Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/fbxHFLin9ksvuy9jq9u7YbAgONQ.roa
File: fbxHFLin9ksvuy9jq9u7YbAgONQ.roa (raw, json)
Hash identifier: 2eJ3K+Dv78yWSXEGfUhEQWA1O4qDaEdQiQdBYmRACHI=
Subject key identifier: 7D:BC:47:14:B8:A7:F6:4B:2F:BB:2F:63:AB:DB:BB:61:B0:20:38:D4
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 018CCA2925E592139884E85F0DA8579D83A1
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/fbxHFLin9ksvuy9jq9u7YbAgONQ.roa
Signing time: Tue 02 Jan 2024 12:32:23 +0000
ROA not before: Tue 02 Jan 2024 12:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 270164
IP address blocks: 185.236.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:25:e5:92:13:98:84:e8:5f:0d:a8:57:9d:83:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jan 2 12:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbc4714b8a7f64b2fbb2f63abdbbb61b02038d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:0b:86:7a:10:a5:b6:4f:82:56:9b:2f:7d:
4b:49:f9:25:91:5c:29:2f:a3:75:9a:38:47:37:6d:
01:74:cd:ad:f4:10:ac:4e:b0:7b:1a:70:e9:6c:e5:
4a:f8:dd:3d:d1:a9:98:04:a5:4c:55:c2:5a:b1:3f:
af:e8:9d:a3:fb:20:f4:63:f3:4a:5d:47:95:af:91:
b6:97:71:b7:9b:8b:86:d0:90:d5:d7:b0:da:fb:b7:
9c:9a:3c:3b:22:4d:15:79:b1:f3:1b:e1:ca:b1:cb:
f0:08:4a:10:e4:a5:a6:95:69:5b:9b:b6:2d:f6:6a:
bb:e3:7a:dd:c1:e1:f1:52:a4:37:41:99:79:20:e3:
28:19:4f:ba:58:09:b7:55:be:03:61:cb:59:65:b7:
ff:1e:4e:8c:de:7f:f7:fc:6b:08:5d:19:71:a7:b9:
56:c8:7a:2c:92:a7:3f:f6:d3:7b:d3:ca:23:52:62:
d7:9d:71:e6:c7:fe:83:4c:a6:98:83:fe:ae:96:59:
9b:76:51:5d:1f:7f:7b:0f:0a:ed:46:39:bc:ec:e1:
53:72:0d:52:a9:0a:42:5b:e2:74:08:61:77:b3:30:
46:5a:0e:98:c7:5f:92:8e:02:fc:84:0c:e0:96:7a:
4b:36:3d:2a:cc:2e:fe:7f:ca:2d:6c:18:06:c7:ed:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:47:14:B8:A7:F6:4B:2F:BB:2F:63:AB:DB:BB:61:B0:20:38:D4
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/fbxHFLin9ksvuy9jq9u7YbAgONQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.181.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5f:56:ba:56:e5:1f:a6:07:e9:fc:f6:26:51:02:41:79:4e:
7b:24:31:cb:f5:87:e4:29:5e:66:ba:5f:52:67:be:e5:9a:ef:
80:ee:da:51:87:04:0a:75:fb:ad:c1:09:bc:47:d8:72:0e:b7:
14:d6:b4:b9:05:c2:16:2b:8d:a1:4f:31:26:ca:1f:5c:d7:28:
2c:af:c4:8e:cc:86:ba:d1:86:1c:e6:92:11:0c:19:ae:94:12:
60:2b:54:57:ef:55:db:80:a7:91:76:9b:3b:03:e4:bf:1f:d9:
fe:a4:a8:02:75:5d:36:4f:96:76:42:84:4f:7c:e9:3f:ac:07:
be:0e:ea:25:d2:8b:dc:a3:67:ec:11:ab:90:17:a1:4a:28:63:
b5:7e:2a:3b:74:83:93:ea:c8:7c:2d:b8:36:55:7c:ed:b3:8d:
63:1e:e5:41:f8:57:12:59:eb:5b:28:92:bd:c8:01:8f:fa:25:
7c:19:10:4d:b9:36:d5:ee:6a:f3:da:be:6e:9a:b1:12:f4:36:
15:44:e3:a7:87:6e:28:3f:b7:45:ea:38:2f:23:cb:59:0e:0c:
41:ad:ec:c6:33:b5:92:f2:22:f6:51:c5:77:cc:c7:48:97:81:
f8:f7:1f:da:80:dc:66:a8:5d:8a:09:d1:97:6c:91:4e:dc:d3:
cb:8c:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:55:24 2024 by rpki-client on console-fra.rpki-client.org