Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/FLPoZ3iHR0hjz514nDqkHax_JOU.roa
File: FLPoZ3iHR0hjz514nDqkHax_JOU.roa (raw, json)
Hash identifier: 7Ys+hITB0JZi/wuQHCZrnQfX6GAxdwuNs2SlsRcKnyA=
Subject key identifier: 14:B3:E8:67:78:87:47:48:63:CF:9D:78:9C:3A:A4:1D:AC:7F:24:E5
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 018CC6B7CDB4F6DE70DAA27FDC05D03821E7
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/FLPoZ3iHR0hjz514nDqkHax_JOU.roa
Signing time: Mon 01 Jan 2024 20:29:43 +0000
ROA not before: Mon 01 Jan 2024 20:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212865
IP address blocks: 5.183.0.0/22 maxlen: 24
185.71.139.0/24 maxlen: 24
2a0d:d00::/29 maxlen: 29
2a0e:2400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:cd:b4:f6:de:70:da:a2:7f:dc:05:d0:38:21:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jan 1 20:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14b3e8677887474863cf9d789c3aa41dac7f24e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:4b:eb:e4:9b:4e:22:72:30:8e:67:27:c5:
c0:0a:58:3a:73:51:0e:97:0a:92:e2:93:e4:0d:2a:
81:98:8d:d9:f8:d9:19:84:44:71:7f:bf:5f:3c:fd:
dd:bd:91:8d:de:a3:d5:12:fc:59:55:f8:a5:18:05:
76:99:a5:9b:0d:6a:bb:8a:db:e3:ba:8d:17:8b:aa:
7a:6b:12:4d:91:45:28:8f:1c:eb:d3:65:43:03:4c:
c2:b2:2e:dc:e9:7f:64:03:33:0e:60:48:25:22:25:
0f:ce:24:79:64:3d:30:d2:c7:ae:87:4a:05:43:16:
57:e9:22:3f:b2:98:aa:f3:d3:60:8d:7a:bf:34:26:
47:58:01:12:dd:16:f3:4c:e4:7a:21:3d:cd:11:70:
f0:33:0c:85:ee:06:84:84:44:fb:bc:9b:4f:59:e1:
07:52:ea:54:eb:1c:61:53:8b:44:65:56:fe:7b:5c:
c7:9c:07:e6:6a:05:63:e5:16:03:c7:ed:d2:27:8f:
6a:25:bc:85:50:e9:95:08:72:5a:a4:c3:1f:55:c9:
fc:25:8f:12:6c:c2:a1:5c:58:25:63:2b:52:1d:d8:
c4:51:e0:e7:a8:62:bb:c8:6b:e7:ab:b0:86:d8:5c:
94:90:1e:78:5e:77:c6:a1:a1:3c:56:f2:bb:c6:7a:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B3:E8:67:78:87:47:48:63:CF:9D:78:9C:3A:A4:1D:AC:7F:24:E5
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/FLPoZ3iHR0hjz514nDqkHax_JOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.0.0/22
185.71.139.0/24
IPv6:
2a0d:d00::/29
2a0e:2400::/29
Signature Algorithm: sha256WithRSAEncryption
26:3a:d4:35:04:46:49:da:71:06:8f:f4:d0:7b:78:38:d6:54:
c1:22:c7:5d:3f:1d:a2:8a:28:20:8c:b5:f0:b8:88:28:9b:72:
de:d1:07:54:43:ff:c4:ab:c4:32:0e:e9:12:40:d9:5e:63:bd:
3b:f3:06:12:ff:09:18:73:7d:3b:69:99:2e:14:21:79:91:5b:
94:a5:c8:2a:56:53:38:6d:92:4b:7d:6b:ef:c4:fe:d9:bf:a3:
f4:5a:e3:3b:df:80:43:56:0a:62:9c:b5:05:50:ef:e1:9b:ad:
f2:bc:58:83:34:30:87:a7:64:54:c1:15:44:83:11:08:4e:9d:
2c:fc:f2:38:b4:dc:97:6d:f7:76:59:85:1b:1f:a7:2f:3b:1e:
11:b7:a6:23:3e:6f:4f:24:09:79:ef:79:83:6d:2d:0f:ac:7e:
c6:f5:3d:55:20:bb:bc:38:ba:92:f0:25:86:a0:4e:b9:0d:b4:
8a:74:52:ec:d8:81:08:11:25:28:d6:ba:07:de:be:26:f0:11:
57:53:d2:85:6d:42:bc:93:7b:1b:d6:ae:f4:a6:ff:44:d1:cf:
11:6d:bc:40:c3:1a:82:77:11:95:c4:74:08:79:54:ee:f7:a1:
e4:33:82:35:67:7f:e6:fb:ad:14:d7:7d:a4:75:90:05:75:20:
cc:2e:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:53:14 2024 by rpki-client on console-ams.rpki-client.org