Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_FNXP9sYjdUnKu7uismJN6mDT7Q.roa
File: _FNXP9sYjdUnKu7uismJN6mDT7Q.roa (raw, json)
Hash identifier: UDrhSlKwHuWsueh+gvROCN4QU6zyuaOwQcZ/YKApJHk=
Subject key identifier: FC:53:57:3F:DB:18:8D:D5:27:2A:EE:EE:8A:C9:89:37:A9:83:4F:B4
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF592EF0DC091361A0029D2F8397D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_FNXP9sYjdUnKu7uismJN6mDT7Q.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207590
IP address blocks: 46.34.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f5:92:ef:0d:c0:91:36:1a:00:29:d2:f8:39:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc53573fdb188dd5272aeeee8ac98937a9834fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:e2:a7:21:3a:b8:28:20:29:9a:f1:aa:a8:
fd:2f:de:48:16:5c:b5:44:3d:dc:3d:f1:bf:e3:a7:
d5:26:82:47:a4:06:81:6b:6b:e1:08:ce:24:ae:92:
83:6f:06:5d:79:ea:2b:20:59:b1:6e:9d:1e:a9:5f:
d8:86:41:d1:36:80:e4:9e:d7:4b:64:d9:a5:42:62:
c2:47:cb:df:ce:72:8a:ae:97:12:53:42:29:52:b8:
77:92:29:0d:94:c5:91:a4:54:a0:20:69:5a:37:3b:
e3:f3:74:9e:ed:16:39:c9:f6:29:dc:b7:a7:88:e4:
92:46:a9:22:30:2d:97:47:10:84:51:72:5b:88:48:
c8:13:a9:81:72:43:e0:ac:8a:2f:c1:4d:3e:bf:e1:
b8:74:a0:98:f0:78:9d:93:75:dc:13:6d:99:23:d5:
ab:d5:b6:fb:90:4d:f3:85:fb:9f:7e:5a:82:ac:93:
34:82:24:43:85:d2:e4:e2:f1:0b:1e:a3:0b:f5:af:
fe:10:6c:ea:2c:81:a3:68:53:88:30:2e:9c:38:15:
5e:64:ae:eb:7f:ac:d7:d3:92:f0:61:4f:27:03:5d:
e5:84:0b:9c:ab:18:07:07:f4:cb:ee:b4:70:b4:a8:
bb:b0:7a:a0:b8:32:69:60:f1:2d:68:56:f0:42:2a:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:57:3F:DB:18:8D:D5:27:2A:EE:EE:8A:C9:89:37:A9:83:4F:B4
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_FNXP9sYjdUnKu7uismJN6mDT7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.41.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ec:67:9e:29:8b:64:78:b0:5f:70:cd:ec:61:0e:59:7a:56:
17:b0:69:a9:6b:b6:d7:06:10:f5:d6:7e:85:0a:47:16:55:f0:
ab:45:4f:87:b0:4a:57:c5:b4:f9:b0:06:d8:60:2a:e7:87:95:
c7:42:64:ee:01:5b:8b:d1:76:27:ad:7e:28:d2:e8:a5:7c:af:
1d:b0:dc:8f:0e:dd:47:e4:70:8e:07:3b:c5:39:fc:0d:54:61:
92:2d:38:40:33:20:79:99:47:12:09:d5:66:e8:45:89:19:fa:
e6:85:48:c4:4c:56:6d:ea:f2:29:62:bb:27:0d:0b:a8:27:d7:
61:9f:87:04:4e:f8:6b:cc:a7:cd:5b:cc:5c:b8:55:b5:43:3e:
60:1b:04:0d:cf:95:1d:50:4f:d6:26:30:e5:c1:95:3a:3c:85:
60:8d:35:fb:93:af:20:14:4b:35:dc:45:12:27:a5:b1:62:03:
6a:d7:de:c7:b5:57:f7:c4:a9:09:b6:44:ad:4c:2d:31:f6:a1:
68:31:1e:e6:51:24:ad:d5:cf:37:46:24:1c:b4:62:91:2d:ae:
e1:67:90:89:d3:7d:e2:3e:0a:26:7e:79:44:20:7f:2b:4a:bd:
0b:98:54:2c:61:25:73:a2:08:b0:c7:e0:ba:6c:72:8a:df:0c:
7e:75:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 05:13:07 2024 by rpki-client on console-ams.rpki-client.org