Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/FDL9nXfJsxy4B0eTjrkmhxtqIQY.roa
File: FDL9nXfJsxy4B0eTjrkmhxtqIQY.roa (raw, json)
Hash identifier: zsJGlFFxdMa9D+vJl6WrwtfteEMMNeJ0plGG4w6nRFQ=
Subject key identifier: 14:32:FD:9D:77:C9:B3:1C:B8:07:47:93:8E:B9:26:87:1B:6A:21:06
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 018CC86FEFC632605BE4F49EA76382A94B12
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/FDL9nXfJsxy4B0eTjrkmhxtqIQY.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 91.140.128.0/17 maxlen: 24
194.54.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ef:c6:32:60:5b:e4:f4:9e:a7:63:82:a9:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1432fd9d77c9b31cb80747938eb926871b6a2106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:49:aa:50:07:60:27:ea:03:61:76:c1:21:
be:9c:4d:d6:ce:5f:ba:67:f5:0d:76:21:b0:07:84:
3c:31:6a:d7:57:a8:b6:00:0f:f6:da:8f:8b:fc:6b:
2c:e9:24:d2:ff:79:e6:35:7c:16:3c:28:4a:3b:45:
94:0d:38:c6:a2:e6:d4:40:24:28:ec:a3:80:d8:ca:
4f:38:22:fe:df:de:a7:32:3c:ae:26:d4:53:ad:ac:
fc:a3:16:e7:e7:20:72:67:71:18:0f:3f:58:f7:a1:
b3:ef:b2:dc:ff:df:d5:9f:a7:60:97:df:53:34:bd:
f1:f3:66:69:50:ab:a2:4f:e2:c6:6d:bc:bd:de:d5:
3e:6d:3f:63:97:ba:7b:4a:86:35:59:bc:28:3d:50:
0a:fa:0a:0e:5d:19:d3:ec:71:b6:9a:d0:72:1f:59:
cb:bf:7f:e7:2b:ca:92:83:0b:00:cd:32:0a:aa:7e:
37:eb:e1:d1:f5:51:67:cb:cc:3e:94:2d:11:7a:8a:
3a:12:57:d0:3a:47:9b:f7:49:56:05:82:8a:9b:a4:
95:64:fe:8b:1f:3a:2b:b1:1b:9c:ea:8b:47:74:7c:
b6:b0:54:c7:d6:d0:0c:9d:25:54:d0:73:13:e7:85:
83:7f:1d:ab:96:47:7b:21:f6:c7:01:93:71:3e:28:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:32:FD:9D:77:C9:B3:1C:B8:07:47:93:8E:B9:26:87:1B:6A:21:06
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/FDL9nXfJsxy4B0eTjrkmhxtqIQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:07:20:db:90:7d:ee:2f:20:fe:42:a0:95:65:bd:a8:66:58:
41:ad:12:1b:6d:a3:f0:4f:de:f1:ff:38:de:aa:6e:24:f6:43:
90:58:d1:74:b9:2c:6a:c3:63:1a:1d:bb:70:2b:2d:5d:e3:75:
db:66:43:3a:7f:9a:3e:c7:e5:26:e1:89:bd:df:a6:a9:fe:cf:
3b:7e:8b:04:a0:b2:36:2c:af:bc:ee:68:4e:23:1e:c0:ad:0b:
fc:0d:51:b9:f4:67:2b:2c:5d:89:49:bc:ae:f4:af:fb:47:e0:
5f:a3:68:4e:fd:10:1a:5e:ef:e4:07:06:62:26:3b:59:b8:94:
13:9d:8b:81:e0:d1:6b:59:1a:a2:f8:04:99:38:d9:ef:ad:5b:
3c:33:7c:64:6b:07:07:f3:26:fc:b2:ef:a3:4c:7e:f7:c7:75:
b9:38:0f:b0:92:7d:21:1b:ed:42:4e:96:ce:03:8e:51:ba:df:
e9:21:93:50:cf:a3:2a:7b:a7:a8:5a:be:38:ce:05:d0:90:d0:
17:29:d3:4f:3a:42:dd:83:44:66:f7:c1:6a:fc:ec:40:ee:10:
82:b4:6f:a0:cf:c4:89:39:34:b6:f8:6e:13:a1:ed:07:a0:32:
f3:27:aa:20:40:b7:4a:6b:85:fe:3e:3f:cb:b8:36:40:61:f7:
e4:1e:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:50:48 2024 by rpki-client on console-fra.rpki-client.org