Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fPvGVhYjDA0qOe8pYxQuKHg8jHs.roa
File: fPvGVhYjDA0qOe8pYxQuKHg8jHs.roa (raw, json)
Hash identifier: lqj8DFDdS4uSc6dsTvP5m4LYQwdS4RndnotgMf78bkY=
Subject key identifier: 7C:FB:C6:56:16:23:0C:0D:2A:39:EF:29:63:14:2E:28:78:3C:8C:7B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE91B0A58EB7970D7F0B38BFFF989B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fPvGVhYjDA0qOe8pYxQuKHg8jHs.roa
Signing time: Tue 02 Jan 2024 06:31:18 +0000
ROA not before: Tue 02 Jan 2024 06:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211223
IP address blocks: 171.22.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:91:b0:a5:8e:b7:97:0d:7f:0b:38:bf:ff:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cfbc65616230c0d2a39ef2963142e28783c8c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:82:ff:4f:93:eb:68:81:2a:03:1a:4e:27:
c1:e1:12:8e:97:f6:3b:75:34:bd:17:38:4b:2e:41:
22:94:cf:54:b5:c5:34:95:58:90:95:c8:f0:7c:52:
fe:1a:92:ea:0d:2e:60:a5:0a:75:10:75:87:46:05:
db:bc:a0:f3:b3:f4:36:bf:3f:78:d0:d7:fb:c5:f5:
ee:24:fb:40:c8:56:d8:a6:98:59:18:27:cc:cd:27:
cc:80:7d:e0:f4:16:e9:3b:eb:09:bb:e4:ed:b8:97:
8d:f2:20:bc:73:dc:04:91:f3:e8:b5:5b:af:2b:30:
06:b4:4b:42:b2:15:f4:8e:00:3c:01:a6:af:80:6b:
85:e8:63:6f:b3:0c:c7:20:fb:9b:dc:4a:6e:1b:fb:
9d:b1:cd:5c:a0:3a:10:6a:07:ac:6f:92:96:57:8d:
29:2e:ec:54:7e:74:d4:66:ca:91:ce:cd:af:6a:8b:
99:e5:5c:66:1b:6a:55:f0:9d:fc:4b:3b:77:f2:de:
04:d5:84:09:02:0c:58:8e:2b:d2:f2:22:a9:86:6e:
4a:b2:5a:5a:09:39:ec:cb:6d:b1:13:68:fb:cc:fd:
a6:2d:b4:d1:0b:f9:d0:e2:c0:c1:ab:f6:47:40:30:
db:f5:27:ab:b1:bf:cd:c0:15:49:a7:4b:eb:b4:59:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:C6:56:16:23:0C:0D:2A:39:EF:29:63:14:2E:28:78:3C:8C:7B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fPvGVhYjDA0qOe8pYxQuKHg8jHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:37:91:6d:89:0e:e2:49:2a:5d:b8:4a:6e:4d:a0:91:3a:d1:
ad:63:0a:52:60:39:bc:a1:21:2f:3b:8d:e1:ad:20:6e:03:1d:
19:7a:84:90:01:d8:2f:e9:b1:d6:12:7d:f8:c6:3d:a8:c4:fb:
9e:22:cb:62:27:8b:61:e7:c4:fb:09:b2:a6:2b:2e:77:d2:de:
ad:80:19:76:12:87:9a:3c:f9:4f:2d:38:60:05:ac:c0:e8:c0:
df:38:22:98:25:d9:43:8e:95:ec:48:6a:f9:9a:68:00:c1:af:
e5:be:05:c9:5f:e3:6c:80:d4:a4:3d:8e:15:77:5d:ca:de:7c:
f3:5a:31:cc:58:78:c7:2c:c3:86:7e:db:ac:d9:cb:3b:25:1d:
68:a8:24:b8:c3:2e:1f:18:2e:a1:f8:e3:f7:60:71:a4:10:82:
f4:cd:39:08:1c:37:f5:87:0e:1f:f2:6d:ce:98:d7:4b:5b:99:
a9:a6:6c:7f:37:0b:2a:7b:87:68:8c:c2:03:ec:d3:92:01:79:
bf:5d:fd:ea:2c:79:8b:dc:d7:86:ba:3b:c5:79:fc:9e:6c:79:
ff:d1:9a:71:a7:df:41:40:e8:e5:a3:17:5a:ff:3e:2b:a7:be:
05:b7:9d:ec:7f:d6:46:cd:69:7a:c1:23:a7:26:13:11:1f:51:
ee:f2:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:07:58 2024 by rpki-client on console-fra.rpki-client.org