Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/FUQLReyV1fYnKhUR2Py0suEpzo4.roa
File: FUQLReyV1fYnKhUR2Py0suEpzo4.roa (raw, json)
Hash identifier: 9A/8Ki/ykGwmpOcu1/NNU+e0I6B+VL2oFMH48r7RSZA=
Subject key identifier: 15:44:0B:45:EC:95:D5:F6:27:2A:15:11:D8:FC:B4:B2:E1:29:CE:8E
Certificate issuer: /CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Certificate serial: 018CC5DD31FE761D53A70DACE88D0E2282B9
Authority key identifier: 61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/FUQLReyV1fYnKhUR2Py0suEpzo4.roa
Signing time: Mon 01 Jan 2024 16:30:56 +0000
ROA not before: Mon 01 Jan 2024 16:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202943
IP address blocks: 193.109.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:31:fe:76:1d:53:a7:0d:ac:e8:8d:0e:22:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Validity
Not Before: Jan 1 16:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15440b45ec95d5f6272a1511d8fcb4b2e129ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:fa:89:dc:4e:13:df:ef:c6:48:03:69:7d:
ab:ac:f4:e5:7e:5e:8a:83:5e:c0:de:91:2c:81:45:
da:1c:cf:b4:32:9f:10:57:23:cc:3f:3f:82:dc:c3:
ce:9e:c7:04:c4:b8:c0:69:3d:0b:72:0b:7e:26:de:
2a:88:46:e3:e7:25:4c:44:fa:bd:fa:e7:a8:ce:34:
a9:a6:9a:cc:94:1c:e7:8e:05:52:6c:ca:9a:24:83:
89:99:7d:a9:14:ed:02:75:46:ce:8b:a0:ed:55:4b:
c8:db:13:77:4a:85:20:2b:22:c3:88:54:c6:e2:65:
00:43:0c:33:26:96:19:92:ae:b7:1a:14:5e:fd:8f:
13:26:51:31:a7:fc:f7:5d:d0:b2:5c:45:8d:35:94:
bd:a5:ad:e9:3f:79:1d:9e:97:ff:d6:44:e8:92:53:
e7:5b:a4:01:16:af:97:1d:05:0b:24:ff:b1:72:9d:
40:cb:34:c0:c4:c3:a0:39:27:7a:d1:f4:21:e3:a9:
89:04:20:64:03:da:71:76:b2:dc:62:c2:f4:cc:90:
61:98:b5:95:2f:f9:dd:bd:e1:42:f4:89:8b:e4:08:
97:2d:31:26:1e:be:da:6e:ee:47:8f:5c:17:fe:1f:
4d:5c:83:4a:26:21:9a:2d:fa:5d:ef:29:ce:fc:a8:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:0B:45:EC:95:D5:F6:27:2A:15:11:D8:FC:B4:B2:E1:29:CE:8E
X509v3 Authority Key Identifier:
keyid:61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/FUQLReyV1fYnKhUR2Py0suEpzo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.82.0/24
Signature Algorithm: sha256WithRSAEncryption
34:72:c5:30:46:3f:69:a3:ec:f1:8a:19:6d:20:cd:62:af:75:
fb:7b:09:f7:6e:c5:c9:d9:e8:4b:77:f6:02:d9:b3:97:43:a9:
33:7a:21:c6:75:cf:12:52:d7:cd:be:03:27:15:fc:d2:dc:77:
37:68:61:db:5f:58:13:17:82:04:28:d7:2f:f6:a4:99:27:4d:
ef:ba:e3:69:6f:ff:6d:e4:fc:0e:5b:7c:38:a7:ee:d6:28:fa:
5e:3c:2a:4e:db:04:9c:45:37:2e:43:3d:13:3f:00:a2:47:95:
6c:3e:84:11:93:44:ac:5f:08:cf:20:79:b7:b4:b7:8d:d6:ca:
7e:37:ef:e5:a9:b1:81:fe:7f:da:3d:fa:70:bc:e9:13:c7:56:
6d:5d:f5:1e:dd:7d:d6:e0:52:59:de:63:2d:f9:84:76:bd:2e:
c1:0d:f8:7e:94:56:c9:b3:ac:8f:58:cf:97:f5:35:10:c1:ac:
04:4a:ee:3d:a9:cf:aa:2d:5d:e0:f1:06:8d:fe:42:d9:9b:6c:
e2:f3:c6:81:fd:dc:8a:8e:99:7b:b4:82:85:2d:7d:09:86:ae:
5e:06:81:c7:b3:57:3a:b3:88:0f:be:88:a4:16:45:22:f4:06:
38:a5:82:b8:8d:e6:80:ea:c1:37:41:ba:43:90:ab:46:7f:91:
84:e4:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:51:40 2024 by rpki-client on console-fra.rpki-client.org