Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/FBpY8zhMUzgyqGUE4soAkAU-D5Q.roa
File: FBpY8zhMUzgyqGUE4soAkAU-D5Q.roa (raw, json)
Hash identifier: ptVe+NskK01KTWicktS+5W/noGVZtdLoo44veD+KQzU=
Subject key identifier: 14:1A:58:F3:38:4C:53:38:32:A8:65:04:E2:CA:00:90:05:3E:0F:94
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 018E94421E975C6A1E38930D324F2CBAE246
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/FBpY8zhMUzgyqGUE4soAkAU-D5Q.roa
Signing time: Sun 31 Mar 2024 11:25:44 +0000
ROA not before: Sun 31 Mar 2024 11:25:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211908
IP address blocks: 185.194.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:94:42:1e:97:5c:6a:1e:38:93:0d:32:4f:2c:ba:e2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Mar 31 11:25:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=141a58f3384c533832a86504e2ca0090053e0f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:10:07:89:94:c7:63:1b:69:c0:d3:31:3b:
09:98:16:d9:ff:e6:ce:86:26:f6:9d:d2:39:11:c9:
6d:35:96:0b:ef:9c:87:1d:78:57:9c:89:a9:c5:2f:
71:71:6f:a4:0b:48:a2:9d:b3:4a:7d:d3:e9:14:f4:
84:2d:ec:93:af:ff:ab:af:14:b3:b6:70:77:cd:eb:
32:1f:d7:68:75:33:49:47:be:96:d8:be:02:b3:c2:
c7:a0:71:09:4e:f2:9a:cd:b9:db:89:b2:a1:92:5b:
df:e1:33:2d:0a:a6:9e:a5:e0:ce:b0:aa:46:d2:77:
1f:ac:c0:4b:98:16:67:1c:3d:1b:a1:e1:a9:96:9d:
2b:b2:27:b8:83:d3:35:15:f4:93:93:f9:eb:0c:70:
fd:bc:36:52:49:ca:11:9f:72:a4:d4:7f:68:6a:04:
14:23:44:7b:b4:8d:aa:2a:b9:be:fe:01:6e:de:33:
7b:a5:16:30:5d:fd:4d:fc:f2:f9:de:ba:c2:2b:55:
cc:8b:27:ea:1a:60:af:0b:fc:59:40:0b:5b:f7:34:
bc:95:ad:d0:d6:28:96:ef:b7:b9:22:b6:6b:b0:b9:
f7:29:5e:b4:0c:dd:06:97:90:b1:35:4e:78:b0:14:
65:e6:3b:7b:df:ec:11:d6:49:f2:bd:2c:dc:4a:60:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1A:58:F3:38:4C:53:38:32:A8:65:04:E2:CA:00:90:05:3E:0F:94
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/FBpY8zhMUzgyqGUE4soAkAU-D5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/24
Signature Algorithm: sha256WithRSAEncryption
12:58:94:6f:71:cc:0a:5f:a0:33:19:6e:05:af:e2:39:10:94:
90:54:80:af:1b:dd:09:90:da:03:5f:bb:67:83:a2:1d:e5:52:
33:96:75:3f:6b:41:49:a2:d6:26:37:44:ff:47:93:32:54:6d:
7c:5c:d1:93:1a:13:b9:a2:71:a5:3b:e6:6a:4f:bf:f9:88:21:
c5:76:63:ea:9b:cc:65:f7:1b:d8:71:9f:3f:f8:e4:5c:e6:9b:
c4:19:a0:1f:71:28:14:94:30:9f:00:cd:5b:e1:ac:53:91:f3:
8b:33:bf:79:d7:be:df:33:a7:54:70:27:5a:d0:30:8b:1b:27:
01:1f:80:16:a5:b3:5a:97:57:33:ec:5c:b3:58:b3:d7:88:d9:
8c:7a:ea:51:6a:22:12:4a:b8:14:cb:a3:86:c9:d0:fd:82:4c:
4f:4c:f1:23:e9:98:2e:53:dd:a5:56:95:17:d9:a6:99:51:70:
b8:7c:40:11:e2:71:c1:a2:2e:80:c1:ae:4e:83:e5:61:a6:c5:
4e:8a:43:80:7d:67:17:90:eb:0e:67:05:36:da:a6:33:cd:6e:
6f:04:15:7f:22:0b:0b:91:ac:74:f1:40:eb:cc:cd:57:db:a5:
63:14:d2:e4:cc:0c:f1:de:73:84:60:56:e6:80:c7:f2:3c:7f:
4b:55:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:21 2024 by rpki-client on console-ams.rpki-client.org