Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/fQo8UZaljpdb8ptr1ZIJtGdc7bQ.roa
File: fQo8UZaljpdb8ptr1ZIJtGdc7bQ.roa (raw, json)
Hash identifier: uDWZ7obS8OjEEkR3eaLOuLUzEnYyrPlJgEA9+km8cHM=
Subject key identifier: 7D:0A:3C:51:96:A5:8E:97:5B:F2:9B:6B:D5:92:09:B4:67:5C:ED:B4
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 018CC8DE39E7587C7D5D84EF1D0EFC524B88
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/fQo8UZaljpdb8ptr1ZIJtGdc7bQ.roa
Signing time: Tue 02 Jan 2024 06:30:56 +0000
ROA not before: Tue 02 Jan 2024 06:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 193.35.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:39:e7:58:7c:7d:5d:84:ef:1d:0e:fc:52:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jan 2 06:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d0a3c5196a58e975bf29b6bd59209b4675cedb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:e9:56:dd:9c:ac:15:ab:13:9a:b3:78:75:
91:eb:4a:94:a4:44:b1:c1:69:60:b2:21:eb:1b:16:
43:31:1a:85:ae:6f:26:1f:11:e8:d8:7c:f5:57:8b:
3a:a1:a5:8e:64:29:2e:48:ce:b1:a9:a4:ad:a8:01:
f3:70:8b:c9:64:dd:58:92:f8:7b:18:b7:69:b4:a6:
e6:cf:90:98:4c:a8:1d:17:fd:2f:59:d9:7f:ad:39:
de:4a:9a:a5:e7:34:e7:d8:6a:98:1f:6e:b1:e3:8a:
44:a8:2c:42:5a:2a:5d:9f:15:23:1f:ec:df:46:89:
22:1e:bb:27:6d:0d:21:df:39:aa:f6:87:3a:49:18:
24:78:eb:d4:54:fc:9a:ac:63:0f:e3:a4:20:e8:03:
00:ae:a1:85:43:52:1b:78:5d:b9:91:63:4f:62:f2:
84:af:b6:f2:11:0d:78:a5:b9:c8:0f:54:cc:d0:2f:
db:82:37:ba:a2:78:24:ae:62:42:be:82:98:f8:e9:
47:45:cf:fc:fe:1f:94:90:0a:a0:95:0c:e2:f3:4f:
4e:fa:84:11:27:65:b8:d9:ae:4a:15:d7:28:e0:c6:
40:9b:2b:1a:b2:0f:a1:12:14:5e:a3:00:25:ff:0d:
e3:19:4c:dc:f0:7b:4d:68:77:13:cf:70:ef:0c:06:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:3C:51:96:A5:8E:97:5B:F2:9B:6B:D5:92:09:B4:67:5C:ED:B4
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/fQo8UZaljpdb8ptr1ZIJtGdc7bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:3d:e5:92:24:8a:02:da:73:8f:c6:38:74:ee:ca:45:51:c3:
35:68:a7:7f:f8:f8:61:8b:59:db:9e:9e:1d:de:51:0a:91:40:
73:59:24:a3:fe:90:94:bd:f9:d2:3c:cc:f9:91:e7:d0:74:83:
47:cc:da:fe:16:3b:92:08:76:f8:1a:ff:60:1a:53:4b:00:34:
a2:d3:48:6c:a7:64:48:6e:88:4e:b2:df:db:1b:54:e4:22:c0:
62:91:50:85:8d:08:5c:af:e2:81:33:1b:f6:98:90:4b:df:c0:
f8:b5:c5:e5:73:cd:7c:0d:2e:61:ff:5d:fc:9a:46:eb:d1:ca:
40:5c:41:80:3b:04:19:c3:0d:e6:d2:63:44:e5:90:33:47:1c:
40:35:3e:9d:e8:bf:8e:91:3b:9a:8b:9d:d8:3a:38:63:0d:df:
c2:a6:bd:ee:de:3f:b8:b7:2e:02:0f:f0:22:77:f5:94:2a:50:
4f:92:5c:df:83:41:1c:a8:46:8c:9c:62:a4:39:65:5c:72:6c:
ac:80:79:99:be:d6:b2:0d:55:02:71:9a:c4:87:93:8e:26:ba:
73:9b:24:39:10:4e:b3:40:82:fb:41:52:8d:2c:be:2c:10:90:
95:f1:e7:9e:80:c1:9e:1b:0d:b8:02:fd:ec:69:b7:48:f7:f0:
77:4d:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:49 2024 by rpki-client on console-ams.rpki-client.org