Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/_FCjBFP4HWFAOWdj-CMnCcgY3kQ.roa
File: _FCjBFP4HWFAOWdj-CMnCcgY3kQ.roa (raw, json)
Hash identifier: mY22ywoiK3eXRAMB7GE8L9K7YNwDqBZ+P81mnmW5/40=
Subject key identifier: FC:50:A3:04:53:F8:1D:61:40:39:67:63:F8:23:27:09:C8:18:DE:44
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 018CCA998E1E4E3976D463901F071618A530
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/_FCjBFP4HWFAOWdj-CMnCcgY3kQ.roa
Signing time: Tue 02 Jan 2024 14:35:10 +0000
ROA not before: Tue 02 Jan 2024 14:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21874
IP address blocks: 168.168.56.0/23 maxlen: 23
168.168.64.0/24 maxlen: 24
168.168.60.0/22 maxlen: 22
168.168.40.0/22 maxlen: 22
168.168.44.0/22 maxlen: 22
168.168.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:8e:1e:4e:39:76:d4:63:90:1f:07:16:18:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jan 2 14:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc50a30453f81d6140396763f8232709c818de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:c6:35:9f:fe:dd:1f:31:fe:0e:35:ab:52:
16:6d:7c:d9:a2:f6:47:14:a7:d1:86:7e:3f:64:37:
5b:67:41:cf:48:18:ff:e5:9f:4a:a4:be:f5:08:fd:
26:ad:df:4b:a2:d9:19:59:58:83:de:df:75:51:57:
ed:43:e5:c2:24:51:22:ff:2f:44:6c:cc:a1:61:2d:
50:42:1e:0f:22:a1:31:5e:b3:4e:f5:01:ab:f3:24:
f3:61:ff:0c:e6:ae:34:82:a9:e6:7c:e9:5f:26:7a:
ae:71:a1:59:32:6e:a4:f1:43:34:1f:2a:66:45:e8:
b3:4f:8a:1b:b0:d7:ae:8f:98:e1:82:2a:1f:4f:3d:
7a:26:62:b3:92:13:84:9c:62:fc:11:32:69:7e:69:
14:11:d0:11:23:5e:09:16:a5:91:7a:85:3a:a5:1e:
f8:1c:a2:a4:95:ad:66:29:02:d3:8e:84:d9:40:a3:
fe:a5:49:af:a1:eb:ab:5a:e5:b3:d6:89:5c:9a:39:
f2:3e:1b:5d:1a:12:a8:a7:e6:2f:e4:f7:e7:08:3a:
78:8b:eb:c9:6f:99:1c:cd:2a:df:02:de:8b:73:08:
50:12:99:d8:86:ec:73:a3:fd:d4:a4:8d:ee:ae:31:
7a:12:9f:56:73:c3:15:d5:16:87:22:bf:07:d6:28:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:50:A3:04:53:F8:1D:61:40:39:67:63:F8:23:27:09:C8:18:DE:44
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/_FCjBFP4HWFAOWdj-CMnCcgY3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.168.40.0-168.168.57.255
168.168.60.0-168.168.64.255
Signature Algorithm: sha256WithRSAEncryption
60:d7:90:59:d3:21:b7:6d:88:05:b0:82:b0:74:b5:00:37:2b:
15:1d:7c:54:92:ca:bb:e4:86:97:06:ad:29:2e:92:e9:7b:f7:
39:e5:59:98:c5:dd:b1:16:69:77:63:55:5a:f4:21:33:24:4b:
76:1d:5f:34:6d:1e:0d:6f:e8:aa:4f:38:34:db:2d:ee:7e:e3:
3c:12:80:3b:5a:97:d1:d1:97:eb:17:4f:b9:51:f9:e9:74:c6:
22:c5:47:8b:b3:06:a7:f3:37:40:db:01:10:bd:e4:fb:7a:81:
b9:bd:2c:b4:2e:d9:4c:5a:6b:f9:f6:0d:a8:57:4b:ff:11:dc:
64:a2:27:4e:88:09:1c:d5:fe:9b:60:06:84:96:e4:5a:a4:59:
5c:f6:d8:74:ee:78:46:be:b6:75:47:ee:d8:5d:04:28:7e:51:
67:0c:1e:4c:e8:67:34:cd:e8:ea:72:6a:cc:6b:ac:d1:ea:61:
57:39:aa:20:0b:08:e0:83:52:0f:bd:c6:82:ba:80:f2:9e:8d:
cc:08:5c:74:85:ed:9d:82:62:33:a2:29:c4:7c:45:be:fb:b7:
94:36:2a:fa:2f:5b:e9:17:ee:3e:1d:d4:b5:d0:f0:35:70:aa:
09:68:a0:43:8e:98:97:7e:dd:11:da:35:4f:1f:c9:65:bc:e2:
a2:4d:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:30:24 2024 by rpki-client on console-ams.rpki-client.org