Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/f6byES2_y1YUvYgVqGNgYH9-piw.roa
File: f6byES2_y1YUvYgVqGNgYH9-piw.roa (raw, json)
Hash identifier: ZQKeeVhlG2itqqnVZygKi38FZhJ9/OdTIiT/Yapxciw=
Subject key identifier: 7F:A6:F2:11:2D:BF:CB:56:14:BD:88:15:A8:63:60:60:7F:7E:A6:2C
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 018CC86F448934B978B54F6D2A1FE63A305E
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/f6byES2_y1YUvYgVqGNgYH9-piw.roa
Signing time: Tue 02 Jan 2024 04:29:44 +0000
ROA not before: Tue 02 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21217
IP address blocks: 83.97.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:44:89:34:b9:78:b5:4f:6d:2a:1f:e6:3a:30:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Jan 2 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa6f2112dbfcb5614bd8815a86360607f7ea62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:15:75:4f:3d:f3:d9:f5:e5:9d:2c:34:8c:
5a:3d:b7:04:d2:7a:79:87:32:3d:a0:02:76:d3:76:
56:76:2d:93:6b:e4:5b:f5:bb:b8:86:18:36:11:8f:
49:97:33:63:eb:f4:52:6b:43:08:97:75:0b:49:1e:
bc:c2:db:ce:b9:d3:8d:e0:07:75:b1:1d:cf:a7:ea:
38:c8:a4:7a:24:69:f4:04:b1:6d:0e:7a:6f:5d:65:
3c:36:a5:5b:30:fa:89:b0:a6:0a:f5:6b:eb:e7:00:
97:59:fc:cb:11:ba:4f:91:06:62:da:24:3a:96:f3:
1b:ca:de:64:11:86:e0:0a:26:75:d0:39:8a:d5:d5:
1b:20:40:86:b2:cc:cb:3e:35:d7:df:69:ff:4c:62:
30:b6:84:e5:d1:a6:2a:fe:e8:24:7f:ec:39:f7:3f:
33:ae:fc:0f:40:95:83:4c:98:85:69:17:6e:06:b5:
d0:32:1b:1d:cf:66:1d:bd:00:da:01:da:f7:98:56:
d9:c9:d3:79:51:d7:2b:88:07:a7:b0:9b:4b:e2:74:
fe:ed:8c:04:7c:fe:e1:ee:dd:5b:b5:f6:36:89:bd:
42:73:7c:bc:8e:a9:e1:2f:03:a1:3b:8c:80:cd:a7:
d9:f8:8e:5d:74:c8:c7:dc:9f:5b:5c:b5:74:7a:03:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:F2:11:2D:BF:CB:56:14:BD:88:15:A8:63:60:60:7F:7E:A6:2C
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/f6byES2_y1YUvYgVqGNgYH9-piw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.120.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b5:38:6e:aa:3b:19:32:fe:34:5c:31:27:cd:8c:03:8f:ea:
41:62:35:6c:b8:7f:01:2a:55:39:d7:58:4e:9e:e5:d1:75:3b:
0b:cd:62:be:26:35:bf:e6:46:38:dc:f9:e2:a6:93:3b:08:7b:
72:38:e8:91:45:b1:00:2e:5f:4e:11:4e:1e:5d:c2:21:08:e6:
1f:60:78:bf:d7:84:0e:f3:55:2a:55:c8:2f:4f:08:12:e8:bd:
88:e2:45:49:40:71:ce:0d:4b:2d:74:b1:f7:be:99:0b:64:08:
f1:63:b8:25:a2:bc:99:c7:b0:15:0c:83:64:37:e3:92:c7:f3:
5f:6b:95:53:86:05:6a:d9:55:a5:e1:60:94:15:df:b4:71:64:
5d:de:4c:df:3d:d1:7e:5f:7e:73:49:65:e7:6d:6a:8e:e2:82:
3d:36:f2:6c:fc:2e:fc:c8:b4:1c:68:c4:a0:f7:9e:bc:d7:f3:
19:ad:ec:91:b7:dd:e1:a2:cb:fa:27:e6:a7:ad:a3:ba:0a:4a:
ad:22:59:f1:73:3d:db:84:7d:17:9e:f8:77:e5:46:12:ef:53:
38:c3:a3:d1:63:b1:e0:7f:72:97:32:92:cb:78:24:f6:ae:a8:
11:85:d5:40:32:4a:6d:af:04:a8:e4:e4:7e:47:36:f4:42:55:
28:a5:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:32:10 2024 by rpki-client on console-fra.rpki-client.org