Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/fFiq-zQjdnXFssuyxexhAtu0KNs.roa
File: fFiq-zQjdnXFssuyxexhAtu0KNs.roa (raw, json)
Hash identifier: fOTcu6b0Fik1g9QByDEL9cm/ehFTel3KMicNvsTKacE=
Subject key identifier: 7C:58:AA:FB:34:23:76:75:C5:B2:CB:B2:C5:EC:61:02:DB:B4:28:DB
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 018CC6B93F30958859865EB6FEB89F6E95CE
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/fFiq-zQjdnXFssuyxexhAtu0KNs.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209382
IP address blocks: 45.67.236.0/22 maxlen: 24
2a09:7d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3f:30:95:88:59:86:5e:b6:fe:b8:9f:6e:95:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c58aafb34237675c5b2cbb2c5ec6102dbb428db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:aa:84:9e:47:81:f7:c9:dd:65:60:7f:09:
c7:33:ab:e4:6a:b9:37:29:2d:53:e9:eb:4e:ce:55:
cf:c1:3e:c7:23:72:f1:05:80:1f:5c:c9:6b:e9:14:
b5:ab:2c:da:3d:2b:82:90:46:18:01:6c:5e:77:e1:
85:b6:23:1d:26:6d:1e:09:be:b4:0d:06:68:87:9a:
3b:bb:b8:db:76:d1:20:7b:18:fa:1b:86:79:51:cb:
d4:c8:d4:97:6e:8e:97:a2:3a:58:49:7d:9f:36:9f:
6e:a1:eb:e6:2e:89:81:21:a9:98:18:37:53:c0:87:
b8:fb:bb:8d:64:b1:c6:f4:e0:fc:2c:0e:91:18:8f:
71:60:9e:50:a9:29:b8:05:d9:be:df:5c:23:09:5e:
d7:de:f8:76:bc:57:ea:f4:c7:85:4b:cf:44:7b:a5:
c9:e9:9a:eb:e9:e4:f9:5f:08:df:f5:46:8e:ba:33:
67:8c:4f:5e:26:89:b2:65:a6:24:95:d5:7b:86:3b:
f6:19:85:80:9b:01:e0:4e:91:68:11:28:ad:b0:e5:
64:20:b4:89:89:af:7d:ce:29:fb:a4:08:d9:e3:35:
d7:7c:a3:95:da:7f:c8:d9:80:26:3e:92:8a:c6:53:
5d:fb:58:53:b9:3a:ad:d6:06:0c:5f:2a:a8:d6:39:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:58:AA:FB:34:23:76:75:C5:B2:CB:B2:C5:EC:61:02:DB:B4:28:DB
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/fFiq-zQjdnXFssuyxexhAtu0KNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.236.0/22
IPv6:
2a09:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
40:d2:e3:6c:00:4a:a3:d5:d4:9b:59:00:da:f0:ea:73:a1:5b:
2e:73:46:58:22:cb:29:1e:f2:4b:e5:19:0d:c0:7f:30:07:c4:
c3:00:6f:f8:e6:b8:f5:21:d4:46:de:e3:99:7f:6d:d2:a5:6a:
ca:d9:ac:ca:b7:e2:0d:d6:07:9b:30:df:f3:80:33:eb:74:8e:
79:41:0e:3c:7c:39:78:c4:33:3d:1c:9c:5c:d9:ff:fe:38:e6:
43:6d:f3:cf:75:15:e2:7d:ff:c2:dd:d1:7a:0c:c2:56:0d:3c:
c9:3f:b3:2f:45:a7:b5:41:e9:e8:c0:92:10:d6:2f:2b:51:4c:
0e:dd:73:0a:22:cf:9b:8f:ae:98:e8:96:7d:f8:bc:ad:77:ec:
ca:9c:15:8e:48:bd:fd:72:0f:bf:63:51:31:36:54:20:3d:95:
ca:8d:93:9b:fa:74:6f:72:ab:19:62:ac:9a:87:91:cf:a3:f0:
0d:83:3a:ef:7f:d3:cc:19:e6:55:1b:c7:af:3a:49:11:ec:ae:
d7:f5:1f:13:09:4a:14:17:b1:ec:0a:7c:b5:70:b9:6a:26:b1:
73:85:3d:a2:b4:e9:9f:17:07:c4:a8:06:75:a3:05:79:d9:d0:
91:0c:81:3a:32:e5:8d:67:59:2b:b9:49:cc:1e:d9:59:d6:05:
68:69:66:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:04:19 2024 by rpki-client on console-ams.rpki-client.org