Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/FMC3R3oTKEMiimS0FUASklIoJYI.roa
File: FMC3R3oTKEMiimS0FUASklIoJYI.roa (raw, json)
Hash identifier: wNeyMCIA+/ARFgwK/7Z6sYcx4Pi1sYLHl+8onlLcXfg=
Subject key identifier: 14:C0:B7:47:7A:13:28:43:22:8A:64:B4:15:40:12:92:52:28:25:82
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 018CC42488287CA7523C6B95573F1AC0A21B
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/FMC3R3oTKEMiimS0FUASklIoJYI.roa
Signing time: Mon 01 Jan 2024 08:29:37 +0000
ROA not before: Mon 01 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.109.96.0/22 maxlen: 24
193.3.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:88:28:7c:a7:52:3c:6b:95:57:3f:1a:c0:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14c0b7477a132843228a64b41540129252282582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:27:2b:f6:72:1e:db:2b:6e:f8:10:c2:19:db:
45:ad:15:2c:eb:5f:56:04:a9:9c:e6:ae:25:bd:f8:
1c:e9:98:7a:ca:bd:14:81:01:7d:ec:6d:c1:f4:df:
28:e9:1a:f4:5d:c2:86:37:41:01:20:eb:42:e2:b9:
db:14:60:e8:f7:9c:a3:ba:63:cf:61:fb:8f:f2:6a:
0e:68:9e:62:80:11:e2:e7:33:07:be:09:af:37:c1:
d7:b6:66:fe:6e:97:c4:aa:fc:8a:ef:bf:69:81:10:
d2:75:42:9a:0b:b9:05:ba:f4:e2:68:6e:5a:7f:ba:
da:07:c1:30:82:1f:c4:da:e5:b6:75:8c:fe:85:f8:
ca:50:2c:40:f5:30:21:46:52:dc:25:b0:a6:4b:97:
43:f1:b7:3a:ff:6b:87:aa:5f:9f:82:4d:58:30:4d:
6b:a3:b9:f3:16:8b:b9:f3:16:13:c1:e4:d4:a5:bc:
43:36:65:9c:76:5d:72:22:37:6d:f5:61:0d:8e:25:
77:20:ef:73:69:48:8d:9e:e2:06:e0:d0:1d:b3:20:
68:67:8d:0a:f7:ac:53:dd:cf:e0:ef:b6:ea:24:ce:
7c:b6:65:cf:fa:6d:78:83:ac:95:35:cc:0a:23:92:
12:1c:d5:2b:43:33:24:a6:96:80:2a:0d:c8:d9:81:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:B7:47:7A:13:28:43:22:8A:64:B4:15:40:12:92:52:28:25:82
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/FMC3R3oTKEMiimS0FUASklIoJYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.96.0/22
193.3.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3b:3c:8c:f0:a8:9e:f6:df:9e:ef:e0:02:98:b8:97:fe:80:
e7:fb:c0:28:ec:7c:56:9d:e5:10:3d:1f:37:c4:8a:68:36:da:
6f:35:df:f6:85:ad:9b:01:29:f1:b5:48:48:03:fa:14:30:5a:
88:a7:d6:90:8c:04:09:6c:87:29:66:13:4f:cc:5c:7b:ea:0f:
cc:d1:b3:c4:d8:46:de:a5:d4:e8:db:f8:47:39:30:6c:10:36:
20:fd:41:e7:c3:f2:d6:00:e9:be:e8:05:65:03:32:f9:3d:a6:
29:81:db:83:96:50:3f:19:c5:92:b2:01:3d:dd:e3:93:b4:f0:
52:0b:cf:4e:bf:d4:09:48:91:97:ee:cf:0a:5b:a2:eb:61:71:
7b:80:ae:49:e4:43:34:e4:8a:dd:25:66:05:be:7e:f1:bc:32:
7c:1c:2a:41:77:c9:b1:57:d0:4e:42:59:46:d8:b1:75:56:32:
8f:19:d1:61:40:14:a3:88:b2:65:5e:e6:54:89:72:36:09:73:
31:1f:e4:94:03:a9:f2:f1:86:c7:53:9c:02:22:4e:9d:5e:88:
f1:31:42:9a:0b:a2:f3:7b:50:e8:ea:f3:dd:28:06:7b:91:a8:
3e:62:f4:be:be:d2:24:4a:c1:ab:0d:e5:21:ad:97:5b:24:8d:
22:fd:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:29:43 2024 by rpki-client on console-fra.rpki-client.org