Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FX4BmK0N9ZQ4BCdpygK_G7v1WJw.roa
File: FX4BmK0N9ZQ4BCdpygK_G7v1WJw.roa (raw, json)
Hash identifier: ppyXW3MqBCenXEyIQWkIQb9DN9a909JunHCQTheC6Rc=
Subject key identifier: 15:7E:01:98:AD:0D:F5:94:38:04:27:69:CA:02:BF:1B:BB:F5:58:9C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50117CF6688EBDFB33A629B80A6E13D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FX4BmK0N9ZQ4BCdpygK_G7v1WJw.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57138
IP address blocks: 194.242.2.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:17:cf:66:88:eb:df:b3:3a:62:9b:80:a6:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=157e0198ad0df59438042769ca02bf1bbbf5589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:65:9c:25:6f:70:88:cf:db:27:cb:d7:db:
69:e4:85:3b:93:18:1e:c2:45:63:a1:64:53:bb:94:
1a:81:4b:e4:a2:da:74:0a:ec:85:84:aa:ec:cb:64:
72:3c:64:6e:58:3e:a7:fe:a4:9b:cf:1b:de:4b:42:
18:73:fa:6b:9f:e0:12:ed:e9:bc:35:5e:84:7f:10:
fd:5f:1c:1d:79:97:89:18:5a:8f:39:4d:ad:2f:b6:
9d:06:45:ac:70:a3:3f:7d:9a:79:da:9c:7f:ec:54:
c6:d2:c8:14:89:b5:ed:a0:30:6b:75:88:93:8f:b7:
79:db:6a:42:eb:7b:21:eb:df:39:f6:db:4a:26:c2:
27:06:6c:43:3a:85:c5:50:91:8b:37:8e:31:cf:96:
64:88:bd:d1:97:4a:a8:f8:36:96:b5:de:32:db:30:
a0:7e:ea:1d:82:4c:34:a6:58:a7:99:2c:7a:e2:bf:
d0:20:e8:d3:8e:36:75:97:de:9f:8b:d1:ea:79:8a:
41:55:22:6d:a8:cd:f0:e5:bf:21:2c:37:8d:71:3c:
75:3e:5e:5d:e2:83:c1:dc:f5:03:0c:59:b9:d5:07:
2a:93:39:22:b9:cf:8e:98:87:c1:b1:1e:38:16:19:
6a:6c:7a:0a:5f:0e:b2:2b:df:f7:94:ee:9b:e5:8f:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7E:01:98:AD:0D:F5:94:38:04:27:69:CA:02:BF:1B:BB:F5:58:9C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FX4BmK0N9ZQ4BCdpygK_G7v1WJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8a:48:60:58:17:ce:b4:ba:40:7b:08:eb:61:fb:77:b0:a6:
cc:e2:fc:2c:b6:5a:ae:f4:d0:3a:d2:5e:bf:6d:20:ac:c5:07:
e9:74:9e:07:84:cb:11:c6:53:d9:b5:f5:36:09:87:1f:f8:78:
da:c2:4d:a9:df:30:bc:7a:b0:96:7f:c0:db:c3:bb:37:18:fa:
e5:f8:7e:10:5c:de:f7:d7:41:68:86:61:a9:c9:3e:17:de:de:
cb:a5:86:23:6b:9b:04:55:62:b4:47:9b:84:40:37:e8:5d:80:
0c:38:fc:a9:4c:98:46:86:6c:c3:4d:c4:eb:30:28:16:3d:a2:
6d:da:c0:fe:6e:4c:2b:5b:12:42:8a:03:1f:da:42:97:1e:29:
61:5c:7f:95:9b:b8:48:92:98:97:af:f0:16:eb:05:6f:6c:54:
5b:8e:f6:74:e6:2f:94:11:b9:f9:45:ed:31:4d:b2:81:36:9b:
df:c2:81:90:57:39:49:7f:d4:30:04:3e:4c:41:26:24:df:6f:
71:77:c0:63:b3:6e:c2:02:67:00:58:e1:e4:f8:e0:2d:32:ec:
a7:e2:53:76:31:b4:f2:fd:21:06:58:76:4e:88:e4:86:2b:22:
42:a8:8d:95:4a:b6:9b:b2:04:ca:da:98:14:a4:e4:c8:93:4c:
29:89:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:49:05 2024 by rpki-client on console-fra.rpki-client.org