Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FnbdG2U3EiTmhvSySbcXGE3_NGQ.roa
File: FnbdG2U3EiTmhvSySbcXGE3_NGQ.roa (raw, json)
Hash identifier: do90lOAwuw9kcZZFEzx193dfsItPdfTFIfelw4KGxGQ=
Subject key identifier: 16:76:DD:1B:65:37:12:24:E6:86:F4:B2:49:B7:17:18:4D:FF:34:64
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018D985F400C469C0B75ABCFB5BD98B94389
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FnbdG2U3EiTmhvSySbcXGE3_NGQ.roa
Signing time: Sun 11 Feb 2024 13:33:15 +0000
ROA not before: Sun 11 Feb 2024 13:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60722
IP address blocks: 82.137.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:98:5f:40:0c:46:9c:0b:75:ab:cf:b5:bd:98:b9:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 11 13:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1676dd1b65371224e686f4b249b717184dff3464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:74:4e:ae:1e:38:a1:79:21:c1:62:66:df:
80:fa:65:3e:8b:9b:02:8c:95:ff:06:dd:5d:8c:c5:
37:3e:ee:28:67:57:fb:b6:54:7f:b0:92:94:54:12:
51:a1:87:9f:4f:ed:22:39:a9:f6:8b:99:4a:3a:86:
a8:aa:25:f3:c4:ce:85:11:89:8c:db:f8:3b:64:45:
66:b8:57:5a:31:57:83:c4:bd:71:f5:d9:05:8e:66:
73:76:ac:d2:43:d0:47:05:39:de:7a:89:d4:b3:be:
0b:3f:84:16:8a:6f:01:a2:d5:de:ad:35:dc:7f:ef:
ac:d2:f6:0b:ee:ca:fa:d7:fd:40:30:25:6f:a8:4a:
64:b7:14:3d:be:73:fb:5a:c7:21:ab:8e:f6:a5:a7:
1a:67:33:85:81:53:85:55:24:92:84:e3:bf:13:97:
7a:0a:96:19:37:da:c4:e9:5c:02:e2:25:89:91:1a:
a6:02:3c:05:b5:ab:8f:dd:f5:74:8b:e5:f8:20:fe:
14:d1:0e:e3:c4:05:ed:cc:64:12:b5:e2:a5:40:87:
3b:22:12:a0:19:37:4c:1d:46:6e:1e:e7:f5:9b:92:
44:af:17:57:26:d7:9f:d2:a3:f9:bf:3a:56:87:9e:
f3:26:db:db:21:fc:31:33:66:ce:5a:2c:a3:1c:f7:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:76:DD:1B:65:37:12:24:E6:86:F4:B2:49:B7:17:18:4D:FF:34:64
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FnbdG2U3EiTmhvSySbcXGE3_NGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.137.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c8:f3:7e:d0:98:91:1f:89:4b:d6:3b:89:59:2e:6f:f3:b8:
28:ee:07:74:59:f9:4e:ea:e5:0b:bb:71:32:4b:4b:29:c9:83:
ad:49:1c:7f:d9:e6:8d:50:f2:fb:b0:59:3e:ab:70:9d:a0:71:
b5:0e:7c:6b:26:d9:b1:26:63:1b:c0:3a:4a:ce:41:54:11:5e:
e5:1b:9c:4a:ec:f8:5e:46:c7:f7:67:5c:70:ba:d1:40:cf:50:
e2:73:c5:c8:61:e2:c9:68:72:0f:3d:0c:0c:7b:d1:48:35:36:
2b:e8:00:b2:69:31:47:75:b9:ed:30:cd:87:6b:c9:44:4a:19:
b6:cc:d1:5e:d9:20:13:62:3f:39:e6:89:40:60:41:8b:ef:d1:
b1:52:cb:ac:f5:e2:43:56:b7:26:a5:50:1a:92:bd:e7:cc:07:
6e:82:d0:e6:67:84:4e:8d:e1:6b:ad:7b:87:33:8a:78:39:73:
de:3f:f8:a4:d2:23:63:bd:6d:7a:ba:a3:b7:b2:a7:91:ba:3a:
7c:66:a5:d7:07:b8:0c:c9:ec:ee:68:a2:78:e0:b3:f4:fe:d2:
8f:4d:ec:7b:05:42:c1:4c:07:4e:73:a3:73:79:00:f9:8b:f4:
10:5c:64:a7:93:15:76:a5:26:9d:b6:7e:6d:de:50:01:f4:8d:
ac:80:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 09:00:43 2024 by rpki-client on console-fra.rpki-client.org