Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/feLOMInsHi_0-2mB8vzc4yNSSU0.roa
File: feLOMInsHi_0-2mB8vzc4yNSSU0.roa (raw, json)
Hash identifier: hYWZ4iL6LzJjR/MV440KFzmlBHe6CR8RJYxkFap+NZc=
Subject key identifier: 7D:E2:CE:30:89:EC:1E:2F:F4:FB:69:81:F2:FC:DC:E3:23:52:49:4D
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 018CC26D6B5854F6205C8E4A00F7A0C03A3A
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/feLOMInsHi_0-2mB8vzc4yNSSU0.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206509
IP address blocks: 194.207.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6b:58:54:f6:20:5c:8e:4a:00:f7:a0:c0:3a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7de2ce3089ec1e2ff4fb6981f2fcdce32352494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:86:26:8f:6c:78:8a:a5:a1:83:04:93:91:
3a:5e:6d:ed:09:32:12:e9:f3:c8:d5:7c:da:dc:e4:
cd:54:d1:b9:9a:27:35:1a:71:c7:3b:80:37:58:06:
b2:9f:fb:05:f5:8a:5f:99:a1:6f:e8:bf:3d:37:b6:
21:9b:7f:e2:a4:3b:e4:f6:87:6f:b4:ae:65:da:2e:
86:c2:ea:4f:22:8e:ce:ca:9d:8d:89:22:3d:58:4c:
fc:2e:46:9d:39:73:fc:c5:17:bb:d4:ae:fe:57:c0:
98:a9:08:fb:78:24:cf:55:c9:71:8c:b8:0c:2c:6c:
1c:27:77:3e:e8:64:ab:9f:43:0a:12:bc:00:9b:5a:
6c:33:a0:91:20:dd:de:7d:11:d9:50:d4:06:82:96:
e0:91:34:11:b6:24:49:e5:f5:98:eb:5d:0d:cc:73:
85:41:2b:19:0c:67:c9:70:fa:03:dd:c8:db:ea:95:
f3:7c:8d:b6:1a:1f:48:31:23:96:85:a6:eb:11:71:
c3:ac:bc:94:d4:ce:90:a2:93:ee:17:5d:08:d0:4a:
8f:ba:ff:15:8d:91:56:32:08:6d:b4:63:66:02:24:
1d:f5:3f:ed:1b:1c:14:26:2e:a8:d7:27:05:b8:ee:
c3:13:b5:3b:6e:05:4d:9f:de:b7:a4:d6:a3:0e:b8:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:CE:30:89:EC:1E:2F:F4:FB:69:81:F2:FC:DC:E3:23:52:49:4D
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/feLOMInsHi_0-2mB8vzc4yNSSU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:bf:14:82:b3:24:9d:58:d8:a5:15:7e:a5:31:44:7d:ef:f7:
6a:ea:ab:43:e8:85:ac:7e:d9:79:be:9c:55:cb:10:ea:9b:e4:
e3:f9:1a:93:ab:a9:fa:40:64:f2:2e:3f:74:df:ad:a3:db:17:
ad:76:ab:cc:1f:d5:a5:8b:35:b3:cc:17:d6:1c:a9:f8:21:d2:
ac:07:d9:c3:d5:05:91:3a:dc:36:48:d4:bf:22:39:eb:15:75:
30:45:5b:f7:6a:82:ba:41:b1:be:da:68:95:7b:fb:c2:28:09:
ac:97:38:f4:32:53:7d:e8:4c:7e:b0:70:88:b5:8c:5f:a7:a6:
91:48:c7:3a:14:40:7b:e0:3e:f0:cb:9f:ae:f7:6c:47:f5:e0:
d4:e9:4d:97:a2:4c:46:87:ef:5c:4e:6d:1a:25:54:3b:87:dd:
3e:f9:65:15:c5:61:ae:b3:c8:93:1d:b1:60:2f:09:17:5a:fc:
df:44:34:86:55:99:a6:8f:62:9e:84:a5:32:3f:72:04:32:76:
74:72:cc:2c:11:1a:9c:8d:61:72:fc:84:c0:30:eb:dd:5e:3e:
f9:0a:23:17:51:6c:44:1c:3c:6b:f1:9e:0a:41:40:ac:72:7f:
af:c5:55:40:3a:e3:fd:7a:62:35:e7:32:d2:8f:fa:45:a9:ca:
78:a8:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:28:50 2024 by rpki-client on console-ams.rpki-client.org