Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/fxcO6FKZg7Gorfsk9_Ov1B0RoY4.roa
File: fxcO6FKZg7Gorfsk9_Ov1B0RoY4.roa (raw, json)
Hash identifier: 6/RL/l0r6CvTxvIIylm4/YdeN1y8vdmoW6wyah2xRC8=
Subject key identifier: 7F:17:0E:E8:52:99:83:B1:A8:AD:FB:24:F7:F3:AF:D4:1D:11:A1:8E
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 018CC348F3A39B75B8A9051606769EF50240
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/fxcO6FKZg7Gorfsk9_Ov1B0RoY4.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42487
IP address blocks: 185.173.200.0/22 maxlen: 22
2a0e:e080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f3:a3:9b:75:b8:a9:05:16:06:76:9e:f5:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f170ee8529983b1a8adfb24f7f3afd41d11a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:58:2a:4d:d0:80:99:22:c1:92:4f:1a:0d:
05:bf:a5:17:a1:e5:a5:fa:a6:98:81:29:ea:ed:53:
4f:b7:e0:5a:59:e3:93:8a:19:1d:0a:4a:77:38:82:
4e:4b:62:e5:a6:d9:e3:30:7b:e4:ea:a1:7a:8f:91:
2f:55:a2:f0:3b:89:01:45:43:12:28:90:d4:59:f8:
8c:d4:53:ab:90:0e:8e:14:e6:22:43:0e:2b:f6:8c:
4b:ee:2a:22:86:5c:9e:4c:21:ea:68:27:a8:5a:74:
c2:35:66:0e:b6:aa:15:31:ad:bd:29:8c:c0:23:50:
00:98:44:4d:12:d0:14:74:08:5a:88:2a:c4:45:1c:
57:cd:94:d0:01:8a:8c:cd:28:21:72:c2:25:39:19:
84:27:83:40:9b:15:85:e7:d6:5c:9e:9a:63:28:83:
15:22:77:9b:bc:fb:f3:aa:82:59:c7:ab:0a:ec:d4:
27:01:5d:6e:c5:b1:e0:dc:bd:a8:cb:a3:23:51:46:
46:33:22:ac:37:54:0c:15:c6:a6:fe:67:23:e4:48:
31:7d:68:3c:0c:b3:43:63:08:21:b8:1d:08:be:bb:
b5:b8:de:dd:88:cb:27:44:fb:a8:ae:a7:bb:ec:6c:
f7:39:29:34:34:83:1f:16:87:64:5d:c6:0d:03:52:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:0E:E8:52:99:83:B1:A8:AD:FB:24:F7:F3:AF:D4:1D:11:A1:8E
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/fxcO6FKZg7Gorfsk9_Ov1B0RoY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.200.0/22
IPv6:
2a0e:e080::/32
Signature Algorithm: sha256WithRSAEncryption
38:e8:4a:a4:03:42:2f:e1:79:be:13:44:79:9f:96:57:1a:cb:
36:4e:88:37:c4:77:25:27:f4:47:e1:36:9b:5c:cc:d9:3c:43:
04:97:88:af:a3:84:c3:57:a6:59:5a:5f:23:89:88:0a:24:3f:
e2:78:45:00:c1:a2:c4:4d:6d:15:df:f7:97:71:37:56:98:6d:
e9:4c:d9:5d:3d:1f:0b:1a:8f:00:e9:c6:e1:8b:96:5e:74:c9:
b5:8b:28:ac:57:48:20:46:86:34:d2:06:66:25:6a:3c:bd:df:
ae:46:77:d4:d0:9b:93:53:f3:7b:42:43:2f:2f:83:f0:2e:bb:
20:0d:43:27:4f:3e:99:d8:21:f5:f9:db:9f:80:67:09:52:7c:
08:e0:82:49:6c:fc:7f:4a:5d:d6:b7:38:bb:9e:b4:28:c5:d0:
19:87:ea:37:ed:2c:21:a1:a2:e5:ea:a3:9f:c1:b4:ea:1c:85:
fd:90:0e:17:09:fe:33:b2:68:02:61:ae:50:13:41:7c:3f:55:
3f:72:50:30:20:65:4e:08:b0:c6:cc:3c:7d:a1:cd:0d:50:64:
b2:af:bf:8d:e2:f2:e5:62:26:66:be:37:65:d5:29:27:08:d0:
62:14:ae:d5:08:43:28:75:d6:c0:4f:5e:14:71:68:fc:68:e5:
09:78:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:25 2024 by rpki-client on console-ams.rpki-client.org