Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/FFAz3tspOVpAOQ5WkLYtWcLplow.roa
File: FFAz3tspOVpAOQ5WkLYtWcLplow.roa (raw, json)
Hash identifier: bwsBoT5Er7mvja24GfnhLb8+pG8eCidf8X45bfxAe/Q=
Subject key identifier: 14:50:33:DE:DB:29:39:5A:40:39:0E:56:90:B6:2D:59:C2:E9:96:8C
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 018CC4936A1E94362B4EAEF6EE2027883ABF
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/FFAz3tspOVpAOQ5WkLYtWcLplow.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200514
IP address blocks: 45.87.220.0/24 maxlen: 24
45.87.221.0/24 maxlen: 24
45.87.222.0/24 maxlen: 24
45.87.223.0/24 maxlen: 24
185.192.125.0/24 maxlen: 24
185.192.127.0/24 maxlen: 24
185.192.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6a:1e:94:36:2b:4e:ae:f6:ee:20:27:88:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=145033dedb29395a40390e5690b62d59c2e9968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:06:25:03:07:d0:63:46:c4:f9:22:bc:8e:
fb:b5:83:be:02:51:77:23:e9:3d:a2:47:6f:95:06:
74:dd:f2:d1:75:55:d8:af:b4:f2:d3:57:e8:04:99:
cb:39:b5:d2:ea:15:da:3e:3e:23:34:7a:c8:93:69:
d3:ae:cf:81:9e:3f:f3:62:08:4d:89:c8:ca:84:b2:
97:8d:d4:9d:a5:d8:29:78:7e:ef:9b:bc:c5:19:1c:
69:37:fa:18:76:b0:c8:d7:f8:34:b1:5e:dd:c3:fd:
be:62:0c:e1:01:76:fa:90:5b:bf:60:d6:06:a7:42:
9a:b0:dd:81:76:34:48:3e:67:91:b6:ff:4c:00:ff:
ed:07:61:cd:53:7c:02:29:cd:7b:e8:fc:3b:f2:86:
83:0f:75:f1:8a:c0:db:02:94:08:a7:15:00:5a:cb:
f1:8a:79:2a:81:af:32:87:45:5a:6c:c7:3e:89:43:
33:c1:2b:f8:e8:f2:59:5d:d7:ae:76:c8:81:8c:87:
93:c2:47:84:e1:4b:f6:2f:f6:a0:f9:10:c6:22:e4:
97:9d:4c:62:d9:8e:93:ab:fd:94:ea:77:37:f3:ac:
da:ce:7f:db:15:d7:60:43:83:cc:6a:cb:57:3e:92:
4b:ab:1b:14:70:41:38:7e:7b:b3:b2:d0:fc:71:50:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:33:DE:DB:29:39:5A:40:39:0E:56:90:B6:2D:59:C2:E9:96:8C
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/FFAz3tspOVpAOQ5WkLYtWcLplow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.220.0/22
185.192.125.0-185.192.127.255
Signature Algorithm: sha256WithRSAEncryption
48:ca:80:5f:83:00:30:06:db:dd:79:23:81:e5:a3:40:df:94:
b2:4e:8d:42:7b:5f:db:d3:d4:a8:18:43:fa:c4:f7:46:19:0c:
00:65:e9:59:c0:50:95:8e:d5:01:81:24:e7:29:f9:a6:90:98:
a6:54:61:17:19:4d:6f:19:a9:fd:2d:3e:64:fa:f3:69:51:9d:
b8:96:7e:44:7f:37:2a:63:9f:3b:85:01:45:44:b0:3e:99:5d:
b1:42:62:32:61:b9:dd:1e:7f:9c:81:3b:7a:60:8f:eb:96:0f:
9e:64:8b:8d:48:f0:0d:b8:2f:c8:57:f3:2e:90:60:28:f7:2b:
56:24:d1:c4:51:b0:aa:03:36:ac:3f:8a:9f:c3:73:af:3e:08:
43:7e:03:55:d4:b9:66:41:ec:ea:d0:f3:42:6d:89:3f:d7:1d:
49:a4:b7:b2:bd:31:21:10:8a:2b:b2:88:30:80:8a:75:c9:2d:
0d:30:95:10:ef:86:23:90:4d:44:95:f4:46:4d:33:7c:73:68:
94:09:fd:49:20:89:f7:8b:93:11:71:98:e8:28:a8:8d:1b:ff:
3f:2e:27:84:45:c6:ae:cc:c1:4f:4f:78:29:6f:25:86:8b:d2:
12:93:db:e4:b4:d7:34:c7:ed:1b:6e:1e:0f:90:d0:ff:bc:3b:
6a:6a:21:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 25 21:15:30 2024 by rpki-client on console-fra.rpki-client.org