Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/_FCJJOtoMYkxMjAuXykWDjQVQNo.roa
File: _FCJJOtoMYkxMjAuXykWDjQVQNo.roa (raw, json)
Hash identifier: 8PQOS4XAuIdwWAi+MMiTR1eo09csV+b3Z9sHFQX2YpA=
Subject key identifier: FC:50:89:24:EB:68:31:89:31:32:30:2E:5F:29:16:0E:34:15:40:DA
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 018CCA2BE490271B9509BC977AC60964ED97
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/_FCJJOtoMYkxMjAuXykWDjQVQNo.roa
Signing time: Tue 02 Jan 2024 12:35:23 +0000
ROA not before: Tue 02 Jan 2024 12:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208425
IP address blocks: 185.114.23.0/24 maxlen: 24
185.114.21.0/24 maxlen: 24
185.114.22.0/24 maxlen: 24
185.114.20.0/24 maxlen: 24
194.61.119.0/24 maxlen: 24
185.146.91.0/24 maxlen: 24
185.1.132.0/24 maxlen: 24
185.146.89.0/24 maxlen: 24
185.146.90.0/24 maxlen: 24
185.146.88.0/24 maxlen: 24
185.50.70.0/24 maxlen: 24
185.50.71.0/24 maxlen: 24
185.50.68.0/24 maxlen: 24
185.50.69.0/24 maxlen: 24
185.169.55.0/24 maxlen: 24
185.169.53.0/24 maxlen: 24
185.169.54.0/24 maxlen: 24
185.169.52.0/24 maxlen: 24
194.61.117.0/24 maxlen: 24
194.61.118.0/24 maxlen: 24
194.61.116.0/24 maxlen: 24
2a0a:3900::/29 maxlen: 29
2a01:a420::/29 maxlen: 29
2001:7f8:ec::/48 maxlen: 48
2a0f:d500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e4:90:27:1b:95:09:bc:97:7a:c6:09:64:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc508924eb6831893132302e5f29160e341540da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:78:13:f6:ee:b6:69:b9:59:e5:e2:89:95:
e5:c0:35:c5:90:b6:6c:34:c6:35:28:70:ed:54:fe:
fd:ec:36:fe:9e:02:84:49:b5:da:11:ee:d9:fb:8f:
0c:68:be:1f:bf:42:90:8b:d4:d5:4b:bf:6b:a9:ca:
73:e2:3a:7d:9b:40:2f:31:9d:bc:f9:b6:fe:20:36:
1e:34:a3:39:31:42:86:2f:c7:17:25:e8:a5:96:ff:
9a:11:62:f8:6a:0e:56:8d:ae:1a:bb:df:71:0d:c3:
88:6e:2b:39:c5:d2:8e:bc:91:0b:07:ff:4a:a3:8c:
7a:17:50:db:cd:fa:c6:21:79:a9:ee:b8:a9:bb:77:
e6:9f:51:64:da:24:e3:4a:5a:73:b9:e7:87:7e:1d:
53:0c:56:ac:80:26:ea:25:e9:5d:56:4c:5f:78:8b:
d7:4f:57:ea:a4:1f:9d:c1:ba:43:ec:82:06:8f:b0:
47:38:9e:b7:23:0d:cd:53:6e:a1:46:65:a8:ce:f6:
9d:5b:14:c9:31:3b:29:d2:06:2c:3c:b6:5b:1e:b1:
a9:e1:9a:a5:85:3a:a7:70:1d:45:82:88:76:04:01:
d9:31:26:8a:6d:70:06:77:35:29:d1:82:03:ae:17:
52:cd:f0:8a:96:d0:84:7c:9c:5a:f8:7b:f6:8c:89:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:50:89:24:EB:68:31:89:31:32:30:2E:5F:29:16:0E:34:15:40:DA
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/_FCJJOtoMYkxMjAuXykWDjQVQNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
IPv6:
2001:7f8:ec::/48
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
Signature Algorithm: sha256WithRSAEncryption
28:f9:2b:68:59:84:38:3b:66:86:35:b6:c5:06:6d:54:93:6a:
cc:c9:5a:ce:2c:a8:3b:39:0e:6c:63:94:48:8e:43:3a:f1:c4:
ca:05:cd:18:2d:37:06:83:07:a9:ea:c9:b9:ae:53:e7:86:2a:
2e:21:91:c1:19:77:8c:64:f7:40:80:3c:e2:d2:fe:00:8c:8a:
67:8e:c7:2b:23:7d:d8:2a:6b:e0:c8:18:0c:ea:82:3a:07:a3:
df:e0:93:a0:a1:fd:af:7d:0e:5e:9c:d8:b2:dc:ac:03:a6:bd:
2b:4f:ba:37:09:51:2d:dd:9f:40:25:c2:f3:6c:d0:09:7f:03:
9e:e1:0e:a4:8a:0f:0d:0b:58:18:80:67:cf:b8:3f:1d:15:e4:
df:ee:f4:01:82:eb:f3:99:71:f2:62:0e:c8:76:8c:d3:d1:ce:
86:1b:2c:92:24:50:4d:2b:be:fb:45:88:9b:96:e0:f3:43:88:
aa:12:7c:94:02:67:9b:30:8a:ca:9d:a4:f0:eb:c8:23:d9:e6:
9b:c7:97:af:c8:75:d3:91:4f:da:93:78:90:d7:c1:a9:be:43:
78:50:35:00:8d:f0:ec:22:9e:21:6e:37:c4:2f:f7:75:03:10:
cd:9b:be:26:8e:94:1f:44:c0:14:a0:f4:ac:1b:3d:27:63:70:
42:0a:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:01 2024 by rpki-client on console-fra.rpki-client.org