Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FicE_DN32OaMNrMVAfRcoKI39bs.roa
File: FicE_DN32OaMNrMVAfRcoKI39bs.roa (raw, json)
Hash identifier: e4kImlE/IaHKcwWQfT8nBKsW/xJ8XciVq8IZwxNomF0=
Subject key identifier: 16:27:04:FC:33:77:D8:E6:8C:36:B3:15:01:F4:5C:A0:A2:37:F5:BB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01912119324B91B11AC383DDE1DCB78B6097
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FicE_DN32OaMNrMVAfRcoKI39bs.roa
Signing time: Mon 05 Aug 2024 05:53:04 +0000
ROA not before: Mon 05 Aug 2024 05:53:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 89.34.229.0/24 maxlen: 24
89.47.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:19:32:4b:91:b1:1a:c3:83:dd:e1:dc:b7:8b:60:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 5 05:53:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162704fc3377d8e68c36b31501f45ca0a237f5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:1c:f8:f4:b2:ee:6e:c7:99:5f:7c:7c:87:
ef:b8:c9:62:4c:1b:68:9c:7f:98:15:ce:77:ee:db:
58:76:4e:9f:69:0a:6c:3a:10:ee:b0:42:c6:59:a1:
d6:9d:0b:38:6e:c1:b0:ef:e6:19:06:cd:d3:94:9c:
d4:aa:b1:d2:92:33:42:16:24:54:29:db:3b:c7:45:
1d:1c:da:a9:e4:2c:c0:87:7f:7d:74:5a:19:de:d8:
ee:07:e9:1a:80:ad:d5:4d:2f:14:25:7f:43:e1:60:
79:ca:76:c1:90:06:8a:3c:ef:a8:b5:de:6f:c4:0e:
fb:4a:8f:d8:5f:26:48:59:d7:ee:d2:76:94:65:69:
3c:d8:b3:be:2b:0e:68:e2:01:b6:74:61:58:10:74:
e1:f6:7c:25:e1:e1:f5:46:6e:10:bc:0c:4d:1e:c9:
8b:d0:17:db:cd:4b:f7:a4:84:b7:80:f6:7c:5b:61:
80:7b:e1:67:59:52:ed:c4:15:44:81:82:99:c6:34:
fd:70:c0:16:cd:d8:74:6f:52:88:37:10:c9:c9:d8:
f4:97:6a:98:2b:d2:4a:9c:fe:6e:89:c7:74:f7:92:
d2:3f:ce:a0:40:63:30:37:c2:67:db:92:5f:81:c5:
73:58:b5:69:f3:f3:97:a0:ad:04:62:e1:45:ab:37:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:27:04:FC:33:77:D8:E6:8C:36:B3:15:01:F4:5C:A0:A2:37:F5:BB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FicE_DN32OaMNrMVAfRcoKI39bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.229.0/24
89.47.121.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9e:39:72:b3:72:07:80:15:05:21:58:da:9b:dc:6c:f0:bd:
01:a0:3f:75:4d:d0:d1:a4:b4:1a:8c:42:4c:1b:5d:1c:d7:fe:
a1:1b:cf:3d:1f:f7:d2:90:25:05:de:e2:e4:68:43:ef:94:70:
d5:72:04:67:f1:e6:2a:fd:43:b9:2f:03:d2:08:4c:cc:1d:cf:
ea:cf:95:d7:c4:e9:ec:22:dc:f8:95:c0:ef:7a:09:5a:51:c0:
16:f3:1c:b7:e6:2d:97:46:38:7a:52:6a:e3:74:b5:7e:7e:34:
50:ed:30:c1:bb:b2:f9:aa:bf:ce:d8:8c:14:1b:e1:ec:11:3a:
eb:e2:06:40:27:22:83:11:09:b2:9d:ab:52:4d:ac:3c:74:3a:
c6:60:b2:d4:da:50:28:42:22:43:06:f1:72:70:04:1a:06:91:
47:ef:2d:48:2d:d5:0f:16:f2:d0:79:b2:79:c9:c9:99:b2:b7:
e2:d4:10:21:c1:de:0c:5f:e2:2d:2b:bf:b4:a0:16:5b:3f:02:
98:d1:2c:57:6d:bf:49:77:96:a3:32:1e:5e:54:7a:d1:ec:d8:
f7:49:87:f0:5b:cb:5a:97:81:fe:d8:66:f8:0d:34:c1:6e:73:
d3:fe:55:b7:c3:cb:fd:a5:7d:53:cf:49:6e:67:d7:5f:f8:7a:
89:53:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:34:58 2024 by rpki-client on console-ams.rpki-client.org