Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/FPsi_qkS8Frq8iEFzxDE9ZOOw3Q.roa
File: FPsi_qkS8Frq8iEFzxDE9ZOOw3Q.roa (raw, json)
Hash identifier: 2KjaZQk3gAAPI/DQubEZdAD5mXtZAKFomwYWrj/e494=
Subject key identifier: 14:FB:22:FE:A9:12:F0:5A:EA:F2:21:05:CF:10:C4:F5:93:8E:C3:74
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 018CC500F5BE3B75CBB91B35FCABBC0A7B16
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/FPsi_qkS8Frq8iEFzxDE9ZOOw3Q.roa
Signing time: Mon 01 Jan 2024 12:30:23 +0000
ROA not before: Mon 01 Jan 2024 12:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 2a13:a287:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f5:be:3b:75:cb:b9:1b:35:fc:ab:bc:0a:7b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14fb22fea912f05aeaf22105cf10c4f5938ec374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:4a:d4:c1:e6:4a:d2:ac:05:f8:54:3e:61:
46:6c:ea:87:b1:05:a5:35:96:6e:38:9d:1a:8b:71:
78:eb:5b:5f:80:3e:19:9b:4c:63:70:b3:63:50:01:
ad:2a:31:fe:2e:cc:04:12:0c:c9:5b:86:9d:4d:2d:
56:46:cf:e9:8a:4d:17:33:57:24:91:eb:cd:93:25:
fc:c2:e7:f0:28:22:48:14:37:5c:a9:d9:8c:02:15:
8a:13:b3:77:d0:e3:aa:15:45:cd:9e:08:fd:b4:a0:
98:2a:a9:12:d4:a8:68:47:56:e5:d7:57:74:00:aa:
71:ce:d5:05:20:f3:e9:7d:b4:8f:8c:8c:f2:9c:2e:
ce:cd:14:f9:88:e8:15:e9:88:98:ac:da:04:27:a5:
b7:e5:ca:4d:82:ce:4e:9c:ca:38:69:e9:3a:10:64:
66:ea:8d:b5:38:08:f0:74:06:8e:86:fb:ea:98:72:
3b:a3:b2:d3:49:86:d6:7f:42:7b:c4:c0:45:3b:5b:
c9:69:e1:e8:36:48:6b:09:99:8d:8b:32:36:b3:1b:
4d:aa:28:a3:3e:ea:b1:35:c5:c8:5f:0f:d6:5d:f4:
d8:fa:56:59:36:75:a0:34:b7:8f:e3:79:c8:9d:ce:
0a:4a:c5:e3:b1:54:4a:49:f9:17:6d:04:0e:1e:29:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:22:FE:A9:12:F0:5A:EA:F2:21:05:CF:10:C4:F5:93:8E:C3:74
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/FPsi_qkS8Frq8iEFzxDE9ZOOw3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a287:8000::/33
Signature Algorithm: sha256WithRSAEncryption
dd:61:41:f6:92:97:34:ed:93:6e:43:85:ee:d2:0d:d0:5a:55:
5f:c2:4c:a0:f1:ba:e4:7d:6e:cd:a3:79:fa:8d:d5:97:dd:20:
63:de:0d:2a:bd:ef:c8:03:26:7f:f9:f7:60:ce:7b:ee:eb:20:
96:3f:e3:ad:c4:88:35:7c:2c:12:4c:b2:07:b5:54:c8:0d:7a:
81:d4:7a:5d:39:24:79:3b:89:4b:53:9d:3e:79:fe:0d:ce:b7:
bf:bd:9d:08:85:6b:af:3e:11:11:be:b0:00:91:6a:4f:53:8b:
5e:9e:59:f0:9c:fa:00:41:33:fc:2c:1a:05:e0:da:a0:d1:6c:
42:54:d5:ae:1c:11:6b:8f:f4:f8:69:b9:f5:a7:7b:b6:6c:07:
d3:69:c6:82:4b:23:7f:de:7a:62:b8:43:e3:f5:c6:23:f8:99:
4b:f2:6f:a4:9b:8f:af:80:88:68:05:a0:61:4d:16:3c:2d:69:
38:f5:e8:76:0f:b4:8e:ba:1e:08:4b:3f:7d:ef:cd:0f:80:c8:
27:1a:79:9c:b4:ad:ff:6a:dd:23:aa:35:1a:09:46:19:39:05:
0e:fa:6a:55:72:45:25:9f:4c:9a:bf:4d:09:cc:e8:0c:3d:c1:
22:87:50:00:8a:d0:2d:8e:b2:5a:3d:e5:2d:b8:e9:52:19:c3:
e3:cb:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:21:41 2024 by rpki-client on console-ams.rpki-client.org