Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/F5E0_JeT5mFa4ip6RXLxbkO73KE.roa
File: F5E0_JeT5mFa4ip6RXLxbkO73KE.roa (raw, json)
Hash identifier: Uhn6RdxWpAQsFOOesm23TbAexpsuOC4GC1WOw/xfjwE=
Subject key identifier: 17:91:34:FC:97:93:E6:61:5A:E2:2A:7A:45:72:F1:6E:43:BB:DC:A1
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 018F2A7330192C1495775633E821E312DB88
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/F5E0_JeT5mFa4ip6RXLxbkO73KE.roa
Signing time: Mon 29 Apr 2024 15:22:22 +0000
ROA not before: Mon 29 Apr 2024 15:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 140.150.96.0/19 maxlen: 24
176.116.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2a:73:30:19:2c:14:95:77:56:33:e8:21:e3:12:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Apr 29 15:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179134fc9793e6615ae22a7a4572f16e43bbdca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:60:28:38:7f:e2:a6:ae:1f:29:b2:1e:37:
86:d0:61:97:31:64:30:92:50:c6:b1:fa:69:3e:60:
d2:81:fa:6b:71:90:1e:5b:37:0c:81:82:e5:a9:20:
54:d7:e4:e1:6c:6c:61:f3:07:b4:b0:28:97:34:e3:
8b:34:5b:cd:34:3d:48:03:0c:2e:e4:b0:58:8c:5a:
bc:c0:64:e5:50:69:a8:79:df:6c:77:eb:2f:fb:a2:
b6:61:bc:81:1b:22:c6:05:52:57:ba:09:ad:4d:e2:
1c:57:38:d6:99:07:69:3f:98:5b:ad:ad:40:ca:0b:
15:24:fb:d2:36:4b:7a:77:e8:39:ad:38:84:0c:e1:
d6:ea:2f:23:70:28:de:53:86:8d:8a:6e:16:5b:1e:
d9:f0:2c:84:77:99:32:ee:e2:a0:ef:75:a5:7b:e8:
ef:43:cd:2a:9d:a6:52:8b:56:51:0e:db:40:e7:a8:
67:b4:24:6d:95:ca:3c:76:e9:51:dd:26:b5:4f:5c:
bb:92:d3:5c:d8:be:c2:fd:ec:b8:ed:11:b0:f4:5d:
ec:49:15:9c:0f:49:66:4f:dd:8e:51:97:a3:60:c4:
67:c8:3a:46:90:3e:31:7d:0d:b6:fb:4d:3a:7d:52:
2b:23:fb:22:f6:6c:05:d7:37:a7:69:97:ef:ff:b8:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:34:FC:97:93:E6:61:5A:E2:2A:7A:45:72:F1:6E:43:BB:DC:A1
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/F5E0_JeT5mFa4ip6RXLxbkO73KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.96.0/19
176.116.21.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8a:94:15:da:78:61:21:f8:9a:83:b5:52:18:28:fe:e1:56:
eb:b0:3e:e6:81:6c:ba:dc:be:19:70:25:d2:30:5c:75:62:0c:
92:94:ce:38:fb:03:25:3c:2e:8b:c2:41:f7:6c:22:7f:61:95:
50:d7:a2:d3:0b:18:bc:59:cd:36:c6:5f:85:83:33:41:a5:0d:
32:32:ab:fb:3e:2b:80:c3:7e:d6:ae:fc:dd:73:8f:a6:eb:bb:
e3:d7:d8:cf:07:10:e6:53:9c:ff:04:fb:16:41:04:ca:2f:68:
fa:11:13:f7:58:4c:60:47:d9:90:59:73:2c:02:78:0e:e5:94:
03:04:74:eb:c5:b0:b4:f3:81:14:e3:28:85:b3:d1:77:50:05:
bb:91:8d:8b:6a:a8:f7:ad:a6:1a:b0:36:3c:c8:a6:c1:2d:2e:
f4:ad:fa:26:55:d0:84:89:49:37:9b:9b:4e:8d:15:c9:08:0a:
fe:9f:8e:ad:a3:83:41:8b:b5:d8:55:71:ef:4a:32:80:84:ba:
81:94:23:58:03:27:86:1a:8d:ea:ad:3f:fc:f6:6d:b4:ec:67:
4f:c1:61:a9:6d:07:e4:2c:c9:6d:3a:d2:d3:55:ce:fc:c4:20:
98:e4:51:f4:72:fb:25:49:60:47:4f:4b:bf:b5:49:f2:21:c9:
d6:3b:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:44:25 2024 by rpki-client on console-fra.rpki-client.org