Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/FiJw3sNuQZ3Cs3CXLeCZApf3aZY.roa
File: FiJw3sNuQZ3Cs3CXLeCZApf3aZY.roa (raw, json)
Hash identifier: ShqAWFqtMKAHfsXkf25gpIUqIV+ZnGhCCtm+4tmiAGE=
Subject key identifier: 16:22:70:DE:C3:6E:41:9D:C2:B3:70:97:2D:E0:99:02:97:F7:69:96
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0191E13C926ECA08ED89BF7F5EDA6E465712
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/FiJw3sNuQZ3Cs3CXLeCZApf3aZY.roa
Signing time: Wed 11 Sep 2024 13:18:48 +0000
ROA not before: Wed 11 Sep 2024 13:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206112
IP address blocks: 80.92.237.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:3c:92:6e:ca:08:ed:89:bf:7f:5e:da:6e:46:57:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Sep 11 13:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=162270dec36e419dc2b370972de0990297f76996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:2a:62:03:f7:c5:0d:b2:84:36:23:67:8c:
71:ef:79:cf:29:8f:e0:85:5d:91:b4:a8:d4:cd:05:
72:0d:bb:5c:77:b4:56:0e:dd:01:27:fe:f0:ff:77:
eb:5a:a5:06:67:9f:98:fb:db:9a:6c:65:17:b4:f9:
ef:dc:ca:42:ff:21:d6:32:3d:82:90:a4:09:73:bc:
6e:05:8f:05:2f:59:f8:32:c3:87:29:7a:f8:34:6c:
2c:e7:ff:eb:a6:a7:b7:29:f2:12:4f:6e:f8:9b:f3:
60:8e:42:c9:63:2e:d2:a5:16:6c:13:fa:f6:2c:17:
da:57:00:df:08:7f:92:b6:ef:ba:d6:81:3f:74:bc:
10:38:c7:69:9e:f0:5e:45:36:8d:86:52:a1:80:5f:
6d:ca:71:4c:41:73:0b:f4:df:87:ec:7d:29:3e:b8:
ea:81:c7:2a:89:5f:72:80:44:ed:e7:7c:10:6e:2a:
9a:0b:8f:fb:18:3f:43:93:89:27:f4:80:8e:b7:bf:
ae:eb:f9:4b:ac:62:50:20:b1:c1:ea:9f:f2:fd:1e:
85:9e:d5:41:6e:48:0d:07:e5:22:d2:7f:db:64:3a:
1e:96:df:7f:d9:ac:b7:8c:39:68:d2:8a:97:db:36:
9f:30:a9:dd:81:9a:63:65:f7:19:da:ff:c6:07:3d:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:22:70:DE:C3:6E:41:9D:C2:B3:70:97:2D:E0:99:02:97:F7:69:96
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/FiJw3sNuQZ3Cs3CXLeCZApf3aZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f1:06:ab:f1:ac:c2:31:e0:0d:16:33:c7:f5:92:34:62:27:
ed:1a:b7:c6:8b:2e:51:33:6f:0a:e4:81:75:10:b2:e1:2d:34:
c2:7b:ee:c4:99:b5:9f:da:3d:42:48:61:f7:79:8e:d9:a9:2c:
25:0d:6c:cf:54:11:b5:d9:93:20:77:87:ad:e4:36:9f:99:5d:
fe:77:38:b8:3a:31:c9:c9:ae:3d:5d:b3:5c:ae:b1:fb:5a:fa:
ff:2c:2f:76:17:80:ab:2c:64:99:ed:a7:1d:a8:51:2d:60:35:
d3:57:6e:21:08:e7:c4:bb:71:41:c3:41:a7:2f:0e:7c:4d:bc:
da:c1:e1:00:3b:ad:4a:f3:91:11:be:99:54:c4:bb:3e:52:59:
f9:2c:3c:d9:b8:5c:84:3d:c3:23:ad:00:54:87:07:10:31:19:
bc:64:9c:ea:9e:b1:f8:94:67:09:e8:9d:3f:bd:b5:ce:75:2e:
c0:96:de:c5:5e:37:9f:ab:61:49:af:92:aa:39:e0:9f:00:8d:
4a:99:b2:d2:80:43:dc:e5:4c:ba:61:7c:12:4c:3d:1f:d5:23:
a9:48:ee:51:24:e1:b4:5e:7a:de:b8:5b:98:4c:49:4b:79:d0:
b3:73:fc:28:e7:6c:be:5f:25:c5:70:af:47:a7:3c:33:09:5a:
81:af:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:25:33 2024 by rpki-client on console-ams.rpki-client.org