Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/fe6RukFedJVFro-XVQw80lphPeM.roa
File: fe6RukFedJVFro-XVQw80lphPeM.roa (raw, json)
Hash identifier: n+sTbPEEmBm7ILPJKeppn126kb98KGFKkRgrqMZvXK8=
Subject key identifier: 7D:EE:91:BA:41:5E:74:95:45:AE:8F:97:55:0C:3C:D2:5A:61:3D:E3
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 018CC86F6A5CF04D40C80384AF7A2B0C3B92
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/fe6RukFedJVFro-XVQw80lphPeM.roa
Signing time: Tue 02 Jan 2024 04:29:54 +0000
ROA not before: Tue 02 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48012
IP address blocks: 91.208.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6a:5c:f0:4d:40:c8:03:84:af:7a:2b:0c:3b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dee91ba415e749545ae8f97550c3cd25a613de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:24:4a:b9:4a:f6:2c:30:7c:68:7f:7d:c3:
57:df:44:50:0f:23:34:f3:71:10:52:9f:2a:ea:8b:
ff:9f:ff:e4:e6:17:e8:4a:5d:da:95:af:c1:e0:33:
d4:60:b5:c8:2d:a3:70:97:0b:37:0d:51:9b:73:de:
66:8c:26:aa:b4:28:6e:ce:3f:01:56:0b:68:bf:58:
03:39:eb:a4:23:9b:7f:e8:00:f1:e5:76:16:43:49:
b5:d5:e5:32:57:9a:9b:13:20:43:0f:9f:a4:c3:c1:
be:3d:ec:6b:b8:e3:5e:ec:5f:ab:ef:b8:51:df:aa:
19:74:da:4e:f1:e9:4b:76:a1:ae:66:d4:2b:45:6e:
b6:65:42:d9:f8:e4:9a:6a:42:c9:5f:cb:9d:79:33:
04:32:dc:0b:df:9a:e4:ae:c8:42:89:d4:9e:52:14:
55:f6:f1:29:54:4c:c0:83:7a:d0:4f:ec:ef:89:4b:
74:b3:e1:af:82:2a:64:a9:fa:6f:3e:d4:ff:30:e4:
25:73:12:c2:6f:7c:89:9c:77:0b:15:30:d3:65:e0:
72:a7:46:89:26:a1:f4:c8:d8:5f:e7:88:b1:f6:21:
78:29:87:fe:1f:8d:92:c2:c8:3e:89:db:fa:db:ad:
ab:99:44:b1:23:fd:b5:b7:31:e9:89:74:7a:07:ea:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:91:BA:41:5E:74:95:45:AE:8F:97:55:0C:3C:D2:5A:61:3D:E3
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/fe6RukFedJVFro-XVQw80lphPeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:23:9a:75:31:f4:d4:a5:ba:eb:f0:8c:b0:3c:a5:16:5a:e9:
62:56:e3:c6:7b:db:41:68:e0:1c:a0:2c:57:cb:ef:06:4e:55:
87:cf:7e:b8:45:29:19:80:6c:e0:2b:90:4b:6b:66:8a:df:b4:
92:e8:c6:13:ed:f2:cd:69:e5:90:42:f7:0f:09:59:a0:75:f1:
bc:b4:dc:ba:c3:1f:83:f6:40:bb:61:40:b3:c2:56:b2:e8:80:
cc:80:46:24:f5:32:61:69:fc:f0:32:70:6b:2f:09:98:22:2a:
d9:82:b9:8a:09:d4:45:3d:46:5f:c2:17:43:ee:c1:4d:b8:1b:
f6:de:c8:f5:43:7b:cd:bb:c9:3c:0b:5f:d8:42:47:3c:f7:46:
33:40:c6:a5:22:e2:88:94:f7:24:ba:10:9c:91:c0:66:04:97:
d8:50:32:ec:5f:d4:ae:8b:7e:aa:1e:32:6b:7b:1a:f4:26:c2:
c7:7c:5c:10:39:2c:e9:7b:9e:54:4e:9e:6e:64:ec:1e:02:9b:
9e:40:38:49:10:22:b4:a4:c1:58:d3:66:36:69:3e:50:15:68:
da:ea:b1:05:c0:2a:61:03:12:e0:04:5e:0a:fe:1c:c7:a3:a0:
97:4e:9a:30:d9:32:fd:38:65:70:a6:d5:ed:df:ca:3c:e6:e9:
a5:8f:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:22:37 2024 by rpki-client on console-fra.rpki-client.org