Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FNYwkKuCQ8v9rYALMtCO7OPbi6Q.roa
File: FNYwkKuCQ8v9rYALMtCO7OPbi6Q.roa (raw, json)
Hash identifier: axN4FM0y2YeWYavA7TjLEzUU/A+7nx6oGv2InDcWOh0=
Subject key identifier: 14:D6:30:90:AB:82:43:CB:FD:AD:80:0B:32:D0:8E:EC:E3:DB:8B:A4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50124924D6749E7E861148C8CB9B989
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FNYwkKuCQ8v9rYALMtCO7OPbi6Q.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203458
IP address blocks: 91.188.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:24:92:4d:67:49:e7:e8:61:14:8c:8c:b9:b9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d63090ab8243cbfdad800b32d08eece3db8ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:ca:c4:f6:88:ca:36:43:5e:db:bb:37:a8:
36:5b:93:49:d2:f2:fc:40:f2:8b:c2:bf:1b:78:9a:
6a:45:6b:c7:68:a3:eb:1e:7c:78:0a:94:5d:03:8f:
46:22:da:39:5b:5d:8e:89:53:cd:41:2c:09:08:67:
7b:63:fc:62:0d:58:fa:41:3f:33:3a:4e:4f:c7:d5:
5b:9f:4b:d2:9f:47:cd:cf:a3:2f:6a:9b:44:83:00:
56:f5:cd:45:63:d0:a9:a0:ae:f6:84:f9:94:73:9d:
74:00:15:82:0a:f8:b8:27:cb:c9:2c:4f:af:eb:29:
ea:82:5a:17:f5:07:fe:1b:0c:58:09:82:53:e0:12:
18:a4:21:d4:cd:25:c5:76:62:7e:30:40:05:3d:26:
db:97:c8:8a:2a:5e:e7:84:15:9a:01:fa:ab:c4:ba:
9d:2e:3a:8e:ad:2c:b7:2f:a8:eb:da:c3:ca:73:06:
0f:19:31:ab:db:0d:45:d5:1f:a4:a4:2e:6f:bf:2c:
21:14:1e:93:97:44:7b:3f:11:93:0e:87:7c:3f:ef:
d5:39:05:d7:a4:8c:d6:6a:9d:ba:f9:ad:f2:43:86:
4d:69:c7:49:cd:9d:e7:88:0f:7b:ad:14:0d:30:4c:
4d:a7:79:de:77:9a:29:71:f9:e9:85:43:15:c9:d6:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:30:90:AB:82:43:CB:FD:AD:80:0B:32:D0:8E:EC:E3:DB:8B:A4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FNYwkKuCQ8v9rYALMtCO7OPbi6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
44:70:05:1a:00:5e:db:2a:7e:14:82:93:c2:d0:bd:74:42:57:
9b:57:a1:17:a2:be:f6:87:f9:7b:1d:fd:ea:aa:b4:02:88:56:
cf:1b:bc:85:4c:f1:b0:b3:e6:f2:4b:32:bb:05:c7:a4:3b:0f:
76:3e:9e:de:b0:d9:57:d8:67:63:56:ef:02:f7:cb:9b:d7:55:
33:db:bd:19:9d:62:b3:f4:95:eb:70:fc:84:e6:d8:b3:c3:ed:
28:83:92:f9:f1:5b:5c:31:90:ae:68:61:a2:3f:e4:91:ae:c7:
a7:16:0d:57:96:55:f2:c0:a5:4f:f9:59:e4:14:f0:19:0e:76:
bf:44:d0:77:5f:0e:0f:e2:d9:20:16:3d:3d:5a:d7:cb:be:cd:
97:8d:66:45:b2:34:72:d5:58:e6:1c:79:1e:2d:11:8a:f2:c1:
11:4b:75:5a:3c:0c:ed:bb:b0:4a:1c:6d:2a:40:05:7f:ea:de:
de:71:98:47:a0:e8:85:26:4e:6f:26:ba:b6:31:39:96:3d:46:
4f:ad:fe:26:9c:0f:41:a8:91:27:03:5b:c2:37:db:1c:44:7e:
bd:7b:01:1d:1c:46:72:2b:f8:ea:9c:17:44:e5:f0:4a:a2:88:
d3:ca:9d:c7:92:11:e3:c9:0e:27:ec:a1:09:d5:ed:7b:53:1b:
74:a8:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:22:05 2024 by rpki-client on console-fra.rpki-client.org