Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/FJQIZVMeiyc9wSIzstPQlHfse_E.roa
File: FJQIZVMeiyc9wSIzstPQlHfse_E.roa (raw, json)
Hash identifier: qFFAZ8Xoid2TpsYYJs6ifWPS3M4YhkDatAXCroG6eVU=
Subject key identifier: 14:94:08:65:53:1E:8B:27:3D:C1:22:33:B2:D3:D0:94:77:EC:7B:F1
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 018CC5DC69FE87FCBC719C265707BA3441B8
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/FJQIZVMeiyc9wSIzstPQlHfse_E.roa
Signing time: Mon 01 Jan 2024 16:30:05 +0000
ROA not before: Mon 01 Jan 2024 16:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200043
IP address blocks: 31.3.172.0/22 maxlen: 24
31.3.168.0/22 maxlen: 24
31.3.176.0/20 maxlen: 24
185.98.8.0/22 maxlen: 24
185.63.168.0/23 maxlen: 24
62.220.80.0/21 maxlen: 24
62.220.88.0/21 maxlen: 24
109.238.124.0/23 maxlen: 24
109.238.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:69:fe:87:fc:bc:71:9c:26:57:07:ba:34:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jan 1 16:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14940865531e8b273dc12233b2d3d09477ec7bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:f8:90:c2:f1:fa:51:f7:63:95:d2:98:30:
f1:03:ae:ba:28:4d:4e:76:b3:2c:c4:59:64:c1:33:
65:b4:bb:ea:47:e3:c8:b6:16:6e:81:a0:a5:b0:e0:
8e:59:21:b3:43:79:37:0b:1b:56:ad:ee:bb:b0:00:
2d:0e:50:71:9d:37:df:80:93:f1:a1:75:21:d5:0c:
71:1e:8d:01:f0:b2:ef:5b:d2:f4:da:ba:7f:d2:a8:
c9:34:ad:53:c6:10:26:10:b6:09:55:d1:2f:74:30:
38:b2:21:3b:0a:1a:58:e8:21:54:72:e5:88:8a:7a:
92:ac:1d:e4:56:a8:cc:da:41:9f:7c:ac:f1:84:b6:
34:d3:98:94:ce:4c:32:13:ef:bf:0d:0c:4f:2d:46:
e2:be:8d:f1:d0:6c:62:c2:bc:ca:2c:66:98:e8:7b:
0a:d2:ff:ea:d8:08:a1:f7:40:f3:47:0e:b7:fe:7b:
64:2b:af:47:9f:e7:79:06:cd:57:ba:b8:f6:97:34:
19:db:79:a4:81:2f:f4:6c:98:d2:c8:32:8a:ba:1a:
bd:95:1d:47:ec:01:1b:bc:ac:5b:8b:2c:94:41:05:
04:db:ce:c7:19:97:23:5d:ac:f9:d7:08:58:fe:97:
35:62:07:5f:c6:19:36:88:13:d2:a6:db:70:be:c9:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:08:65:53:1E:8B:27:3D:C1:22:33:B2:D3:D0:94:77:EC:7B:F1
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/FJQIZVMeiyc9wSIzstPQlHfse_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.168.0-31.3.191.255
62.220.80.0/20
109.238.124.0/22
185.63.168.0/23
185.98.8.0/22
Signature Algorithm: sha256WithRSAEncryption
63:26:a7:a8:e8:84:26:1f:d6:48:74:52:bd:96:5e:ee:30:2d:
f9:bf:e0:97:7a:5d:7e:2d:2f:75:68:6f:32:43:c1:77:2f:32:
92:10:83:e3:b5:5e:4f:a4:8a:53:6f:9e:9c:77:58:20:8e:3f:
d9:3d:45:93:99:91:1b:98:82:60:59:2c:26:f0:e1:c6:8f:57:
0e:92:27:48:02:2e:06:b6:cb:cf:84:d6:3a:45:7a:93:79:45:
c3:de:c3:98:cd:b2:a0:b8:c5:88:74:fe:1d:b1:aa:9c:a6:e9:
70:b4:00:b5:09:72:dd:5b:5d:b4:17:c7:71:ae:39:46:0d:67:
30:d2:82:e9:c3:1b:e8:19:e2:26:d3:99:81:48:83:58:cc:ee:
27:b7:71:1b:8f:17:dd:b3:ef:fd:90:d6:0e:15:a3:eb:37:de:
a1:ee:43:92:88:cc:54:f0:09:41:a1:9b:ce:f0:65:58:e4:21:
d2:46:08:a3:d4:19:75:8a:a8:25:96:cf:29:c7:af:a7:65:fb:
43:86:69:12:6a:98:b6:f5:00:fc:62:b8:3f:ff:0a:3c:cd:50:
4e:ce:e9:63:f5:4d:7e:0d:04:c3:c9:3b:a6:af:bf:f6:94:1c:
ba:58:72:ad:dc:87:c5:1b:fc:8d:6d:8b:40:2f:b7:3c:49:4a:
da:36:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:42:02 2024 by rpki-client on console-fra.rpki-client.org