Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fpPwsEgm6bN9ChQqH9QpRYNwL6c.roa
File: fpPwsEgm6bN9ChQqH9QpRYNwL6c.roa (raw, json)
Hash identifier: Hicy3mF6IJwMqdkpIWA7aEzpwkacdU0nlovl+ytXeGI=
Subject key identifier: 7E:93:F0:B0:48:26:E9:B3:7D:0A:14:2A:1F:D4:29:45:83:70:2F:A7
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EEB1E7C3A0583F3927ECFF40DF7CD
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fpPwsEgm6bN9ChQqH9QpRYNwL6c.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31469
IP address blocks: 79.124.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:eb:1e:7c:3a:05:83:f3:92:7e:cf:f4:0d:f7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e93f0b04826e9b37d0a142a1fd4294583702fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:61:bb:16:20:25:d8:e9:f7:16:f8:4b:08:
42:e0:fd:74:a2:b7:df:30:1f:4c:f9:4f:88:1a:52:
71:e8:2d:cb:13:55:82:56:1a:91:a2:3d:a5:6e:36:
4e:82:11:d1:09:3e:92:37:45:ad:e6:e1:46:73:e7:
fc:89:99:14:5d:16:61:0a:53:9c:2b:82:04:3e:8c:
1c:d6:99:e3:71:40:a6:7a:b9:d7:b9:c3:ef:b2:b0:
22:a9:e6:82:50:cc:d4:58:fe:08:10:70:fc:1e:99:
aa:fd:fd:93:7a:2c:9c:91:f9:38:74:0a:22:1a:bf:
51:91:8d:b0:80:f8:14:8e:e9:1f:b4:d1:da:b1:86:
f3:a3:1c:fd:7f:a3:b9:61:c6:4a:7e:26:8d:f9:c5:
9c:c5:8d:70:1c:83:30:7d:7b:22:d4:d1:de:b3:a6:
53:83:84:62:62:20:04:ff:f6:a8:a8:69:b3:a9:c0:
7b:30:a8:63:aa:e5:38:d8:c2:90:c4:d8:61:60:75:
cb:5c:ad:99:9d:9d:22:ff:6b:a5:16:fd:52:15:f5:
1c:67:e9:c3:52:ce:10:57:09:9f:7e:eb:cd:a7:63:
26:40:54:d6:01:71:94:91:95:56:5b:41:a2:f8:65:
75:31:c1:16:be:0f:97:e5:fe:52:93:2b:b1:d6:6e:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:93:F0:B0:48:26:E9:B3:7D:0A:14:2A:1F:D4:29:45:83:70:2F:A7
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fpPwsEgm6bN9ChQqH9QpRYNwL6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:a3:3a:2d:00:99:ae:1c:25:45:53:cb:de:98:18:bf:44:ca:
51:a8:6b:81:db:1e:a8:6b:e1:60:de:66:3a:65:26:fd:16:d7:
66:78:07:0d:73:aa:c3:70:fe:4c:47:bc:26:83:3f:39:35:d2:
2d:b9:40:a0:90:4c:3d:a6:89:82:e5:eb:5d:08:e7:ec:1f:3f:
fc:cb:84:2b:59:2a:b5:87:a8:3f:52:75:f4:68:b3:bc:e6:03:
f8:4c:80:0e:19:7f:52:d7:64:0a:02:d5:f1:ba:f8:7b:98:ce:
1b:67:5d:dd:cb:bb:52:80:9a:ff:7a:b9:cf:f2:10:2f:8a:07:
f2:ba:a9:26:d5:66:96:4c:27:9e:8b:0c:87:34:57:8e:18:9e:
49:bd:e3:37:b1:7b:b9:10:1f:02:c3:c3:6d:f6:07:35:4b:0a:
ab:93:7b:70:db:4b:d7:41:73:01:49:2f:a7:33:f3:b3:50:e0:
41:03:6c:2d:ca:77:8b:cc:09:1f:f6:9f:54:2b:30:d1:ba:aa:
a7:64:18:c0:18:50:e4:0d:69:37:d7:af:cc:bf:bd:bc:3c:8d:
2a:a7:cf:61:c3:85:fb:dc:12:eb:2c:97:b0:42:30:68:41:25:
fa:f3:c7:52:72:eb:2d:93:d7:e6:f1:2c:4f:68:45:06:98:81:
9c:50:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:51:32 2024 by rpki-client on console-fra.rpki-client.org