Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/FrIfTKyaLl3s-iEpxLvfTr6L52k.roa
File: FrIfTKyaLl3s-iEpxLvfTr6L52k.roa (raw, json)
Hash identifier: X4qQq7KxuCAZfKGsQpb9tPefbC56Ryk5FIbOOsiXwYQ=
Subject key identifier: 16:B2:1F:4C:AC:9A:2E:5D:EC:FA:21:29:C4:BB:DF:4E:BE:8B:E7:69
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 018CCA2A05964ABB43F0A0F9FFA716CE9D86
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/FrIfTKyaLl3s-iEpxLvfTr6L52k.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.137.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:05:96:4a:bb:43:f0:a0:f9:ff:a7:16:ce:9d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16b21f4cac9a2e5decfa2129c4bbdf4ebe8be769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:9e:67:47:69:94:a4:2a:59:9b:c0:9f:d2:
63:bb:22:6b:27:c1:d8:e2:f2:4d:29:38:a3:96:f7:
ce:45:7c:dd:df:43:73:b4:fa:d1:64:29:ca:a8:54:
79:64:e0:35:42:9d:66:af:71:f8:69:71:8e:9e:ab:
4e:2c:91:67:0d:03:de:e0:36:3d:a5:98:ca:9c:b0:
92:88:51:41:8a:c7:df:cd:ae:4a:78:7a:8a:9d:41:
83:ca:cc:c3:d7:44:2e:9e:55:83:e9:bd:bf:c9:21:
3f:d5:0d:8e:34:ed:f2:fa:ae:76:89:cf:06:8d:eb:
31:9a:4f:4f:ae:f1:fd:1f:31:f9:10:c3:38:17:d3:
23:7e:8c:bb:6e:54:f5:ad:37:2a:8d:49:cc:95:f9:
74:34:91:c0:34:ae:bf:d6:be:52:ba:10:89:76:05:
f5:8b:18:b4:c2:52:ea:2a:6b:29:f4:f9:7c:42:c7:
86:99:58:70:aa:1f:fe:d0:5a:7f:7c:b3:15:63:f5:
04:6f:ac:1a:0a:e8:56:d0:09:37:fe:8a:9c:0c:7e:
18:2b:fd:63:8d:69:30:ea:dd:79:ea:4a:fc:38:96:
ac:94:6b:a2:54:13:ef:5a:9a:51:7e:d4:e6:d0:8c:
98:0d:67:2e:15:20:af:e7:57:3c:29:de:e1:7f:90:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:1F:4C:AC:9A:2E:5D:EC:FA:21:29:C4:BB:DF:4E:BE:8B:E7:69
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/FrIfTKyaLl3s-iEpxLvfTr6L52k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.166.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ad:86:02:f6:77:fa:83:64:fe:62:01:6d:f7:f9:d5:67:70:
d7:8d:ea:21:5d:f4:52:e1:c2:b6:44:0a:de:c3:38:7b:ef:88:
fe:ce:8f:5e:5c:04:9e:02:67:24:c1:fe:36:12:f6:db:08:10:
6b:69:2b:e9:9e:13:9c:ca:fd:4d:9f:e0:d5:5b:ef:d6:46:d8:
ad:c6:06:9a:99:5c:f2:1e:18:2b:a4:e1:d0:80:ee:f6:58:5e:
f5:4f:19:66:a7:c2:f1:b1:de:23:94:2a:04:f0:52:73:fd:22:
76:56:91:7a:ab:30:4a:81:37:b9:19:86:84:d9:23:45:4d:b9:
33:58:1b:04:9a:7d:66:72:e8:64:88:70:a0:c7:c4:82:a1:36:
10:a1:a3:09:ae:17:b1:55:5d:15:76:8e:0b:8b:63:c6:69:d6:
3d:77:92:e3:2e:5b:8d:f9:18:d3:dc:5d:07:02:e5:b9:6d:53:
1c:84:73:c7:b7:53:55:9e:28:88:30:13:0b:ed:79:d4:c9:23:
fc:28:76:b8:6f:0d:c3:e5:41:91:bf:50:10:21:96:bc:56:0f:
0a:97:f3:01:b7:ee:96:5f:e9:fb:61:20:da:3b:5a:bc:dd:62:
07:55:0e:a3:88:6f:b9:92:a0:c1:c1:d1:40:4b:f5:f9:bd:6f:
2f:dc:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:37:30 2024 by rpki-client on console-ams.rpki-client.org