Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/FvxtmSHnLz3BbUSWeMYWeBSWOxI.roa
File: FvxtmSHnLz3BbUSWeMYWeBSWOxI.roa (raw, json)
Hash identifier: tkQPzwqOnSYcMKTv39eePh42+OfT4njDtc9dQnxTg0U=
Subject key identifier: 16:FC:6D:99:21:E7:2F:3D:C1:6D:44:96:78:C6:16:78:14:96:3B:12
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 018CC64B538E8473136CCD54BAA2AFAF89BF
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/FvxtmSHnLz3BbUSWeMYWeBSWOxI.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208861
IP address blocks: 194.152.56.0/24 maxlen: 24
81.161.102.0/23 maxlen: 23
2a13:59c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:53:8e:84:73:13:6c:cd:54:ba:a2:af:af:89:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16fc6d9921e72f3dc16d449678c6167814963b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:c9:6e:af:fc:a3:05:f0:98:d8:dc:aa:b1:
ab:87:6b:31:d7:ca:4f:07:5b:6b:06:79:b6:9d:83:
9e:1d:16:af:43:fb:d5:36:fa:e2:95:4a:f2:ff:19:
fc:96:24:b9:0a:ea:04:3c:e1:67:3c:c1:32:6a:bb:
ec:c9:68:08:aa:40:ff:a0:11:e9:e6:5a:c8:3d:52:
6a:8f:4f:dc:09:36:d0:e2:06:f6:8b:be:2d:4f:47:
34:88:4a:97:7d:19:9e:8d:7f:64:58:2f:77:12:e2:
90:9e:58:2c:03:b5:84:e8:72:96:c3:17:fd:b5:e1:
0e:a9:50:8b:c3:a7:db:ea:ad:b8:62:65:0e:a9:f0:
b5:38:00:3c:05:22:43:13:35:20:c8:7f:6f:04:59:
e1:b5:1f:f4:ee:72:cd:ba:2d:7a:e8:f1:95:49:cf:
d7:1d:dd:4e:a6:75:fd:7a:65:49:d4:8c:54:fa:9c:
e7:83:a6:a8:ff:6f:af:aa:62:41:36:dc:6e:13:58:
6c:07:54:73:03:cb:10:3b:ea:29:ae:1c:75:1b:d7:
0e:93:6a:1c:1b:2e:a9:a5:e2:5d:8e:d9:85:c7:45:
c2:50:20:42:f3:c3:3f:85:ee:32:05:ff:03:af:94:
9e:a5:d5:ee:49:e9:54:1f:1a:51:b2:b1:8b:33:b4:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FC:6D:99:21:E7:2F:3D:C1:6D:44:96:78:C6:16:78:14:96:3B:12
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/FvxtmSHnLz3BbUSWeMYWeBSWOxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.102.0/23
194.152.56.0/24
IPv6:
2a13:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:c1:e2:76:45:6d:79:bd:ff:7a:8f:a7:50:5c:dc:10:ab:e7:
44:bf:2e:f1:da:c9:68:a3:1a:4d:53:b6:a1:0e:93:7a:8b:dc:
4d:7c:cb:63:8c:e4:b0:ad:d5:7a:e1:93:15:dc:51:50:f5:9a:
04:a8:9c:94:01:70:fa:e4:cd:1f:f1:8f:57:30:db:22:16:40:
ab:e0:f0:97:d5:7d:c2:74:7e:9d:17:7e:5e:59:35:3d:f3:8e:
7e:6d:75:70:92:85:ad:be:3d:e8:f2:ed:6a:aa:8a:2e:ea:42:
b5:38:fd:f3:42:32:59:01:c7:e9:ae:db:8d:82:b0:46:31:d8:
91:69:78:00:b5:d5:86:ae:42:c5:0a:5d:ee:c0:d2:f9:3d:43:
50:15:2e:6a:83:2b:4e:62:91:60:e7:bf:db:f8:c9:e8:6f:80:
88:e2:99:68:6a:4b:18:72:13:cc:a9:e1:0c:9e:67:73:1c:0f:
0c:a6:79:6d:56:bb:8c:64:a5:87:4b:72:58:b2:b9:94:64:7f:
ce:78:bf:c3:f8:1c:fc:1d:b8:9e:50:7e:a8:3e:b4:86:af:c1:
1c:7b:06:e8:22:bc:f0:7a:c5:72:26:d7:74:36:49:a0:a7:07:
0d:18:f1:e3:8c:e5:6a:54:f4:d7:7a:df:a5:3e:74:57:1f:7e:
fb:33:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:06:44 2024 by rpki-client on console-fra.rpki-client.org