Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/FvT5ilPPl8yd--YPMxui9nSvOmE.roa
File: FvT5ilPPl8yd--YPMxui9nSvOmE.roa (raw, json)
Hash identifier: PevMrJUGLnWoM7q0n7tPwPXwYFsYHkRUYq0mE5fLcbI=
Subject key identifier: 16:F4:F9:8A:53:CF:97:CC:9D:FB:E6:0F:33:1B:A2:F6:74:AF:3A:61
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 018CC4933BE6F3B1707E12AEE5EEA2A0D972
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/FvT5ilPPl8yd--YPMxui9nSvOmE.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29684
IP address blocks: 91.212.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3b:e6:f3:b1:70:7e:12:ae:e5:ee:a2:a0:d9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16f4f98a53cf97cc9dfbe60f331ba2f674af3a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:86:a8:1b:bf:55:ab:70:5a:c8:21:cf:8a:
5d:9a:a4:8c:92:ec:5f:9b:79:63:8a:13:05:9e:f3:
8f:b0:16:ca:d2:78:c5:69:32:0f:a7:5c:52:2c:ff:
a0:7e:7a:5f:5b:15:5f:f7:f2:45:ad:f9:8b:04:24:
62:a2:70:17:07:4a:fb:96:4e:9b:ed:15:3e:da:ff:
f9:62:4e:6d:6c:93:e9:1d:b9:bc:54:bb:0e:52:c2:
a6:bd:a9:8a:c5:6e:63:0a:67:57:23:4a:5c:2d:7a:
10:45:f0:9b:49:cb:71:7b:23:5c:83:46:18:e5:3b:
d7:e1:ee:22:77:d8:bd:02:d9:a9:47:fc:48:64:b4:
cb:dc:a9:90:bb:c7:ac:01:11:94:e5:11:b1:16:f8:
a7:8f:6a:3c:cb:ee:63:b9:6b:9f:b5:7d:37:c3:0c:
e9:93:2d:50:f8:98:f6:04:f4:35:6e:46:0c:be:53:
61:1c:ef:5e:b1:98:bc:f0:df:81:61:76:3f:45:bf:
12:6e:53:8d:47:a2:2f:b6:39:2b:85:09:46:6a:f3:
75:1e:2f:d9:1a:ec:98:cc:a6:b0:5e:ed:b5:ea:d2:
79:ee:ba:4b:05:76:75:6c:9d:fe:b7:24:cb:1e:dc:
14:ea:0f:44:73:da:a4:ba:30:e6:25:60:e7:eb:99:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:F9:8A:53:CF:97:CC:9D:FB:E6:0F:33:1B:A2:F6:74:AF:3A:61
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/FvT5ilPPl8yd--YPMxui9nSvOmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.67.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f4:dc:2f:ff:d4:c6:ec:34:00:be:0d:6b:0a:44:dc:04:23:
e1:fb:a8:d3:cf:19:82:d6:86:c9:30:7d:fd:6a:c8:8f:41:03:
58:61:62:7f:71:de:72:92:85:56:f7:6b:64:fc:e6:f8:02:a1:
4d:67:07:36:ed:0c:d4:0a:ba:15:98:a0:5b:5e:88:35:ee:0e:
5d:05:e8:74:7a:45:60:11:da:d8:eb:65:00:1d:a0:ed:ab:82:
8a:74:3e:6e:af:e2:70:b5:82:34:d6:ed:94:82:38:b1:6e:f2:
14:04:8c:71:2e:80:d0:68:4f:34:b3:1d:c1:dc:d1:58:5b:6b:
dd:15:d4:68:4d:8b:34:f4:a3:4f:65:47:5f:e1:6a:51:bf:d2:
91:7d:72:97:5f:34:1f:57:18:95:2c:2e:9d:dd:fe:11:95:92:
46:51:90:77:a9:5b:b8:8a:08:ca:c6:84:36:a4:a5:c7:66:78:
71:3b:9e:1f:d0:1f:59:b4:95:3c:68:76:fb:8f:b5:93:c2:63:
12:b1:7a:4e:b6:cf:fc:c7:67:59:28:47:1d:2b:f4:20:19:5b:
74:3b:ad:dd:ad:a0:b7:6b:18:04:77:58:8c:c2:97:ad:93:0e:
f4:fe:cb:6d:26:48:1a:77:88:40:c7:26:1c:7e:a5:db:2a:57:
cb:6e:35:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:18:12 2024 by rpki-client on console-ams.rpki-client.org