Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/FJm3g-sHzB6cQwUTmqSwcmdzr9o.roa
File: FJm3g-sHzB6cQwUTmqSwcmdzr9o.roa (raw, json)
Hash identifier: bqs0qtPZc18WnjhBhzyH8Wc2OzIeC3FxZCHqmfvCDHk=
Subject key identifier: 14:99:B7:83:EB:07:CC:1E:9C:43:05:13:9A:A4:B0:72:67:73:AF:DA
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 018CC9BC068A7EB858AEAD7B3752B38FE9E7
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/FJm3g-sHzB6cQwUTmqSwcmdzr9o.roa
Signing time: Tue 02 Jan 2024 10:33:12 +0000
ROA not before: Tue 02 Jan 2024 10:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60076
IP address blocks: 193.107.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:06:8a:7e:b8:58:ae:ad:7b:37:52:b3:8f:e9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Jan 2 10:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1499b783eb07cc1e9c4305139aa4b0726773afda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:27:39:be:a8:03:01:4b:3b:78:88:d0:03:
2e:ab:ed:2d:cd:5e:c1:f4:c4:b4:bd:ac:75:cc:26:
a7:e9:39:39:cc:71:b1:61:95:3d:96:a6:01:07:b4:
19:ce:5a:6e:8a:4f:28:d8:0d:a9:43:2e:2b:93:e9:
a9:99:00:84:68:c7:51:ae:8a:80:96:40:63:5d:63:
ca:54:8d:94:ec:7b:f8:60:5b:27:78:a0:90:1a:8a:
fc:bd:59:67:bb:17:a6:b1:d7:fc:44:37:1a:66:88:
ad:c7:5a:0b:01:a4:0b:6d:eb:74:1b:e4:93:67:c6:
5d:bd:08:38:19:69:78:bc:50:4d:f8:29:be:e4:c3:
15:7b:8e:87:fc:85:53:fc:95:7c:11:2e:58:e3:03:
cc:c6:7a:3c:ef:06:69:17:8f:99:8c:07:d3:0c:80:
60:d9:f5:d8:0a:17:2a:b7:c4:90:3c:fd:80:b7:f8:
a7:64:24:ff:f7:a6:d6:64:52:44:f7:3d:ec:92:7c:
03:be:2a:89:2c:ad:ac:c7:5c:9f:c8:ac:3f:1a:df:
41:6c:b2:4d:eb:e4:71:c6:3c:78:d0:02:0e:ad:8f:
32:68:c8:57:2d:5e:f6:1d:10:c6:de:d7:47:44:f5:
90:97:1c:7a:d5:36:b8:82:87:06:2c:d5:59:b2:f3:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:B7:83:EB:07:CC:1E:9C:43:05:13:9A:A4:B0:72:67:73:AF:DA
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/FJm3g-sHzB6cQwUTmqSwcmdzr9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e7:37:71:b2:e9:c7:2d:d9:f4:a5:1d:4c:d1:f2:e9:fe:29:
cb:a1:83:25:af:1b:c4:ab:26:0a:df:fb:0f:9f:dd:52:8b:d5:
6f:55:3f:a9:54:f7:7e:fb:5d:fa:ed:d4:36:10:70:63:5b:80:
ec:b7:1a:5a:30:98:68:8e:22:84:51:40:ff:8e:46:29:ea:27:
dc:06:27:20:fe:5e:f7:08:9d:1c:f3:21:b2:60:57:c5:9a:83:
52:3e:85:93:b5:ac:e6:56:5e:ec:50:eb:5c:13:f6:47:11:53:
74:a6:91:b2:ed:59:0b:4b:e8:33:6a:aa:c0:9f:6c:15:2a:cf:
ec:d4:eb:99:01:aa:60:c2:35:af:c4:51:0f:9a:08:ff:c4:5f:
b8:ad:dd:ab:75:e3:95:89:98:70:8d:2a:29:fc:23:fc:66:52:
ad:14:6a:d8:64:a1:c8:80:7a:8b:32:5b:86:32:b2:6e:d8:3f:
7d:0e:be:85:dd:5f:00:4f:4a:ec:47:5a:c2:07:2a:b1:5d:b1:
09:98:77:43:f2:21:82:92:b9:88:85:b8:2c:e0:2d:ec:9a:7b:
e6:58:73:2b:2b:77:b4:12:16:98:ee:43:ee:73:e9:8b:5f:f6:
36:86:a3:4f:30:15:ee:39:0d:a9:dd:65:09:79:26:ce:ab:e3:
d7:55:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:15:40 2024 by rpki-client on console-ams.rpki-client.org