Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/fGJcTlIGvCqgE4Nt7_XImFBo5kA.roa
File: fGJcTlIGvCqgE4Nt7_XImFBo5kA.roa (raw, json)
Hash identifier: V9XDR8WB0NSrP8a+oxaIl6FAd1vH5Q9DtbE/yA0tIsA=
Subject key identifier: 7C:62:5C:4E:52:06:BC:2A:A0:13:83:6D:EF:F5:C8:98:50:68:E6:40
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018CC6B79849ECFC4A09C6F8D5A317A3AD35
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/fGJcTlIGvCqgE4Nt7_XImFBo5kA.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50710
IP address blocks: 78.109.237.0/24 maxlen: 24
78.109.236.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.100.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:98:49:ec:fc:4a:09:c6:f8:d5:a3:17:a3:ad:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c625c4e5206bc2aa013836deff5c8985068e640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d3:07:48:8f:e4:c7:a3:eb:85:a9:cd:7b:c7:
4c:3b:36:fe:de:d3:59:5b:92:5e:f8:81:ff:88:ff:
d3:77:17:79:8f:93:0b:3b:d8:96:9c:d2:44:38:31:
be:f4:39:34:e5:94:51:1b:d7:52:8b:f4:78:39:d9:
72:36:43:6a:df:28:12:58:1c:80:d8:90:c7:50:73:
62:bb:13:eb:74:bd:22:66:e5:2b:f0:c7:57:cc:3e:
99:51:85:be:f5:97:79:93:db:29:41:1c:a8:cc:13:
6d:4b:27:80:84:7f:aa:05:9b:9a:ba:57:dd:71:7c:
a5:7c:5e:91:c7:18:49:cf:ac:d8:db:9f:74:e9:13:
b0:c4:0f:20:2c:5e:0f:80:94:ae:62:df:74:94:5f:
fa:62:e0:eb:88:ec:48:5e:4f:5f:e7:81:69:37:95:
90:3e:9b:f8:41:42:8d:87:5d:64:a6:4e:4b:58:d7:
09:5f:51:27:5a:8c:b8:56:96:b9:8e:08:09:25:a8:
86:d5:c1:b2:38:8f:7d:ae:90:0f:fa:ba:ea:c2:54:
0d:d0:fe:ca:96:f2:fe:47:e5:ec:0c:87:9e:c4:be:
8c:be:30:39:91:5a:e8:40:6e:c7:e6:5c:e1:76:6b:
3c:5b:dc:9f:bb:cc:0f:cc:cc:80:e6:6c:f5:ba:af:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:5C:4E:52:06:BC:2A:A0:13:83:6D:EF:F5:C8:98:50:68:E6:40
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/fGJcTlIGvCqgE4Nt7_XImFBo5kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.236.0-78.109.238.255
185.52.100.0/23
Signature Algorithm: sha256WithRSAEncryption
39:49:f0:8c:3d:7c:88:5d:35:8a:81:e0:cc:cf:0d:55:2f:b1:
b5:8e:d7:ac:0e:cc:a8:b9:3e:2b:0b:80:80:b2:66:7f:bb:36:
54:6c:3e:cb:71:f0:e5:10:46:86:15:bd:42:25:89:29:28:12:
4b:4d:f5:58:28:e0:8a:a0:01:03:4d:68:ba:85:77:cc:2a:44:
06:2a:f9:32:1c:6f:5f:44:9b:65:eb:3e:23:f3:ec:37:63:36:
c0:bc:c0:5f:41:8e:6c:12:f5:bb:bc:01:49:ba:7f:b9:15:cc:
e0:f3:f5:cc:6e:7a:fd:15:ff:f3:23:1d:6e:41:bb:b4:a6:bf:
1f:41:fa:2c:65:74:1f:c3:be:45:22:f0:61:5e:e2:40:b9:f2:
96:e9:75:89:2e:53:d2:3a:af:6f:32:12:42:81:37:f6:c5:68:
1e:c7:5a:39:c7:01:15:65:53:de:c8:38:8b:58:7e:6a:9b:9b:
61:ad:e3:4c:18:fe:46:1b:76:dc:92:ec:44:58:8e:71:93:f7:
0c:d7:ea:8f:93:40:22:ca:7d:8a:78:77:59:8f:3c:e7:f3:c4:
a4:e5:d8:a9:96:e8:30:3a:36:3c:d1:8b:0f:fc:3d:1c:6a:22:
93:89:17:b3:06:48:89:2f:17:c2:ab:aa:36:ad:77:a3:8d:32:
5b:2b:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:18:47 2024 by rpki-client on console-fra.rpki-client.org