Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/FmKDcKu06JSN4TW9G8FtMNqNSPU.roa
File: FmKDcKu06JSN4TW9G8FtMNqNSPU.roa (raw, json)
Hash identifier: nKYoQqJj++VGfde91WhD5AWUvinskPww38nMnU8Ejjk=
Subject key identifier: 16:62:83:70:AB:B4:E8:94:8D:E1:35:BD:1B:C1:6D:30:DA:8D:48:F5
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 018CC9BC4047D31F217F16EAF71726FA1E19
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/FmKDcKu06JSN4TW9G8FtMNqNSPU.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47902
IP address blocks: 84.247.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:40:47:d3:1f:21:7f:16:ea:f7:17:26:fa:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16628370abb4e8948de135bd1bc16d30da8d48f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:c5:19:26:d0:c4:ae:a5:56:db:9f:1b:3b:
24:4d:ed:2b:1f:ea:67:87:fd:61:45:c0:43:41:12:
6e:e6:6b:46:4a:07:f4:87:0f:50:6a:df:14:61:f5:
30:b9:af:cd:51:ce:ef:04:fa:a4:98:c5:2c:8c:5a:
d5:cd:7a:43:97:5f:d9:b8:db:3c:03:2d:94:c9:aa:
c1:a2:97:85:b5:7a:16:57:de:2d:8c:26:3f:2d:a6:
f4:4d:8d:6f:c9:24:64:4d:2a:0b:e2:82:53:ca:70:
f5:97:24:14:c8:d3:46:08:47:7c:cd:f2:67:aa:3f:
dc:27:50:cb:15:0d:7a:ef:83:1a:ad:15:d2:8e:21:
70:22:ba:57:c6:69:4e:71:a3:7b:f0:bc:fa:45:31:
7d:5d:b3:81:e5:4d:78:92:9a:8a:20:4d:5c:8c:4e:
69:a0:16:12:7e:43:e6:8d:0c:a1:df:39:1d:1c:7d:
ea:03:2d:22:77:66:53:52:60:26:5c:b5:98:9b:3b:
9f:46:97:e5:6a:9e:2c:72:31:f6:58:9a:d6:e7:dc:
ec:52:ce:4c:73:f7:0d:12:da:7c:65:ea:95:f7:86:
93:8c:65:85:86:56:44:a1:ac:25:11:12:e7:08:6e:
18:33:3f:31:d0:8c:b9:94:4b:50:00:13:cd:5e:3c:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:62:83:70:AB:B4:E8:94:8D:E1:35:BD:1B:C1:6D:30:DA:8D:48:F5
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/FmKDcKu06JSN4TW9G8FtMNqNSPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:37:9d:b7:9b:23:9d:88:f3:ed:b7:9f:1f:a0:85:f9:30:a0:
a1:1c:c1:ed:0e:7f:aa:43:80:fd:0f:96:af:03:45:dd:8e:ee:
4c:3b:e6:42:5d:f5:ed:47:18:e3:d3:20:7c:17:f0:0c:a7:96:
cb:50:a0:7c:90:36:85:86:53:9e:31:a2:66:5d:df:29:93:79:
3c:57:60:18:45:a5:0e:74:20:8d:75:ad:ca:26:54:7e:cd:fa:
b8:49:0e:ef:28:e1:04:22:a6:5e:be:61:55:36:68:e6:5b:ef:
a0:bb:f6:74:84:97:56:bf:36:13:f4:fc:51:33:4a:04:28:31:
e7:8b:fd:d5:0a:8e:84:99:20:d4:fb:d2:7f:95:bd:04:f3:2c:
e0:b1:5a:26:d5:0b:68:be:fb:f9:59:eb:2d:3c:0e:e4:8e:0e:
d0:ab:b9:65:22:df:39:65:14:4f:62:1f:cd:32:39:d0:92:d6:
3d:e0:3d:59:b3:4a:e0:87:72:57:f0:33:eb:dc:95:1a:fd:c7:
29:81:25:c3:2a:52:54:7d:7f:37:8e:2e:fa:a9:9f:a5:a4:72:
76:a3:11:69:71:5f:a7:1c:89:71:e3:d2:b0:6b:c3:e3:1f:0e:
67:ac:26:46:2f:10:0b:8b:95:23:98:3b:6b:65:a6:29:df:e1:
1d:4c:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 07:26:16 2024 by rpki-client on console-ams.rpki-client.org