Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qF2m8nVoLe7cOWtok6ypLtTD3iI.roa
File: qF2m8nVoLe7cOWtok6ypLtTD3iI.roa (raw, json)
Hash identifier: Uc3hhRKf9uQrfISSq0bQLRvYPIuXzYYCOvTlvpFLVaI=
Subject key identifier: A8:5D:A6:F2:75:68:2D:EE:DC:39:6B:68:93:AC:A9:2E:D4:C3:DE:22
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018E88BC4B04E042AD4C43C76EFE3BFB39B6
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qF2m8nVoLe7cOWtok6ypLtTD3iI.roa
Signing time: Fri 29 Mar 2024 05:43:45 +0000
ROA not before: Fri 29 Mar 2024 05:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41782
IP address blocks: 151.237.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:88:bc:4b:04:e0:42:ad:4c:43:c7:6e:fe:3b:fb:39:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Mar 29 05:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a85da6f275682deedc396b6893aca92ed4c3de22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3c:be:65:5c:cf:1c:58:d1:0a:5d:0f:4b:1f:
65:84:4f:91:8a:a4:70:f1:3f:a5:b4:b6:c0:b4:cd:
81:4e:b5:bf:6a:8d:2e:80:b3:b8:fc:47:f0:d9:d0:
dd:16:0e:5e:45:91:16:8e:4e:c6:d4:d0:e4:ce:38:
75:5b:5d:f7:20:df:4f:a2:6f:0f:31:7f:24:4a:d3:
2e:fb:fa:fd:e1:ed:64:b7:fa:31:57:dd:83:f0:3e:
fb:0b:66:56:05:8d:4d:2f:35:7b:3f:d4:d6:12:ca:
cd:4f:ab:02:fe:15:f4:2f:3c:4e:11:c2:0f:34:39:
30:f2:54:ae:91:64:71:82:70:1a:6d:9f:f6:17:4f:
00:37:e9:51:96:ac:6e:f9:85:6f:af:78:96:00:98:
41:f3:4d:0a:58:aa:51:f9:fb:a4:4e:b6:2c:28:4d:
9c:46:64:09:10:d3:40:67:28:bd:32:78:cf:05:67:
8b:d2:7e:be:b5:af:09:a6:af:f2:ef:af:79:eb:72:
44:04:ea:e5:fe:87:9d:f1:ec:f3:3e:4d:98:ea:e6:
1d:6f:fa:c5:82:b5:0a:26:69:1d:6a:35:dd:f1:06:
f0:b6:8b:c2:f8:29:a4:14:37:09:06:e4:33:ca:34:
a9:e9:7e:bc:97:32:b0:a8:3c:26:94:3f:fd:c1:13:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:A6:F2:75:68:2D:EE:DC:39:6B:68:93:AC:A9:2E:D4:C3:DE:22
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qF2m8nVoLe7cOWtok6ypLtTD3iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.18.0/24
Signature Algorithm: sha256WithRSAEncryption
16:aa:23:17:42:a9:39:ba:0f:29:10:cb:80:92:f7:31:8b:4e:
05:f4:11:10:af:99:2b:e5:fa:3a:ee:01:e8:ba:cd:8a:43:5e:
06:8a:81:30:6e:54:ec:c9:c9:5b:bc:28:e3:61:6f:f8:0f:ce:
e8:a5:b9:55:4a:6f:d9:47:01:e3:bc:71:17:27:bb:66:54:64:
40:74:84:ff:06:2d:fb:67:51:a3:c3:64:ef:a8:a7:bc:a7:59:
52:c8:bf:da:23:75:26:4f:11:b0:4a:a6:88:27:4c:9e:81:8e:
5d:c1:4d:d1:8d:81:d6:8d:08:53:0b:07:59:95:f2:8b:9d:69:
f0:cf:f6:98:01:96:f8:e2:de:af:08:12:33:5c:9c:37:de:3c:
67:ae:06:d1:bf:90:89:d4:5e:a0:e9:35:57:89:c3:7c:de:98:
90:1c:7b:24:c2:e1:7c:47:8f:c1:09:69:b8:5c:57:34:68:9a:
74:7b:4f:81:9d:73:16:06:8e:ed:a7:86:26:05:bd:d4:1c:be:
05:1b:cf:78:25:9b:09:40:d4:91:4c:93:64:e6:d4:7b:50:2c:
3b:7c:dc:ee:c2:c6:83:57:e8:31:93:04:de:94:e6:9a:39:d1:
a5:71:f3:4a:61:d5:e6:a0:83:26:b3:16:09:bb:cf:f2:32:8d:
10:3b:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:20:01 2024 by rpki-client on console-fra.rpki-client.org