Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/FXJ9uOsu4I-FLo2RMKZssURE8z4.roa
File: FXJ9uOsu4I-FLo2RMKZssURE8z4.roa (raw, json)
Hash identifier: fKSk4sN6ZTXlIEt3CwHER/W1otp1P40U8Rf8QKfKKE8=
Subject key identifier: 15:72:7D:B8:EB:2E:E0:8F:85:2E:8D:91:30:A6:6C:B1:44:44:F3:3E
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 018CC26CFB2B61BA26DD83E7391BED48263E
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/FXJ9uOsu4I-FLo2RMKZssURE8z4.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206138
IP address blocks: 91.206.60.0/23 maxlen: 24
195.34.64.0/23 maxlen: 24
2001:67c:518::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fb:2b:61:ba:26:dd:83:e7:39:1b:ed:48:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15727db8eb2ee08f852e8d9130a66cb14444f33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:13:67:cb:9c:ce:b6:20:90:00:91:16:9a:c0:
56:d2:50:a7:f6:be:49:5f:87:cc:38:f6:02:1b:ef:
23:c4:4e:1f:f9:3d:cc:0b:c5:f7:75:40:72:fc:e0:
f7:71:68:0b:ec:a6:4b:eb:10:e2:70:08:3f:0b:36:
b5:34:4e:7a:e1:7a:1a:f0:ee:3d:9f:85:18:a5:85:
f3:33:0e:4e:6e:29:f2:b5:87:69:b4:fe:90:96:c2:
55:fd:69:c3:52:6c:61:ca:13:58:3d:83:eb:e7:e3:
aa:29:09:82:9e:6a:d9:c3:a3:bd:c0:c9:9e:b6:d2:
ef:78:ee:e0:16:e2:07:3c:21:eb:67:e2:b2:df:37:
fc:ae:9f:dd:ae:dc:f1:4a:f1:ba:ee:1d:54:da:44:
34:36:1d:73:6c:3d:49:05:2d:8c:0f:cd:61:a3:94:
ee:38:b7:b0:ec:15:0e:0d:90:1f:ff:9e:24:1c:66:
8f:ee:3c:fb:c1:f6:8a:49:6c:2f:ac:2a:61:c4:33:
a6:64:7e:de:5d:b8:bf:fc:41:8b:47:a2:e2:cc:af:
e9:f7:bd:cb:0c:20:68:73:97:8e:d6:ac:7b:8f:bb:
06:47:ac:2c:9c:68:79:1d:da:5c:f4:d8:78:0d:cf:
8c:49:bb:de:a2:2f:91:92:ce:f6:e4:4b:56:b3:99:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:72:7D:B8:EB:2E:E0:8F:85:2E:8D:91:30:A6:6C:B1:44:44:F3:3E
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/FXJ9uOsu4I-FLo2RMKZssURE8z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.60.0/23
195.34.64.0/23
IPv6:
2001:67c:518::/48
Signature Algorithm: sha256WithRSAEncryption
68:98:b8:18:dd:c6:e2:4d:91:3a:b9:33:0a:9a:6a:05:e5:77:
fc:55:8b:dc:79:0b:23:43:97:8c:51:2c:1f:9c:fc:59:1e:33:
8b:21:35:d2:a5:50:3e:87:56:a6:ae:78:91:ed:d4:ae:69:0f:
ca:58:01:6b:b9:b9:9f:11:70:c1:54:4c:2c:ef:c5:69:c3:c8:
56:2d:85:72:27:fc:87:a3:7f:a1:f4:e6:53:81:b1:38:9e:85:
b9:45:6c:b0:70:c8:b1:db:ec:34:ec:ea:96:fd:9d:5f:6e:77:
1d:9f:7e:9a:b6:2a:d4:b0:88:cc:f8:86:7d:46:3d:99:8d:80:
73:9e:7c:1f:c4:8d:ac:0e:42:aa:9c:5a:d3:5f:10:06:de:f2:
e3:0e:e8:d1:e7:aa:40:f4:68:32:7c:6c:ad:11:7d:e9:25:72:
b2:24:a7:3d:7c:41:4f:9b:99:9f:13:8e:33:b4:5f:e6:5f:dd:
e6:6e:2f:a4:f2:5d:28:9b:89:e7:0b:1a:45:31:59:45:bc:ee:
cb:8f:f3:b0:a0:1e:c1:c4:8b:8f:fb:d2:f8:43:95:de:ee:ea:
d4:83:4d:4a:20:5a:fa:75:6c:5c:05:6e:6c:b0:89:ff:1d:06:
cb:ea:9f:c9:ef:51:d1:2a:35:ff:3c:29:34:5f:4b:cf:48:d1:
03:90:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:05:48 2024 by rpki-client on console-fra.rpki-client.org