Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/FCfQfkaEwlpJDTB5m3uxkZZ3-zM.roa
File: FCfQfkaEwlpJDTB5m3uxkZZ3-zM.roa (raw, json)
Hash identifier: ZVUh82rLI/XdllSvRNpYnu5TNIvuYWoSeUyg+sNnd+A=
Subject key identifier: 14:27:D0:7E:46:84:C2:5A:49:0D:30:79:9B:7B:B1:91:96:77:FB:33
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018CC26D1B0BF465C064105647F6DDAEA6F3
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/FCfQfkaEwlpJDTB5m3uxkZZ3-zM.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57107
IP address blocks: 194.190.129.0/24 maxlen: 29
194.190.128.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1b:0b:f4:65:c0:64:10:56:47:f6:dd:ae:a6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1427d07e4684c25a490d30799b7bb1919677fb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:b0:d6:f3:59:9a:bf:aa:81:b5:c4:35:a3:
3a:7c:24:cf:2f:b8:10:c6:14:63:d3:e3:29:7e:b2:
d2:b4:c8:2c:9c:e3:ee:92:ad:20:29:a7:1d:62:8e:
84:e7:68:e3:00:74:3d:24:77:68:79:6f:2b:ea:fb:
2b:bc:9a:e6:9f:3b:65:4f:fd:04:2e:ba:f0:86:cb:
78:e7:1f:1c:ee:a2:b0:65:3b:28:36:e9:8d:3c:f7:
bd:ef:f3:7c:00:7e:61:e8:e5:48:96:82:39:85:9d:
4d:6e:98:8e:a8:6a:17:75:69:ec:03:a9:d6:7e:3f:
ce:65:b7:ef:e2:6d:bf:50:0a:40:54:a9:51:3d:18:
cd:72:3b:39:c6:17:9d:61:3a:b2:51:af:b5:d1:fd:
a1:1a:17:f7:1f:15:1f:73:e9:0e:e0:d5:50:6d:e4:
cb:6c:fc:1b:8a:93:2b:e9:85:60:35:67:e1:2f:7c:
55:89:c9:b9:eb:20:9f:17:7f:9e:2b:59:4c:9f:d7:
c8:a1:35:d9:9e:12:ac:99:26:c6:78:7e:b7:b4:d9:
33:51:cb:49:ec:b6:a6:e5:ee:81:4f:b8:47:19:12:
24:e4:d5:14:58:53:39:cb:c5:5e:7e:06:9f:fe:f8:
2a:19:e4:89:4c:ce:d6:62:08:d8:11:d8:28:5a:4f:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:27:D0:7E:46:84:C2:5A:49:0D:30:79:9B:7B:B1:91:96:77:FB:33
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/FCfQfkaEwlpJDTB5m3uxkZZ3-zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.128.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:30:c6:c8:73:2f:88:b1:62:1b:f8:96:16:80:88:eb:99:ee:
35:e8:8b:ce:ea:3c:32:09:32:31:e2:54:dc:8f:0c:8b:d7:cc:
f3:23:b8:a4:b3:66:d6:37:a7:3c:5e:fe:02:83:75:9f:ce:d6:
3c:f3:7f:d8:0f:8c:20:31:ed:9f:21:4e:93:f7:3f:08:25:56:
51:c8:e3:ee:d3:92:28:e8:c3:91:40:95:4e:6b:c8:42:df:b5:
1d:a9:0a:3e:ea:7e:6a:ce:c5:6b:b6:77:8d:ad:31:d3:45:39:
6b:30:1f:de:e0:aa:fe:92:69:d6:1c:db:17:06:b7:bc:75:3e:
dd:12:6b:19:d6:18:ae:75:ff:d2:0f:92:d9:b2:ea:eb:a6:35:
b6:a4:ca:d6:29:8b:f1:c4:44:79:68:ce:db:37:40:82:73:28:
30:76:2b:f4:87:99:30:cd:d7:7a:13:c6:1f:a4:4e:c3:bc:26:
a5:9f:e9:51:a9:e0:25:f4:ce:d1:7e:22:e6:cb:5f:5f:39:ea:
00:97:72:c5:14:d3:d1:00:bc:91:b5:d6:0f:85:e1:ae:b2:06:
80:57:1b:54:03:b3:42:07:76:ad:0c:31:0b:72:64:02:65:7a:
79:7e:b0:0b:0d:ab:d8:e6:98:76:a6:d7:6a:e0:f2:b3:14:6c:
c7:4f:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:05:39 2024 by rpki-client on console-ams.rpki-client.org