Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/fmG1fAkX-CU7asWNEx-FVkOag5E.roa
File: fmG1fAkX-CU7asWNEx-FVkOag5E.roa (raw, json)
Hash identifier: pj6HC/Xr7NyYNOkT3LtrevSr5CmIdqHBSPB2OmEoKHc=
Subject key identifier: 7E:61:B5:7C:09:17:F8:25:3B:6A:C5:8D:13:1F:85:56:43:9A:83:91
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 018CC8706B58DAF4A43D086B8FC171ADAD45
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/fmG1fAkX-CU7asWNEx-FVkOag5E.roa
Signing time: Tue 02 Jan 2024 04:30:59 +0000
ROA not before: Tue 02 Jan 2024 04:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56671
IP address blocks: 46.255.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:6b:58:da:f4:a4:3d:08:6b:8f:c1:71:ad:ad:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 04:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e61b57c0917f8253b6ac58d131f8556439a8391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:64:05:02:c5:a4:75:eb:85:d9:cc:aa:39:
1f:57:2a:51:46:35:65:27:c9:57:be:2e:2c:c6:5a:
9d:1b:88:16:86:59:94:89:21:5b:d0:47:7d:e6:d2:
3c:ea:f0:50:96:34:4b:ad:4a:57:0a:3c:5a:a9:d7:
a2:47:e5:37:c8:51:38:fb:f9:ff:0a:f3:5d:d2:2f:
38:4b:a5:a8:8b:ff:4c:2d:94:7e:f8:b2:17:4b:34:
d5:6e:28:c6:0c:d6:2b:ae:40:9b:31:fa:65:49:d0:
03:fd:c3:fa:af:8a:1c:a7:29:f4:fb:36:e0:8d:72:
5e:83:72:75:c1:c2:ea:38:b3:5a:26:fb:3e:93:c3:
86:80:f4:c2:da:4d:dd:46:de:88:9f:ac:e7:6b:3d:
10:ea:7c:13:52:56:05:59:38:a1:78:14:8d:6d:75:
56:c3:37:39:4d:92:19:04:bb:ae:e6:e7:bb:34:48:
9e:be:b0:b3:39:2e:92:87:99:eb:30:b2:6f:2f:d5:
19:57:00:1e:5b:5e:80:b9:82:30:5e:03:14:c6:70:
ca:65:be:92:52:a8:c6:8c:4d:59:62:18:cd:77:2d:
7e:69:af:3f:71:76:d9:fa:c6:31:1f:62:84:71:e4:
42:45:d6:bf:a7:62:85:be:e5:f1:03:9f:05:9f:85:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:61:B5:7C:09:17:F8:25:3B:6A:C5:8D:13:1F:85:56:43:9A:83:91
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/fmG1fAkX-CU7asWNEx-FVkOag5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.149.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e0:e0:e4:43:44:9e:42:1a:e1:38:7f:f0:2f:61:f6:15:82:
92:81:90:c2:c3:c2:0b:c5:15:b3:49:23:86:c6:f1:ed:53:96:
f8:07:89:1c:9d:83:77:ef:6d:b3:f3:52:27:f8:9f:42:23:50:
14:18:a0:ff:e0:0e:03:2f:d2:c1:37:d0:62:d8:04:a2:38:ea:
05:7c:26:93:04:74:e0:5c:04:62:6d:ab:80:25:5f:d4:ae:2b:
da:1f:d5:f4:2b:d3:d5:80:48:c5:f0:e6:d0:b4:7e:73:5e:69:
18:90:c2:15:40:7e:39:ae:84:61:02:e8:fa:f7:a9:b2:4a:4f:
5f:86:aa:77:ce:fd:c9:2e:4a:61:52:e4:05:d9:b7:31:d7:65:
24:be:f5:f0:ec:69:15:db:08:d0:e4:38:da:9f:b0:ba:bc:cd:
db:7a:0d:b3:0e:72:a4:a5:81:4b:e7:a1:04:3c:c9:21:50:ca:
5c:87:83:1d:96:17:4a:fd:3f:57:c8:6f:af:fa:2c:fb:8c:e4:
b5:a2:00:91:5c:fd:85:1b:e0:78:45:21:04:d4:a4:fc:d4:fe:
79:63:c8:70:20:c0:d2:e4:ec:36:2c:07:6a:0d:b1:a5:b9:37:
ed:45:34:61:83:ec:71:d6:bd:cc:b9:b9:0e:72:cc:2b:04:d6:
60:d1:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 14:06:52 2024 by rpki-client on console-fra.rpki-client.org