Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Fpo-P-MABNVe6j8nRUswGgeNLU4.roa
File: Fpo-P-MABNVe6j8nRUswGgeNLU4.roa (raw, json)
Hash identifier: ScR36rmnqZLphBiAnDC3HBZeKQONhXxvxZ3LpDqXTyI=
Subject key identifier: 16:9A:3E:3F:E3:00:04:D5:5E:EA:3F:27:45:4B:30:1A:07:8D:2D:4E
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC971A8C3A4DAB373A959BB00B05D59E1
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Fpo-P-MABNVe6j8nRUswGgeNLU4.roa
Signing time: Tue 02 Jan 2024 09:11:58 +0000
ROA not before: Tue 02 Jan 2024 09:11:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216151
IP address blocks: 77.76.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:71:a8:c3:a4:da:b3:73:a9:59:bb:00:b0:5d:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 09:11:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=169a3e3fe30004d55eea3f27454b301a078d2d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:90:41:1e:5b:04:5e:cb:8c:bf:e2:23:04:
a1:9e:a3:56:19:99:8a:39:99:43:1e:b9:64:43:20:
4b:2e:8b:a4:56:c3:12:94:41:5d:6e:35:e9:d3:13:
ec:29:83:d5:86:60:a5:a6:62:0e:d4:c2:d0:b0:6a:
b4:63:04:9d:da:8c:cd:63:90:4d:ed:b7:08:ee:7c:
2e:b0:f7:c3:06:2a:88:f3:6f:e6:69:99:2f:bf:d9:
b1:87:c4:ed:c8:42:7c:85:27:08:82:3d:0f:c1:f6:
cb:16:df:aa:c7:d4:70:60:dc:b7:e5:22:04:fe:3f:
98:23:60:2a:df:65:20:0e:7b:fd:f5:8a:4f:25:5a:
90:97:bc:be:92:78:75:2a:c1:00:80:b1:4f:08:38:
dd:aa:90:0d:39:bd:cc:5b:87:e2:e6:2c:84:f7:dd:
4e:98:72:92:e9:bb:b7:6c:6a:e7:a1:4b:c7:97:52:
46:f3:50:d1:c1:6f:65:1d:f0:38:b4:f2:6a:78:b2:
67:27:18:76:84:63:c3:47:dc:36:7c:dd:52:c0:c0:
5d:fb:6a:fd:19:64:cf:d8:20:f2:89:af:59:81:d3:
02:c8:57:7c:3c:75:b1:56:39:e5:b6:c0:02:17:68:
29:80:ea:a3:ff:9c:56:09:b6:d3:f9:04:ce:7e:05:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:3E:3F:E3:00:04:D5:5E:EA:3F:27:45:4B:30:1A:07:8D:2D:4E
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Fpo-P-MABNVe6j8nRUswGgeNLU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:cb:1c:69:63:c8:78:60:cb:f1:71:2b:6c:8f:cb:18:19:4d:
bc:5c:41:b2:c7:de:36:77:bf:7a:dd:5a:2a:c8:e1:de:15:df:
86:40:cf:9f:56:3c:6c:c6:ee:c2:7a:d8:68:7d:de:9f:c2:90:
07:a7:93:1a:3a:9d:94:28:f0:b8:99:7a:21:7d:a9:b3:e0:42:
e2:43:41:48:7a:2b:64:11:5f:3d:fa:b1:18:42:2e:dd:69:52:
00:37:b1:f8:60:4c:b3:80:e8:c3:55:a6:ce:02:39:ef:d1:ac:
b0:f3:f5:84:5b:77:15:06:15:47:05:05:29:8e:f4:71:b3:3c:
d7:32:b3:bc:67:9e:ee:67:b6:f1:2d:16:42:b7:0f:1c:5d:9d:
f8:81:40:6d:a0:35:56:87:c5:66:3c:0b:ec:dd:a1:4c:9d:e1:
7b:7f:05:f2:cb:9e:0e:48:a9:b3:01:4f:c9:cc:66:6d:55:e3:
b9:74:2c:66:c0:8f:42:fb:47:d6:e8:7d:68:36:1c:13:6b:19:
ae:fb:5b:50:f4:6f:c7:0e:f1:0d:2f:ce:95:8c:73:fa:53:57:
f8:c9:22:54:ab:1f:0b:b5:c2:c8:9e:fe:9f:18:f2:88:fb:a3:
11:d7:2c:39:48:f6:6e:7b:7e:a6:ad:68:2c:21:8e:0c:6d:8d:
e6:86:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:17:42 2024 by rpki-client on console-ams.rpki-client.org