Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/_bzSOn8CRh6mqdpxEuIY2MEqCXs.roa
File: _bzSOn8CRh6mqdpxEuIY2MEqCXs.roa (raw, json)
Hash identifier: FP3sM9Az+og7H+FuQ7Ry77a0KFMdgCFD8vBbhqwQ3+A=
Subject key identifier: FD:BC:D2:3A:7F:02:46:1E:A6:A9:DA:71:12:E2:18:D8:C1:2A:09:7B
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 018CC6B8A6DD4CFABFC6E4FCA33311E2BB5C
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/_bzSOn8CRh6mqdpxEuIY2MEqCXs.roa
Signing time: Mon 01 Jan 2024 20:30:39 +0000
ROA not before: Mon 01 Jan 2024 20:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202332
IP address blocks: 194.147.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a6:dd:4c:fa:bf:c6:e4:fc:a3:33:11:e2:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Jan 1 20:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdbcd23a7f02461ea6a9da7112e218d8c12a097b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:b7:b4:d0:82:27:a5:c2:d1:be:2c:9f:f0:
1b:75:05:0d:8a:30:fe:aa:c7:8d:dc:df:33:27:49:
93:9b:13:e1:70:63:73:b6:8c:e7:69:ac:1b:d9:7e:
0f:99:c6:38:5d:54:b8:fe:31:b3:e8:a0:31:13:dd:
66:68:0f:f1:35:5d:fa:67:67:d8:6a:d5:02:a4:bc:
80:c8:cb:1e:8f:46:44:30:6a:c8:40:83:95:ec:19:
41:27:30:a5:7c:65:39:7e:1d:77:80:b4:72:37:96:
af:f7:8b:0b:e5:29:e4:ce:e5:1e:d1:6b:94:be:93:
0b:17:b7:f3:66:ad:d5:6a:e5:68:7c:43:93:99:0e:
8c:84:9f:c2:69:f6:b6:6d:be:f6:bc:0b:14:26:e6:
69:1b:18:dc:f0:d4:15:56:4a:67:7d:69:14:ef:4d:
b3:b9:57:85:0d:17:3f:af:05:7b:e3:bf:50:9d:74:
71:71:ab:42:44:4c:ae:72:c2:cd:8e:e8:5b:6b:08:
1a:99:6c:5a:03:76:38:b3:a7:68:6a:af:79:59:ce:
78:da:e8:fa:90:60:bf:67:d5:4f:52:0b:5f:88:14:
89:b1:11:55:5b:2d:8e:c0:b1:20:ca:10:0f:90:44:
f0:59:4c:b0:83:34:32:ee:d9:83:91:f1:f5:a7:86:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BC:D2:3A:7F:02:46:1E:A6:A9:DA:71:12:E2:18:D8:C1:2A:09:7B
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/_bzSOn8CRh6mqdpxEuIY2MEqCXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:08:c8:8f:4f:43:42:5f:72:f3:fa:59:cd:be:e7:a0:15:d9:
e8:6d:ca:b5:36:7a:a3:27:e3:01:4e:24:75:13:9a:17:b9:78:
49:1d:af:2a:52:f4:30:9d:23:64:46:73:b7:3a:d4:9b:e7:70:
3f:d6:91:99:17:14:5c:9a:4d:fb:d0:8c:bf:30:4b:e3:22:84:
37:bd:2c:83:66:a1:89:5e:47:40:5c:34:c8:3e:11:e2:23:a7:
04:78:ba:76:dc:26:47:d2:2e:79:f3:6d:6d:05:9b:8f:0d:09:
7a:58:99:47:8e:79:ae:a6:74:de:fc:27:c7:a1:34:b8:dc:b8:
a3:b2:03:c9:ea:00:ff:a5:ff:e4:0a:c0:fc:b7:26:f0:2e:78:
9f:2f:aa:55:ad:a6:70:2b:88:4a:9a:4f:eb:f7:5a:51:c8:07:
65:70:e2:d7:91:d1:38:b5:17:21:b3:72:6b:1b:4e:f2:8f:54:
8a:2c:9b:e1:f6:af:cc:f2:b3:36:36:b1:6a:a7:85:a8:d2:d2:
3a:f1:61:14:de:e5:2f:74:3e:cb:6a:28:7d:ae:04:07:b8:18:
9a:76:81:21:2d:a7:54:a6:fd:b4:f2:b3:1c:80:90:9b:ef:84:
02:07:71:7b:e3:2d:eb:a5:af:59:0f:ef:8d:40:ee:a8:66:98:
0f:0e:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:06:43 2024 by rpki-client on console-ams.rpki-client.org