Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/Fs6Hg0t_o9HZfLTCMAiKmY4DVtQ.roa
File: Fs6Hg0t_o9HZfLTCMAiKmY4DVtQ.roa (raw, json)
Hash identifier: ds2EqupyuF3wOC2V6KZ3dQXp6yiLE+h7vZ5zQ7l1udQ=
Subject key identifier: 16:CE:87:83:4B:7F:A3:D1:D9:7C:B4:C2:30:08:8A:99:8E:03:56:D4
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 018CCA295C48FB90557F070555E248E1B9EB
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/Fs6Hg0t_o9HZfLTCMAiKmY4DVtQ.roa
Signing time: Tue 02 Jan 2024 12:32:37 +0000
ROA not before: Tue 02 Jan 2024 12:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58011
IP address blocks: 188.244.108.0/22 maxlen: 24
164.138.245.157/32 maxlen: 32
164.138.240.0/21 maxlen: 24
164.138.244.208/32 maxlen: 32
2a0d:55c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5c:48:fb:90:55:7f:07:05:55:e2:48:e1:b9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Jan 2 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16ce87834b7fa3d1d97cb4c230088a998e0356d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:76:af:62:90:1e:ef:33:a3:ab:4a:10:ae:
f3:13:95:39:58:c4:cc:0c:24:a8:91:7e:0b:c0:84:
99:c0:38:7c:74:4d:fe:c9:06:00:9e:bd:05:97:02:
f9:43:90:f4:63:17:89:7d:c5:e9:69:23:6d:cb:a8:
ad:72:18:de:04:a0:27:69:6d:cd:4c:9b:59:8c:ad:
49:96:8a:13:8d:05:ad:a1:b0:b3:2a:ea:60:7b:13:
91:81:09:ac:4f:0b:29:75:08:10:02:52:3e:e7:bd:
6c:da:91:4c:51:7b:13:28:71:fd:66:0c:f2:71:41:
16:41:b9:79:aa:71:41:91:1f:7c:60:f8:13:bc:1d:
1b:21:68:8b:61:2b:cf:75:a4:fe:d4:03:e4:ce:a6:
3f:db:ff:84:7c:54:fc:1b:c9:60:88:a4:d0:fa:e8:
5a:5c:f2:4b:a2:89:65:60:a6:a1:ac:3d:b5:bb:85:
8d:b3:a9:98:16:4e:da:35:7c:f8:6d:3c:2b:0c:05:
c2:01:d9:7a:2e:85:64:0b:e5:dc:a4:30:6c:8a:06:
72:a7:0c:6c:72:9d:ac:7d:d1:94:7e:3d:bb:3e:07:
89:a2:5c:c8:20:78:34:47:6a:51:b3:92:44:6e:85:
c0:8a:be:55:7e:ce:f9:51:3b:84:8c:d1:4e:6a:13:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:87:83:4B:7F:A3:D1:D9:7C:B4:C2:30:08:8A:99:8E:03:56:D4
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/Fs6Hg0t_o9HZfLTCMAiKmY4DVtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.240.0/21
188.244.108.0/22
IPv6:
2a0d:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:15:64:87:18:dd:e1:ad:44:f8:5e:a3:b9:6c:57:d5:4d:18:
4f:27:dd:24:ac:de:db:68:ca:45:96:03:dd:e4:26:1c:7b:6c:
58:84:87:16:f9:9b:94:4a:2f:1e:1a:80:77:29:37:43:20:82:
81:bc:c7:a4:c4:ef:24:97:df:e7:d4:00:4c:52:fe:5f:de:ca:
cc:6f:e4:96:15:7b:48:85:5f:72:2b:d2:d5:bf:36:69:a3:ba:
0b:78:c6:b2:2c:e3:a2:d0:32:05:af:7a:1d:21:88:ee:eb:48:
ef:70:9f:8e:77:69:3f:2a:a3:f4:f1:15:99:11:43:db:53:01:
65:7d:ed:dd:2a:8e:a7:ea:63:db:02:f2:e6:17:df:d8:e9:5d:
55:fe:67:c8:1c:cd:ae:8c:f2:54:bd:14:24:90:ca:34:15:6d:
b0:02:8f:14:e4:46:1e:16:81:b3:0d:08:e1:1a:b3:bf:be:22:
bb:7a:ed:a6:1b:c7:01:77:50:93:90:cc:0d:43:ad:c7:8e:b7:
0f:70:05:d6:cc:ec:89:d3:48:38:3b:00:72:59:21:4f:11:95:
67:7a:40:2c:9a:48:75:15:55:17:5d:8b:a0:8b:32:de:93:44:
5f:72:db:a5:11:d4:16:04:bd:9c:9f:4a:01:3f:7f:77:e7:b5:
f4:16:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:12:18 2024 by rpki-client on console-fra.rpki-client.org