Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/FFFEI0feF1we-y4XDtZFTqivdRU.roa
File: FFFEI0feF1we-y4XDtZFTqivdRU.roa (raw, json)
Hash identifier: IQq1O8QQvg3aIDJIhb4dePDf18TvdXdk6kzIvZMXBQ0=
Subject key identifier: 14:51:44:23:47:DE:17:5C:1E:FB:2E:17:0E:D6:45:4E:A8:AF:75:15
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 018CCA99E799DDEEBC4E125DCF0EDA98FC70
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/FFFEI0feF1we-y4XDtZFTqivdRU.roa
Signing time: Tue 02 Jan 2024 14:35:33 +0000
ROA not before: Tue 02 Jan 2024 14:35:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31396
IP address blocks: 193.30.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:e7:99:dd:ee:bc:4e:12:5d:cf:0e:da:98:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Jan 2 14:35:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1451442347de175c1efb2e170ed6454ea8af7515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:33:7c:60:87:8e:b8:dd:09:e1:67:d0:3a:
05:58:4f:74:97:76:e0:87:c2:f2:6d:b4:c9:b1:8b:
6b:83:73:ca:bd:f2:f8:d3:c8:4b:99:87:f4:94:12:
27:a9:48:45:cf:ea:4b:33:56:ef:f4:fe:f8:05:ac:
0c:14:b1:6a:38:48:5c:1d:0d:d2:8e:65:bb:16:d1:
da:c9:01:6d:43:e0:d6:4d:ea:a5:6d:41:39:3b:40:
b4:f2:a2:f0:09:0b:c2:20:09:f3:60:4a:4e:d3:aa:
fe:dc:33:46:86:7d:01:57:e0:93:16:2e:cc:b6:b1:
f3:31:27:a7:cb:dd:49:68:f5:34:32:b7:08:45:af:
83:cc:e6:b0:81:56:95:fd:72:52:04:64:3f:1c:21:
b0:30:17:28:1d:7b:2f:34:c4:06:e3:2c:fe:0e:df:
71:b6:da:73:5b:51:36:63:01:c5:2d:40:a6:a0:08:
8c:43:26:af:1d:c0:b6:3b:59:7d:ac:12:03:36:8a:
7a:20:e1:b4:26:08:9b:43:67:f3:86:fa:fc:9a:91:
b7:d9:f8:16:3a:d6:b8:00:be:37:48:a0:6e:48:c4:
ea:c0:58:70:2b:2a:a4:b7:d2:7c:db:c5:c8:58:58:
e1:46:c1:c0:d0:d8:5e:0c:e9:c9:b3:59:7b:c4:0a:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:44:23:47:DE:17:5C:1E:FB:2E:17:0E:D6:45:4E:A8:AF:75:15
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/FFFEI0feF1we-y4XDtZFTqivdRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.42.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ff:1b:38:12:49:9f:43:ac:e3:f6:f0:85:50:ef:ab:1f:66:
ec:db:ae:7f:ad:c9:90:35:95:de:d5:90:95:3d:f0:89:c4:32:
b4:e2:bb:29:dd:d0:47:d4:78:d7:b2:55:c6:84:8f:ca:e1:93:
6b:a6:f3:9e:85:ab:97:c2:95:d9:c8:dd:b8:f0:e2:e4:11:cd:
64:ac:c6:23:0a:d2:7b:71:cf:0e:4c:7b:82:de:18:6e:c2:9f:
41:f6:51:7a:ed:77:9e:d5:ac:7c:13:14:a5:05:15:03:bf:fd:
f8:b2:e6:c0:83:38:67:f9:26:a8:ea:77:e6:61:91:91:8d:01:
83:bf:27:77:d6:80:1f:6c:d5:ac:3a:9f:b6:89:cb:d2:3a:2f:
68:af:a3:d8:2b:9b:ce:bc:73:d2:16:28:7d:ea:71:fd:36:19:
ef:46:c7:f8:94:d8:a6:d7:e2:7a:26:62:e9:bc:00:9b:99:c8:
b8:d4:41:04:42:d2:af:85:20:1b:7f:a0:fe:c1:c0:5e:91:b8:
51:d4:a5:c4:29:e4:73:1d:68:ef:2c:65:c4:d5:7f:fd:18:0d:
2d:e7:70:d7:b4:c4:ba:c9:37:cb:81:6c:c3:e5:6a:74:1b:71:
a0:14:56:de:bc:3f:5b:6e:79:39:4f:43:5d:11:ec:13:15:17:
3f:1d:3f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 17:30:37 2024 by rpki-client on console-fra.rpki-client.org