Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/FErJ4mJB59Ok-5JzHa2Qfrv4zXg.roa
File: FErJ4mJB59Ok-5JzHa2Qfrv4zXg.roa (raw, json)
Hash identifier: ISgzS+LHG+pUnvINmlGj0IEbd1SC8nNE7TIWynwSZ8Q=
Subject key identifier: 14:4A:C9:E2:62:41:E7:D3:A4:FB:92:73:1D:AD:90:7E:BB:F8:CD:78
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 018CC56EFDA52EF58DE35D07774439E2C549
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/FErJ4mJB59Ok-5JzHa2Qfrv4zXg.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24685
IP address blocks: 146.19.54.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fd:a5:2e:f5:8d:e3:5d:07:77:44:39:e2:c5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=144ac9e26241e7d3a4fb92731dad907ebbf8cd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:9a:27:43:a5:84:d4:fa:98:74:3a:f4:72:
85:d9:87:fc:45:f5:4b:12:fc:5c:5a:bd:2a:fe:ce:
55:7e:39:b7:11:a3:fc:41:59:77:95:12:ff:f0:e7:
1e:61:6d:85:f6:ac:36:a6:e3:b9:3d:0b:66:68:d5:
62:61:9f:e9:8e:75:2f:5a:fb:d2:c5:f8:13:77:1d:
5b:1a:db:8a:7f:8c:52:b0:61:21:30:f9:3f:98:a2:
3e:bd:e9:99:7f:66:5b:cd:c1:f5:f7:2a:ed:1b:10:
41:74:a9:2a:5d:76:b8:cd:96:1e:22:27:91:44:bf:
41:41:52:82:b5:1e:75:8c:53:95:b8:0e:a2:b9:fe:
ce:3c:75:38:32:f5:ef:71:35:e1:d6:56:5a:94:ec:
25:20:25:65:0b:3b:18:1f:ea:a7:03:fd:fe:2c:81:
ed:04:28:8e:c5:48:42:12:bf:27:d3:e4:45:e4:e3:
b9:42:35:f8:32:ae:f8:db:38:73:8a:0e:86:c0:53:
5e:c6:a0:fc:08:61:81:f6:41:74:b4:3b:53:c1:b4:
cf:da:65:22:45:3e:0b:9f:ff:2e:52:77:c4:59:51:
52:90:00:42:98:f6:1b:07:83:3b:1b:b5:95:2c:62:
98:93:0c:44:dc:64:30:e2:89:8e:08:68:e8:53:f0:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:C9:E2:62:41:E7:D3:A4:FB:92:73:1D:AD:90:7E:BB:F8:CD:78
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/FErJ4mJB59Ok-5JzHa2Qfrv4zXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ad:f8:7a:07:88:5c:e2:fa:24:44:e7:f4:7a:2f:92:e8:0f:
c6:6f:05:26:35:84:cc:aa:bb:42:5d:22:d5:0b:b0:6a:a5:f9:
b3:d7:3d:7a:fa:db:98:c1:91:e2:a2:65:de:72:17:4f:ca:c4:
df:43:fa:40:cb:77:f3:8f:4d:1f:d4:6b:bf:e4:20:78:cc:52:
e0:ac:db:4c:0d:d5:c5:7b:65:4c:e2:08:c1:97:cf:56:d8:c8:
5c:25:5a:3a:77:af:4a:38:8c:b2:9d:06:fc:c7:53:48:4e:46:
64:e0:aa:89:36:bb:12:5b:9f:92:21:bb:9e:cb:22:e1:16:3d:
8e:c9:45:6d:0d:f6:eb:be:9f:6c:a9:b2:5c:63:01:fd:5d:ae:
73:ac:90:9d:57:d5:15:58:70:4b:16:2f:5e:1e:bd:9b:90:a8:
93:d7:39:6f:67:c3:48:ed:db:51:37:35:98:25:d3:a2:ba:80:
36:84:bf:44:d4:6d:0a:3b:58:bb:5f:94:0a:57:12:cc:32:41:
13:1f:4f:52:5a:dd:a6:df:dd:d7:f5:50:be:c8:06:5c:f2:d0:
03:05:15:98:47:ab:66:61:62:25:a0:a7:1e:a5:e5:93:81:88:
09:d6:ee:7c:bd:bf:9c:98:03:4d:a2:08:9b:10:a4:67:5b:23:
f5:1e:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:14 2024 by rpki-client on console-fra.rpki-client.org