Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bSY5s5kKwwGCcOZIVUiBiLMuUXk.roa
File: bSY5s5kKwwGCcOZIVUiBiLMuUXk.roa (raw, json)
Hash identifier: EqDdViFi/O7C9B0WckkEnVfO94HxFnliLN9S2ZDa+Hc=
Subject key identifier: 6D:26:39:B3:99:0A:C3:01:82:70:E6:48:55:48:81:88:B3:2E:51:79
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B940B8B9DE40EAEB83FB622C43B774
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bSY5s5kKwwGCcOZIVUiBiLMuUXk.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201005
IP address blocks: 151.237.67.0/24 maxlen: 24
151.237.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:40:b8:b9:de:40:ea:eb:83:fb:62:2c:43:b7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d2639b3990ac3018270e64855488188b32e5179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:91:b9:81:a1:bf:f6:7f:5c:d3:cc:67:3f:
2e:62:b3:60:e2:05:ea:b4:db:2b:18:56:19:c3:1f:
19:fb:c6:5f:60:80:83:6a:78:4c:62:85:ae:69:ed:
3b:db:8f:fd:da:97:26:52:57:6e:d0:a9:00:c0:c9:
4a:8b:5c:df:68:22:31:e6:a0:e1:d1:be:10:85:32:
b7:61:c2:17:41:77:65:9e:02:4c:b0:e9:58:03:89:
1c:81:37:17:8a:3d:99:82:7e:71:b9:4d:b4:7b:60:
27:4c:a2:c4:cf:9f:04:c6:aa:f7:12:01:4d:c1:c9:
ea:4c:cb:17:a0:04:19:4e:48:0f:71:07:81:90:81:
1c:42:be:ad:02:ed:a7:f8:1e:47:82:75:61:ee:f3:
21:1c:7d:bd:75:eb:60:51:96:9b:27:3b:b6:d6:f1:
57:22:a2:cd:3b:94:6e:7a:36:ce:8c:72:fa:15:84:
02:2a:d8:02:8a:43:b4:32:75:e6:a4:2b:22:69:ff:
a6:4e:76:d8:93:fe:e6:c7:32:9c:91:dc:8e:b5:4a:
ed:dc:54:17:bc:5e:89:e1:7e:64:c9:20:e5:e7:a3:
af:54:b1:20:07:ec:16:ee:89:53:47:60:98:a6:69:
f7:62:2e:36:b8:61:da:12:bb:d9:4f:d6:9a:cf:87:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:26:39:B3:99:0A:C3:01:82:70:E6:48:55:48:81:88:B3:2E:51:79
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/bSY5s5kKwwGCcOZIVUiBiLMuUXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.67.0/24
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a7:81:0d:5b:95:19:c4:10:46:1e:ba:cf:a8:f5:3b:f8:6b:
cc:fc:5a:71:bc:7a:c1:8e:43:63:41:8f:35:c0:22:3e:94:f6:
8a:14:6d:a4:44:fb:57:4f:fe:1d:7a:86:41:3a:e6:16:1b:0a:
3d:14:6c:51:f2:66:0c:f8:34:c1:d9:43:c6:4e:11:1c:85:e0:
c4:ee:9d:81:a4:1f:b9:34:15:e2:b6:2e:d9:a8:24:8f:5a:f0:
26:b9:d9:f7:52:53:d6:19:64:ae:2f:52:92:bc:15:24:72:e2:
66:2a:1e:c3:13:23:c9:ed:00:c8:6e:26:cd:4d:62:9f:c9:bd:
a5:45:7b:ea:6d:21:79:f0:ed:f4:0e:8f:d1:54:ca:dc:d8:1a:
d7:57:14:75:fc:82:1d:7d:c3:fd:bb:b6:5d:2e:02:a0:aa:05:
b4:cf:e5:3c:d1:34:ca:ff:c5:e9:b9:9d:08:dd:17:02:cf:b5:
44:c2:cf:47:94:44:f4:12:46:57:22:6e:55:ba:48:aa:e5:09:
65:62:6f:61:e8:39:63:c0:6e:30:cb:4b:ac:98:6f:e9:ea:8d:
20:b5:4a:73:6a:8c:52:fe:42:e9:6a:79:81:c7:2a:d2:51:de:
91:95:2e:d8:9b:2f:fb:14:14:31:7a:e1:41:67:05:1d:bc:d1:
ae:1b:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:58 2024 by rpki-client on console-fra.rpki-client.org