Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/F26nxdff3i75xop2GZg9fikoNOY.roa
File: F26nxdff3i75xop2GZg9fikoNOY.roa (raw, json)
Hash identifier: nnVW9PXJHyG0jYXfDHyD/QfBcetH9X79xsq/iSvHbWM=
Subject key identifier: 17:6E:A7:C5:D7:DF:DE:2E:F9:C6:8A:76:19:98:3D:7E:29:28:34:E6
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E8A717EE166E7702F3840D1FB91D4
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/F26nxdff3i75xop2GZg9fikoNOY.roa
Signing time: Mon 01 Jan 2024 14:30:05 +0000
ROA not before: Mon 01 Jan 2024 14:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40371
IP address blocks: 84.207.212.0/24 maxlen: 24
83.125.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8a:71:7e:e1:66:e7:70:2f:38:40:d1:fb:91:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=176ea7c5d7dfde2ef9c68a7619983d7e292834e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:2c:e2:25:7b:d0:93:17:13:58:b1:ab:f0:
f1:3a:66:23:04:e0:af:52:e4:15:75:f9:ec:f4:44:
38:d6:66:a0:4f:3b:4f:d6:09:be:63:13:4d:e5:78:
00:5d:98:1c:fe:e4:e2:4c:07:4b:bd:89:ab:c2:db:
f1:db:f3:3e:66:a1:85:1c:b3:0b:4f:99:b2:da:01:
10:91:d6:6b:7c:f9:15:91:99:b1:20:04:96:42:46:
92:79:5d:9f:10:64:a7:51:01:a1:33:3a:55:af:59:
2c:99:33:bf:df:8d:76:88:ba:62:3e:c3:06:96:e0:
e4:b8:34:af:db:ff:21:de:cc:dd:06:3a:82:99:b6:
35:25:a4:77:49:00:fe:ca:c4:5d:10:33:bf:7f:a8:
a1:9b:cd:8a:4e:e2:4f:c1:80:81:84:5d:e7:a3:c3:
cc:48:ed:bc:b9:da:21:36:0e:4f:ad:8e:3e:ba:6d:
5c:de:be:66:28:7f:8f:d1:67:59:b9:8b:a0:df:b0:
30:ef:c2:24:ca:09:10:78:35:b2:81:98:82:28:d3:
5f:80:e8:58:1b:74:54:7e:a8:4c:21:3a:da:90:cc:
84:5b:ac:2f:5b:e8:a2:01:94:a4:f4:1c:74:a4:d8:
31:5e:1f:d8:c1:98:f2:90:e4:37:e6:33:5d:28:59:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6E:A7:C5:D7:DF:DE:2E:F9:C6:8A:76:19:98:3D:7E:29:28:34:E6
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/F26nxdff3i75xop2GZg9fikoNOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.36.0/24
84.207.212.0/24
Signature Algorithm: sha256WithRSAEncryption
99:58:e4:18:de:ab:43:ec:b1:9e:7c:60:aa:2d:7e:5b:15:0d:
32:6e:e4:33:30:f1:5d:a0:84:32:0b:6e:c2:35:e7:9f:bc:14:
63:6b:58:3f:f0:8a:96:0f:47:5e:93:47:04:3c:59:5d:73:9e:
8e:ab:da:15:25:58:11:99:4f:09:5b:a7:e5:5f:c1:da:ce:a4:
22:0b:68:17:db:34:31:fb:f7:9f:58:60:8c:88:5b:9c:9d:40:
d1:fc:12:28:35:ba:57:75:8c:be:42:36:5f:97:61:c1:6f:25:
30:f7:62:82:e6:b4:c2:ad:35:34:1a:62:b7:79:be:91:d3:41:
ee:e6:d5:3e:46:60:7a:cc:b1:41:b3:86:b8:7d:2f:1b:0e:3a:
6d:99:e9:32:b2:a5:00:b0:16:aa:f0:4d:bc:1d:c8:29:16:82:
f0:96:61:33:f0:0b:65:bf:0f:bf:6d:a7:e3:ff:cd:6e:a6:07:
1c:59:db:58:d5:08:85:65:67:5b:c7:e5:ec:09:61:7e:67:e5:
dd:8a:50:7f:6f:f2:de:13:00:e0:0a:f4:49:e3:a6:b8:75:8a:
1f:96:d9:4e:25:48:ac:3a:6d:a8:43:63:69:9b:3c:ac:3d:69:
86:96:23:8c:45:36:69:34:82:86:26:72:c9:12:fc:49:e1:a5:
13:8f:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:27:18 2024 by rpki-client on console-ams.rpki-client.org