Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/F3cOnPVL7MjoXo5yB0Eo0JmymjI.roa
File: F3cOnPVL7MjoXo5yB0Eo0JmymjI.roa (raw, json)
Hash identifier: Q+HKYWelTQBLkaKI7yZ18WZBp6TzQbHz1LrZDhB4t88=
Subject key identifier: 17:77:0E:9C:F5:4B:EC:C8:E8:5E:8E:72:07:41:28:D0:99:B2:9A:32
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 018CC42509B7EA8406CED29DEF7E01323A33
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/F3cOnPVL7MjoXo5yB0Eo0JmymjI.roa
Signing time: Mon 01 Jan 2024 08:30:10 +0000
ROA not before: Mon 01 Jan 2024 08:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60709
IP address blocks: 194.102.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:09:b7:ea:84:06:ce:d2:9d:ef:7e:01:32:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17770e9cf54becc8e85e8e72074128d099b29a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:d9:ab:48:f5:7e:1e:a5:e1:c4:c1:d3:7e:
3a:e9:fc:a9:04:2f:83:57:c2:e6:52:af:53:06:4d:
fb:c0:03:2e:cf:cd:43:b5:ab:a8:91:1d:22:d1:ba:
f3:00:f7:3b:42:a6:2d:84:70:39:d0:ab:e4:1a:7b:
2e:15:84:7b:da:7c:8e:16:e6:c3:e7:03:f3:d5:f5:
f9:36:a6:d6:8b:fa:a3:43:9f:3c:b6:5a:b6:49:5c:
60:01:81:2b:d7:b7:28:1a:c6:4a:99:3e:23:14:9d:
cd:e5:97:54:e0:aa:11:0a:85:39:bf:54:25:47:89:
f4:ba:ff:a2:d1:96:c9:16:2b:86:b6:ef:e6:da:b1:
e7:44:45:41:20:35:2b:ef:df:20:ca:75:02:cb:67:
0a:7b:6d:d0:be:86:ee:e4:74:59:47:7b:10:35:29:
ff:40:d7:5d:ca:99:6d:df:11:c9:7d:c7:4b:1c:ae:
1e:60:a2:f3:df:c8:af:6e:36:fb:0f:e2:a6:51:10:
da:42:27:9a:de:aa:6f:2f:57:99:0e:dc:cd:ed:62:
89:6c:e5:19:48:24:06:b6:19:18:9f:0f:e8:aa:a8:
ec:16:60:6b:e2:ee:cd:6f:47:53:f9:ad:65:4b:1b:
84:ec:12:13:d2:af:cb:74:b1:d9:3f:9d:3f:e4:d9:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:0E:9C:F5:4B:EC:C8:E8:5E:8E:72:07:41:28:D0:99:B2:9A:32
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/F3cOnPVL7MjoXo5yB0Eo0JmymjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f3:76:1b:56:48:70:62:af:42:69:2e:ce:5e:10:f6:a5:26:
21:18:0e:66:19:06:03:ff:cf:b8:96:54:c9:b2:e2:5e:89:bd:
e6:da:99:8e:36:48:5f:bc:ac:2d:32:d4:a4:7b:c2:fb:dc:90:
39:0d:9b:23:b2:a1:f8:f8:25:2f:59:c4:07:06:a4:8c:4c:8c:
d6:70:3b:97:79:da:8b:a0:2f:d6:b7:d6:19:e3:33:3e:17:f1:
3e:e3:00:da:b8:ee:ae:d2:50:de:df:db:b7:25:fd:3c:7c:a6:
62:fb:5f:f8:e0:ca:b5:57:85:94:b1:03:d4:4e:f1:1c:8a:fc:
8c:9e:1c:23:ff:ab:83:7a:82:35:e8:b9:a1:38:db:3b:1e:ee:
58:4b:4d:9f:b9:ee:ec:d3:af:c3:4a:2c:37:86:03:93:e4:ab:
e5:79:21:4e:fa:66:ef:5b:19:1e:58:5e:da:01:e9:5e:3b:45:
ff:45:ce:1f:9c:42:9d:70:55:06:12:39:bf:c3:d0:0d:9b:f5:
31:f5:64:38:aa:47:16:29:77:93:88:ec:f6:f9:6d:96:5b:63:
03:f6:7e:30:8b:ae:5a:e2:e4:53:cb:71:de:c6:ea:28:7c:aa:
6c:4a:c1:5a:a4:7c:a4:5a:73:0b:00:4b:f8:da:38:d5:bb:83:
5a:e3:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:00 2024 by rpki-client on console-ams.rpki-client.org