d:eb:d3:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5D:01:01:BE:76:B7:F7:9E:AE:C8:65:6D:95:11:E2:3B:99:1F:1D
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FF0BAb52t_eershlbZUR4juZHx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.31.0/24
IPv6:
2001:7f8:56::/48
Signature Algorithm: sha256WithRSAEncryption
31:9c:b3:8c:4a:c6:34:e1:b0:d9:d4:3e:dd:7f:8e:14:25:04:
a4:77:7c:c2:55:50:2f:1e:16:da:5b:0a:38:13:85:47:77:2b:
33:35:d4:69:c2:f5:39:70:4d:3a:32:ae:cc:de:51:e0:5b:4d:
25:35:82:0f:01:30:7f:da:6e:c4:f9:55:9d:4e:8f:47:83:79:
9b:a9:fe:53:a4:ba:4f:c5:d9:5b:82:be:73:12:2b:95:e6:cc:
9b:97:0f:64:dc:c9:d0:64:42:cb:2c:42:b1:81:c6:1f:57:75:
62:5c:15:be:43:29:f3:c4:eb:f6:f6:59:32:b9:c1:0c:e2:b8:
1e:c8:75:6f:b3:7d:19:eb:7c:af:f3:3c:bb:12:da:c2:c6:89:
2f:87:cc:b6:6c:83:49:1f:90:ab:2e:6f:ff:27:ae:2c:00:01:
6c:03:ca:e6:6c:da:93:db:5c:c5:b4:7b:ed:84:52:f0:db:0f:
15:2b:de:18:03:30:27:ac:79:2f:47:85:af:2d:17:98:d2:19:
c5:f7:50:27:5e:9f:75:46:2f:80:fc:e4:65:01:04:c7:82:22:
31:29:51:70:f8:d3:68:e3:a8:1b:e7:4c:f7:2c:dd:9c:cc:21:
38:0e:b3:a3:17:9e:c8:29:cd:7d:46:45:80:ee:4a:af:db:48:
78:ec:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:55:31 2024 by rpki-client on console-ams.rpki-client.org