Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/fBigisCIcOdltvzzJDuSY2FpALI.roa
File: fBigisCIcOdltvzzJDuSY2FpALI.roa (raw, json)
Hash identifier: SBkfnkXK7M12Wif0K+2jqe7tnuw7P+LpIT/9kvVuonU=
Subject key identifier: 7C:18:A0:8A:C0:88:70:E7:65:B6:FC:F3:24:3B:92:63:61:69:00:B2
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9492436BA8A77BE37D14255FDB6C7
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/fBigisCIcOdltvzzJDuSY2FpALI.roa
Signing time: Mon 01 Jan 2024 20:31:20 +0000
ROA not before: Mon 01 Jan 2024 20:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213271
IP address blocks: 151.237.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:49:24:36:ba:8a:77:be:37:d1:42:55:fd:b6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c18a08ac08870e765b6fcf3243b9263616900b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:54:2c:b6:2a:cc:35:ac:e2:63:f6:d8:98:
c0:1b:df:2e:74:03:93:14:c4:43:ee:21:01:9b:5b:
e4:4e:9a:4e:f2:d5:5d:1e:88:19:eb:16:53:9c:4a:
1f:81:8e:12:45:40:b5:c4:1c:12:4c:e0:62:ae:68:
ef:af:20:be:6a:cf:93:51:bd:48:49:d1:18:c3:db:
55:01:11:dc:c9:19:8f:a7:55:9c:dd:de:6b:7e:f2:
48:97:a2:2d:0d:1c:ff:2d:5f:c4:11:17:a2:84:99:
d0:01:ab:7b:a1:8a:96:db:16:79:50:a5:41:5a:6b:
94:d6:c4:b0:84:b6:19:2d:52:98:a9:41:72:cc:77:
b9:58:d4:c0:76:d0:48:48:83:7d:b8:99:f6:28:28:
a2:4c:c5:d4:cf:c3:e3:ba:4f:8d:27:c2:cf:d3:dd:
c3:ef:31:1f:f3:03:2b:60:80:13:5e:ba:f5:42:45:
52:33:13:ab:24:1d:78:3f:b4:51:6a:3b:77:66:f8:
5d:d8:6d:aa:38:14:51:4e:14:25:23:56:9b:93:eb:
29:75:4a:fc:78:6b:c1:e3:a8:76:f6:b2:25:fb:c9:
01:69:03:5a:86:27:fe:68:41:1a:a0:6a:39:70:63:
2e:44:b6:d8:da:d9:b9:b2:36:3b:35:e9:f4:23:ad:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:A0:8A:C0:88:70:E7:65:B6:FC:F3:24:3B:92:63:61:69:00:B2
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/fBigisCIcOdltvzzJDuSY2FpALI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.18.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7d:9c:54:49:7e:ba:db:ea:95:7f:64:7f:e3:7d:fb:f3:03:
55:33:8b:17:4d:f7:14:7e:70:95:a5:49:86:ca:80:8c:18:51:
04:e4:93:da:8a:b8:fd:10:ad:75:3c:2d:45:07:8c:c8:d8:3d:
50:ac:50:87:42:a2:2f:65:75:48:b1:7d:f1:9a:34:37:4b:d2:
76:5c:27:f0:d6:9d:37:8a:32:6f:ea:c2:e7:3b:79:30:6f:d7:
3f:3d:03:01:67:d2:3d:a7:79:f7:5f:3d:fb:51:1a:06:0b:6c:
2a:e8:b1:f3:50:a1:f4:9c:02:83:e1:c5:df:b8:92:2b:4a:18:
b2:3b:71:3f:95:6f:82:9f:51:c2:4a:0b:de:b4:fc:70:44:f1:
bb:4c:91:bb:e1:9d:cb:3c:ca:c7:04:ad:a1:3a:47:3b:55:32:
8e:91:22:4b:5f:2b:f9:0d:04:79:2a:8d:f2:f7:4f:8c:4a:83:
c0:f2:d0:1f:b4:00:34:ce:53:17:5a:5c:de:0f:c6:4a:7c:3c:
36:f8:3c:b8:3c:9c:8c:dc:5c:37:d7:34:54:bc:82:0b:ac:70:
81:40:42:36:7e:b2:dd:64:7c:73:c2:3a:f5:24:98:cc:22:9c:
12:fe:f1:0d:6c:c0:ae:a1:7e:21:80:3e:92:f0:5b:bf:dd:a7:
2e:fe:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:58:59 2024 by rpki-client on console-fra.rpki-client.org