Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/Fr9xuXdmTPrzfRBXmwn2Sptkr4s.roa
File: Fr9xuXdmTPrzfRBXmwn2Sptkr4s.roa (raw, json)
Hash identifier: lGkRewsGYiNWNIdnm1tydofRrF9heZ7cTaHRhq/tuQA=
Subject key identifier: 16:BF:71:B9:77:66:4C:FA:F3:7D:10:57:9B:09:F6:4A:9B:64:AF:8B
Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial: 018CC6B896D1E26957B4CEA546D448581084
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/Fr9xuXdmTPrzfRBXmwn2Sptkr4s.roa
Signing time: Mon 01 Jan 2024 20:30:35 +0000
ROA not before: Mon 01 Jan 2024 20:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8426
IP address blocks: 193.193.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:96:d1:e2:69:57:b4:ce:a5:46:d4:48:58:10:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Validity
Not Before: Jan 1 20:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16bf71b977664cfaf37d10579b09f64a9b64af8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fd:3f:76:85:54:7b:da:59:b6:94:2b:1d:0e:
ee:5d:45:e6:b4:fd:2e:9d:9b:2f:14:eb:44:fa:1f:
2b:e1:e7:24:86:0f:79:ab:39:44:af:bf:f8:a0:d7:
f4:03:e4:72:23:0c:c6:9f:05:6b:51:98:41:88:e5:
de:19:29:ca:2a:3a:9c:de:2f:7a:0f:3e:7f:9e:77:
98:4a:0d:aa:8f:db:f5:99:f7:00:76:9f:49:3c:7c:
27:09:8b:c7:bb:23:4e:28:8e:dc:e3:f4:35:d4:41:
a8:a1:4d:64:2b:b4:c0:e3:15:88:af:5b:73:bb:c9:
26:54:28:70:6d:91:9c:c6:19:06:94:3e:a6:74:13:
3d:78:b3:fa:32:52:83:c6:41:ed:5c:0e:3d:0c:ec:
98:e1:53:50:69:2f:fa:48:63:88:8d:83:e9:a9:98:
e2:6c:0a:bb:99:a8:e5:7b:10:d6:92:c9:5f:ed:8a:
43:81:3a:83:62:af:1f:68:ba:28:58:1b:d3:d0:38:
a4:40:72:e5:78:60:b6:bb:c3:14:58:f1:3c:c3:38:
f3:96:63:ed:39:88:bc:53:59:57:d2:98:d9:17:c5:
e7:45:6e:15:20:53:cc:51:24:47:64:a9:07:7a:46:
03:34:c2:cc:f9:8b:f2:69:7e:70:e8:fb:e3:e2:0b:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:71:B9:77:66:4C:FA:F3:7D:10:57:9B:09:F6:4A:9B:64:AF:8B
X509v3 Authority Key Identifier:
keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/Fr9xuXdmTPrzfRBXmwn2Sptkr4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:96:48:19:36:37:43:89:be:63:de:78:90:75:f7:ec:03:4a:
2d:16:11:70:75:d6:81:f0:65:33:59:e4:be:14:dd:d2:9b:5a:
8e:ef:d7:e0:2d:c4:98:2e:79:83:bd:27:7a:72:d1:5a:81:9e:
2c:0c:55:ce:d9:44:9d:d5:a8:3c:84:af:dd:ad:d4:e4:63:e0:
1a:3e:60:91:dc:0e:46:3b:be:09:d3:c6:ff:65:cd:d4:de:cd:
15:f8:31:29:e9:9a:6b:36:e5:c6:45:46:06:a0:bc:ed:7c:9f:
60:58:d5:01:0e:d9:6a:d4:7e:26:06:f4:dd:2a:d7:ff:6b:8c:
44:a4:e8:76:98:3c:dc:ae:69:a8:97:e8:c2:7a:5e:f5:8e:40:
7a:ab:e3:5c:28:d7:27:e2:5d:0b:d4:c3:76:ee:2e:73:be:01:
d1:4d:eb:da:98:9c:9f:8c:3d:8c:b1:7c:08:da:fc:91:1b:e1:
51:06:f5:fa:38:44:4e:91:86:eb:d5:02:6d:50:8b:35:1b:4e:
99:db:22:2b:03:8d:13:18:20:b0:86:43:69:a4:63:65:45:c3:
b7:57:2f:ad:75:ef:d1:63:d6:3b:ac:55:77:58:b5:b5:91:54:
a4:91:19:e0:d3:c4:da:7f:96:d7:53:2c:98:8e:85:53:72:37:
43:20:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:15:30 2024 by rpki-client on console-fra.rpki-client.org