Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/FfZvuBDmvLnTBc0WIfHzPoNEXXA.roa
File: FfZvuBDmvLnTBc0WIfHzPoNEXXA.roa (raw, json)
Hash identifier: YwjlNh2YpoWDiM90UzlVl0k1uePbt7bjQXvOBThFRh8=
Subject key identifier: 15:F6:6F:B8:10:E6:BC:B9:D3:05:CD:16:21:F1:F3:3E:83:44:5D:70
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 018CC7270D7690B6A20FC0640054CC157A90
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/FfZvuBDmvLnTBc0WIfHzPoNEXXA.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197192
IP address blocks: 195.226.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0d:76:90:b6:a2:0f:c0:64:00:54:cc:15:7a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15f66fb810e6bcb9d305cd1621f1f33e83445d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:82:5e:db:5c:18:66:31:e1:50:35:76:d9:
b7:3b:56:f2:49:fd:f3:41:48:a7:a0:79:fd:f8:d9:
ab:11:53:09:6b:36:35:b4:f7:c2:27:4a:9f:33:6f:
67:8e:f7:c7:53:e6:bf:dc:6a:27:9c:5c:78:b6:ec:
0c:a1:ac:73:0c:5b:d3:be:22:42:59:ae:cc:12:08:
fc:fa:f9:24:35:a8:2a:81:df:60:f8:71:38:ef:d3:
ab:bc:5b:71:02:ea:d0:aa:7b:51:bb:1d:cc:75:f8:
ce:ba:d5:9e:2a:29:96:91:c6:7c:14:e5:00:3a:6f:
a4:a7:e9:3d:2b:2a:6d:69:da:36:9f:3d:7e:24:0d:
58:bf:5b:2f:20:0c:6b:90:65:30:86:77:20:12:6a:
eb:b9:80:eb:45:a0:e9:40:69:b5:a1:14:98:47:35:
68:ed:c3:7b:9e:8d:cc:41:a6:b5:93:83:d5:9d:48:
fc:6c:2b:bf:5b:2c:7c:84:7c:91:c2:26:11:6e:8a:
57:5a:23:26:22:6a:19:ce:69:b4:17:db:66:07:f1:
32:9a:12:77:47:d8:64:fe:55:99:ff:39:45:ea:19:
8f:85:cb:1d:b0:3e:5e:b6:f7:ef:0b:94:c7:8c:d8:
94:76:27:9e:02:0d:d4:dc:37:8c:a5:87:6a:86:21:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:6F:B8:10:E6:BC:B9:D3:05:CD:16:21:F1:F3:3E:83:44:5D:70
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/FfZvuBDmvLnTBc0WIfHzPoNEXXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.213.0/24
Signature Algorithm: sha256WithRSAEncryption
58:53:5c:96:b0:b4:c3:32:b0:f5:dc:ae:a7:c5:61:29:f9:1e:
34:7e:a7:3e:fc:75:19:42:5a:d1:54:fb:5d:e6:04:5e:3d:cf:
06:1e:32:2d:57:cf:5a:c9:b6:9d:ba:e2:2b:7d:21:03:9f:9f:
be:9d:ad:88:f0:18:48:04:22:49:c8:93:55:74:be:65:30:14:
a0:7a:18:57:d1:f1:4a:82:ff:67:59:0d:de:ca:99:65:72:80:
f0:41:19:ef:4a:28:ec:88:ab:c1:3c:e5:10:c1:de:68:7f:25:
01:a3:e7:44:32:19:b8:05:a9:0c:95:df:6b:bb:d7:d9:a8:57:
db:62:24:72:bf:e3:ca:b9:55:cf:04:51:60:bb:07:0a:45:c8:
13:1e:62:3b:f0:a3:07:68:fb:ac:c5:44:75:5c:4d:87:90:37:
1d:f5:e6:cb:e9:b4:3d:6d:6e:53:80:fd:18:bd:63:47:64:ae:
42:84:0e:c0:24:4c:f2:aa:6d:9c:bd:09:da:66:86:35:0e:5b:
63:4e:d6:5f:d7:81:68:5b:b4:49:c9:cc:78:14:2b:69:e4:f8:
84:c6:6c:2e:ea:37:5f:74:3b:e1:a2:30:56:4a:cb:6a:5e:14:
03:56:5d:f2:2e:08:2f:a2:f2:dd:82:9f:b2:9d:dd:85:c0:3e:
dc:87:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:10:58 2024 by rpki-client on console-fra.rpki-client.org