Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/0Mex44MRoFLHSwNhuaPB71-KtrE.roa
File: 0Mex44MRoFLHSwNhuaPB71-KtrE.roa (raw, json)
Hash identifier: 0WA5s2hWIqvWfDEM8od7DVBlFjOGEc4kvaxiGUeF3kk=
Subject key identifier: D0:C7:B1:E3:83:11:A0:52:C7:4B:03:61:B9:A3:C1:EF:5F:8A:B6:B1
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 018CC50129E648851C0B5C6D0C7529EEF58E
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/0Mex44MRoFLHSwNhuaPB71-KtrE.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61003
IP address blocks: 193.108.117.0/24 maxlen: 24
193.108.118.0/24 maxlen: 24
193.108.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:29:e6:48:85:1c:0b:5c:6d:0c:75:29:ee:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c7b1e38311a052c74b0361b9a3c1ef5f8ab6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:b9:54:13:85:ba:33:be:4b:56:46:5f:a8:
84:8f:14:f8:04:9d:14:48:79:75:2c:0f:cd:15:61:
39:5f:2f:cf:d5:23:30:4c:2c:de:5a:27:16:2a:8f:
58:8b:b3:e1:51:ea:af:5c:2b:11:13:c8:a9:88:74:
e7:72:8d:93:bd:2c:c8:ff:5e:2c:56:a7:fb:64:5c:
71:e6:0d:a4:d0:90:3a:33:c3:cc:8a:94:e6:23:63:
7e:95:2b:82:d2:c7:91:97:f8:d6:b7:eb:fa:5a:12:
2f:6c:87:0b:0c:e2:f5:74:de:94:b9:6b:08:1b:51:
67:6a:80:30:cd:f3:be:e9:c4:5f:82:f6:94:d5:43:
b1:7d:c1:4d:21:55:25:f9:97:d8:7f:0c:17:a6:62:
27:2d:ad:24:48:73:6c:da:69:e2:2e:ad:e3:de:2c:
19:23:fc:53:e6:dc:18:7e:aa:eb:9d:c8:16:4d:e8:
1f:6a:8c:41:35:e8:92:8d:3e:87:f6:19:a9:1f:13:
b6:1c:a1:da:52:ae:52:6a:41:81:0c:0b:9b:ce:f9:
f4:43:30:89:aa:6d:28:51:a4:48:6b:f2:23:a2:0f:
e1:89:23:9b:f7:fc:91:ec:c0:28:9b:55:9b:10:0f:
ba:95:23:dc:f6:87:ec:89:bf:8f:86:34:05:b0:77:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:B1:E3:83:11:A0:52:C7:4B:03:61:B9:A3:C1:EF:5F:8A:B6:B1
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/0Mex44MRoFLHSwNhuaPB71-KtrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.116.0-193.108.118.255
Signature Algorithm: sha256WithRSAEncryption
08:f0:7c:a3:39:94:a0:11:84:d1:dd:82:3a:dc:27:71:11:81:
42:48:a1:30:d8:28:fd:aa:ef:8b:95:46:3d:b9:ae:77:50:4a:
d4:51:0d:29:76:cd:79:f3:24:66:06:14:4e:b8:68:c6:7a:96:
8c:6c:69:20:ef:71:cd:ba:b3:70:bf:f5:35:ea:97:07:34:8e:
d8:87:77:04:13:b2:e9:15:4b:2f:4b:5c:a9:39:ee:d4:5c:3e:
a5:2a:54:c1:4f:59:76:75:45:5e:fa:c0:33:dc:8e:5c:40:6d:
c1:f3:9f:03:f5:37:30:ce:56:4e:33:83:62:af:a0:a2:c0:17:
ae:83:57:10:ce:7c:ed:48:ad:af:d8:bb:ea:62:b9:75:5e:93:
8e:bd:74:05:2a:09:d0:be:2c:d0:ad:14:00:1c:3e:8e:93:5d:
a1:68:9d:6e:e1:ed:d4:e4:70:94:eb:ef:f2:3d:a3:4a:44:43:
47:87:25:29:79:89:87:e1:e7:ba:96:69:92:90:a3:0f:e7:20:
f5:0d:df:ea:a1:31:8d:08:f1:10:e1:e6:6f:de:63:b5:5a:9b:
07:da:da:16:54:91:09:58:56:5e:dc:c2:d0:58:f7:05:7a:2b:
2b:36:03:71:69:e0:d0:36:7e:7b:b9:29:39:52:d9:73:b0:8b:
29:9b:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:17:42 2024 by rpki-client on console-fra.rpki-client.org