Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/F_RjFZutWE8mLcCMRHCPW2Kuieg.roa
File: F_RjFZutWE8mLcCMRHCPW2Kuieg.roa (raw, json)
Hash identifier: YE6ZOpzaGl5H2qdu+A12HtC7aOPrceVmAHPY0nEGs7g=
Subject key identifier: 17:F4:63:15:9B:AD:58:4F:26:2D:C0:8C:44:70:8F:5B:62:AE:89:E8
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 018CC6B77FE50A07769D03200AF2C5643AB2
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/F_RjFZutWE8mLcCMRHCPW2Kuieg.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207503
IP address blocks: 212.110.240.0/21 maxlen: 21
185.102.242.0/23 maxlen: 23
134.101.32.0/21 maxlen: 21
134.101.40.0/21 maxlen: 21
134.101.56.0/21 maxlen: 21
212.110.232.0/21 maxlen: 21
185.102.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7f:e5:0a:07:76:9d:03:20:0a:f2:c5:64:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17f463159bad584f262dc08c44708f5b62ae89e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:ad:3c:ac:09:e8:d1:72:49:93:28:7c:5b:
41:cf:cf:4a:eb:5d:5a:7d:f0:ce:37:8c:0d:b4:b0:
72:18:47:fb:be:b2:72:9d:1b:33:5f:dc:99:e6:16:
dc:08:c9:da:9e:dd:94:19:e5:34:54:20:90:c0:1c:
b3:0d:cf:b1:4c:8c:d9:a2:9e:10:28:53:1e:06:e1:
be:e4:53:27:75:a1:65:12:d7:7b:a9:5c:31:e0:b9:
2a:1c:e7:65:70:c8:66:c2:f8:6f:18:e7:47:e8:5a:
16:4c:ef:9e:74:35:84:6a:7a:c8:fd:e0:d7:4b:9b:
3e:fc:ff:69:dd:f3:05:73:4d:2c:b1:0f:3a:98:6c:
b9:dc:c7:72:2e:79:fc:ee:d2:3d:1d:df:a0:7a:68:
89:9e:88:35:4a:ad:96:75:5a:d4:32:e5:87:f4:1b:
d8:df:5e:e9:8b:41:08:28:fc:d5:d5:e7:a3:c9:f1:
3b:27:c3:cb:e2:6a:27:19:36:53:ac:66:a5:2f:f0:
62:e9:fc:73:41:bf:5e:78:b3:fb:f8:44:5d:ec:91:
8a:ce:a6:0d:3b:fb:38:0f:6f:9a:b9:64:62:99:b8:
3c:6f:f2:05:d5:77:82:b0:91:17:20:4a:43:1b:27:
13:bc:25:ca:5c:3c:08:31:20:5d:48:e5:36:f4:81:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:63:15:9B:AD:58:4F:26:2D:C0:8C:44:70:8F:5B:62:AE:89:E8
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/F_RjFZutWE8mLcCMRHCPW2Kuieg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.101.32.0/20
134.101.56.0/21
185.102.240.0/22
212.110.232.0-212.110.247.255
Signature Algorithm: sha256WithRSAEncryption
35:24:12:26:c0:2f:23:0e:cf:ff:d1:ac:6a:57:4a:b7:f4:8b:
e6:4b:71:5c:31:c0:13:e3:a2:f1:72:30:fc:5a:1b:20:41:47:
6e:35:c6:c9:b0:d9:f9:28:57:3e:e7:b4:68:5d:4d:a8:01:a3:
b8:e9:19:e5:dc:72:77:59:a1:3f:12:16:50:b0:ca:f2:1e:82:
25:bf:00:b9:a1:5e:36:88:85:99:7a:a8:03:75:f2:a3:52:4d:
f4:b1:a0:7a:7c:54:2e:03:60:c4:03:ca:b5:fa:d5:20:aa:3d:
0c:27:a5:20:c7:c8:b4:a5:3d:27:1f:88:53:42:92:9d:97:70:
e0:76:59:b9:0b:5d:e1:01:23:fa:c3:5c:b2:ec:d0:f0:6b:c2:
2f:ba:5b:b5:3e:23:f3:2b:17:6d:10:18:4c:8e:72:12:03:54:
c8:30:23:f4:a6:e1:9e:50:8d:3e:1d:54:25:bf:50:dc:c9:f1:
a3:b4:54:05:a2:2f:dd:28:a5:f1:2e:f1:04:7f:ed:01:0b:79:
88:03:7a:5e:20:64:d9:c5:01:75:27:d9:46:07:1c:ca:bc:35:
43:08:36:2a:64:05:25:72:71:13:71:7d:1e:fe:16:92:e6:75:
cf:2b:9f:60:59:d0:82:e0:f7:9f:db:f8:58:7b:dc:64:3d:55:
25:77:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:51:29 2024 by rpki-client on console-fra.rpki-client.org