Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/FZLlY1xNtsRczC17H8P2a-lFzag.roa
File: FZLlY1xNtsRczC17H8P2a-lFzag.roa (raw, json)
Hash identifier: BlDc8axFMwRKM8Fzrz5Gqnrzw1Inps23TDkau8UeIKQ=
Subject key identifier: 15:92:E5:63:5C:4D:B6:C4:5C:CC:2D:7B:1F:C3:F6:6B:E9:45:CD:A8
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 018CCA2A222A4DE1CFD915EEA88C5B4A01DF
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/FZLlY1xNtsRczC17H8P2a-lFzag.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42
IP address blocks: 194.0.36.0/24 maxlen: 24
2001:678:4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:22:2a:4d:e1:cf:d9:15:ee:a8:8c:5b:4a:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1592e5635c4db6c45ccc2d7b1fc3f66be945cda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:ec:29:67:02:71:f6:6c:85:f1:bb:af:fd:
e8:03:e1:fb:dd:87:bb:35:fa:ce:60:71:9e:b4:df:
71:71:5b:f2:7a:b7:99:64:7d:79:d1:13:a8:a4:0a:
c6:81:8e:21:72:fb:09:3a:da:02:14:07:87:53:ef:
2a:ed:58:2f:9a:40:ee:f8:6d:e1:34:51:9b:70:e8:
cc:52:cd:5a:24:7f:60:93:e1:c5:9d:62:49:44:ed:
6c:c7:df:e9:32:94:55:f8:dd:be:e3:d3:b7:bd:e5:
50:b3:8e:40:f3:e8:8c:c1:f9:3b:ad:79:d2:9b:60:
df:03:0b:3f:10:3c:59:23:87:69:9a:70:62:98:25:
c3:a0:dd:6a:8e:e6:f3:e9:4c:03:41:18:72:81:e0:
70:84:b2:3b:26:de:ca:e5:df:23:fa:84:41:02:b8:
bc:52:68:c4:72:56:2f:2c:19:6d:2a:c8:f3:6e:6a:
7c:bf:47:f7:7c:bf:a4:de:ec:b9:24:a3:51:2d:07:
91:84:fd:00:7c:de:55:dc:49:13:92:e1:47:67:62:
36:67:e4:f0:e6:11:fd:56:40:44:db:a1:07:8f:60:
21:29:2b:70:88:75:be:89:20:8a:cd:6a:a1:6b:10:
6b:f6:bf:03:bc:46:63:e8:2d:0f:77:30:2b:82:01:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:E5:63:5C:4D:B6:C4:5C:CC:2D:7B:1F:C3:F6:6B:E9:45:CD:A8
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/FZLlY1xNtsRczC17H8P2a-lFzag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.36.0/24
IPv6:
2001:678:4c::/48
Signature Algorithm: sha256WithRSAEncryption
78:e8:eb:54:c8:1b:21:19:ee:90:43:19:d8:72:26:87:4c:36:
b0:5d:71:96:76:ad:37:a0:c3:77:82:41:56:30:46:7e:e8:6a:
24:4e:33:c2:13:34:df:e3:b4:fe:d9:69:84:27:47:78:76:bf:
45:25:36:7f:2b:cc:95:d7:ca:dc:fd:fb:fe:26:b3:73:96:9f:
6d:84:bd:4d:3c:28:2c:80:02:57:f1:7c:dd:94:ca:55:20:88:
c4:db:8b:53:3a:0e:1a:a6:96:6d:fb:6d:03:1e:6e:52:2a:2c:
44:73:f5:37:ed:3f:e9:8b:0f:5b:b2:28:69:cc:7b:c7:42:fb:
5b:c1:15:3e:69:fd:27:2a:3c:f5:f5:36:33:ea:92:92:4b:c3:
00:b8:db:00:6c:c5:27:1c:eb:13:4d:1a:fb:59:db:a0:5b:53:
aa:5b:85:7c:cc:43:00:7c:89:a0:c6:c8:9e:01:8b:43:54:08:
95:f6:0b:bc:8f:21:3b:3c:83:d6:01:33:55:74:e1:58:1a:5d:
74:5f:25:92:ac:f0:40:1b:9e:ce:07:4a:90:1d:4a:61:4c:fa:
00:41:c9:2e:0c:00:5f:de:c2:27:48:d0:4a:de:24:ff:4b:89:
bd:cb:00:2c:4e:5f:a6:bd:d2:9d:9b:52:e8:3f:1b:88:08:42:
39:7f:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:55:36 2024 by rpki-client on console-fra.rpki-client.org