Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/fmaciLkJLVEBa10LRvx0B4Wwwy0.roa
File: fmaciLkJLVEBa10LRvx0B4Wwwy0.roa (raw, json)
Hash identifier: youzf/u4o+m08L6yPdE3Rc4jRDkEFWb1ZUY5IgHDw9w=
Subject key identifier: 7E:66:9C:88:B9:09:2D:51:01:6B:5D:0B:46:FC:74:07:85:B0:C3:2D
Certificate issuer: /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial: 018E76741D963FFEC23CBBDD723666241A86
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/fmaciLkJLVEBa10LRvx0B4Wwwy0.roa
Signing time: Mon 25 Mar 2024 16:31:45 +0000
ROA not before: Mon 25 Mar 2024 16:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21217
IP address blocks: 80.80.224.0/21 maxlen: 24
80.80.232.0/22 maxlen: 24
80.80.236.0/23 maxlen: 24
80.80.238.0/24 maxlen: 24
185.169.92.0/22 maxlen: 24
185.169.92.0/23 maxlen: 23
185.169.94.0/24 maxlen: 24
185.169.95.0/24 maxlen: 24
185.247.8.0/22 maxlen: 24
185.254.152.0/22 maxlen: 24
185.254.152.0/24 maxlen: 24
185.254.153.0/24 maxlen: 24
185.254.154.0/24 maxlen: 24
185.254.155.0/24 maxlen: 24
2001:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:74:1d:96:3f:fe:c2:3c:bb:dd:72:36:66:24:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf814df8575986dd904a98687583c138768a114
Validity
Not Before: Mar 25 16:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e669c88b9092d51016b5d0b46fc740785b0c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:48:44:b5:6a:c0:f1:e8:db:f4:13:e6:c6:
65:b8:ae:63:1f:d1:41:c6:17:0a:61:d5:2d:52:4e:
28:83:2d:7d:cb:b8:72:da:04:36:90:ed:de:9c:80:
05:17:11:88:83:7d:13:94:c2:4f:8d:3e:f1:7f:12:
1c:45:fa:6f:74:39:7e:c8:c5:a6:5b:c8:82:00:56:
5c:5c:7e:d4:5d:d3:9b:4a:0c:77:52:ac:7d:7a:a3:
18:1f:2c:25:16:51:94:57:eb:e9:d9:97:3d:c8:fd:
e8:0e:0f:1e:e5:04:27:bb:e3:a7:d4:07:59:e6:19:
3b:f8:26:5b:6b:f4:7b:1a:3f:86:dd:0e:77:d1:93:
17:da:a5:6e:24:c6:71:7c:cb:ff:4c:c8:57:5f:90:
b0:f7:d1:4e:b6:b8:27:3e:87:fd:cc:3c:21:63:f0:
80:ba:58:22:9f:c3:c0:20:da:7a:98:03:fd:9b:3b:
a2:a3:16:d9:af:0b:87:2a:22:fd:4f:bc:fb:86:b0:
1d:48:56:4e:ca:6d:1b:5f:fd:dc:9d:ba:dd:e7:b3:
f8:41:9e:6d:f3:0c:04:51:7c:30:9b:de:99:ae:b1:
7e:8e:3a:ef:43:d1:4e:ab:51:d0:cd:4a:e2:96:dc:
04:f6:bb:1c:82:08:d0:41:09:09:0b:8b:50:17:d4:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:9C:88:B9:09:2D:51:01:6B:5D:0B:46:FC:74:07:85:B0:C3:2D
X509v3 Authority Key Identifier:
keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/fmaciLkJLVEBa10LRvx0B4Wwwy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.224.0-80.80.238.255
185.169.92.0/22
185.247.8.0/22
185.254.152.0/22
IPv6:
2001:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:be:65:e5:a5:a3:db:17:9c:18:75:3d:24:55:47:e9:37:ab:
6a:fa:4a:de:62:81:fb:fa:d3:66:a1:0c:f8:2b:c8:5f:96:99:
87:d6:fb:fe:a1:95:4a:5b:47:33:23:98:62:e7:84:3c:ea:d9:
06:92:99:ff:0b:2f:ab:9e:fd:2f:10:7f:7b:a7:c3:3f:7d:12:
68:df:6b:20:c7:78:78:87:1f:c4:38:ef:1f:a8:51:3a:17:a6:
72:9a:ad:24:99:0b:2d:af:62:c2:bc:3b:e7:2c:ce:1c:ac:7c:
cd:61:99:6a:05:33:64:1a:bb:86:a5:56:87:d5:79:8f:bd:17:
ab:b2:9b:56:55:5c:48:3b:93:71:c2:0b:81:26:cc:ca:a9:76:
dc:93:00:30:a8:96:39:f1:1b:36:8d:6b:4e:8b:8d:de:e0:76:
af:3a:17:d4:57:bc:c5:df:c1:ef:42:61:24:67:15:d2:aa:cd:
26:3a:9e:ef:fd:c4:6d:70:b1:53:de:63:19:41:35:8c:1a:3a:
a6:b0:b6:24:25:de:49:6f:c7:6a:17:bd:c3:0b:c1:a6:58:1e:
17:03:bf:7e:b7:12:44:c5:66:1c:a1:cf:8e:0b:88:e3:b7:7a:
e2:3f:73:e5:ab:79:50:96:f2:f9:cf:9a:7a:50:61:67:96:2a:
4a:42:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 20:46:58 2024 by rpki-client on console-fra.rpki-client.org