Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fGTXMMZuR4ucIouXUDbuvx6P_I0.roa
File: fGTXMMZuR4ucIouXUDbuvx6P_I0.roa (raw, json)
Hash identifier: JitB1TOBL6DCm1S0/oVy6FW/8h+GYzmL0hmiqKP3Rnk=
Subject key identifier: 7C:64:D7:30:C6:6E:47:8B:9C:22:8B:97:50:36:EE:BF:1E:8F:FC:8D
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018CC56EF4ED266E44EE13A654E68EF7DC3A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fGTXMMZuR4ucIouXUDbuvx6P_I0.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62174
IP address blocks: 87.246.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f4:ed:26:6e:44:ee:13:a6:54:e6:8e:f7:dc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c64d730c66e478b9c228b975036eebf1e8ffc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:73:ec:34:2c:3f:10:93:c6:f5:48:78:55:
13:e4:e3:8b:d4:10:1e:a0:a1:5f:92:95:c9:6e:f0:
64:43:98:ba:16:39:ec:b3:9e:99:5f:fb:42:16:6a:
19:20:9d:a3:2d:53:a8:bb:cc:cf:55:97:3c:55:f8:
18:28:f4:82:92:a8:21:01:21:18:7d:7a:48:69:3d:
ba:e0:bc:16:84:1c:5c:b7:6b:e9:a6:b5:76:fb:b5:
83:62:bd:2d:62:51:7b:96:1e:e3:7a:32:d0:9d:07:
e6:95:87:66:a8:33:03:e5:90:d5:a2:fd:4a:84:dd:
3a:52:06:ee:5c:90:b2:87:3e:ca:4f:4a:1b:00:a6:
56:68:41:a2:48:76:7b:5e:9c:ef:49:72:fa:96:26:
49:51:65:f7:c2:76:5e:a0:b3:f1:0f:0f:86:f5:0e:
7e:c3:39:bd:d1:af:56:39:f7:02:9c:9d:cb:a2:9d:
75:f5:ff:fd:df:5a:ea:0e:3a:5f:65:22:c0:e2:11:
03:20:b9:ce:3f:7c:b9:6c:1b:88:2a:10:d1:c2:b2:
d9:da:cc:f5:06:21:a0:49:56:00:ef:34:82:47:e8:
f1:a2:dd:87:28:28:ed:e5:49:9e:66:ad:7c:98:ed:
a4:ca:61:11:ca:36:b1:21:78:54:ff:0e:e7:11:5e:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:D7:30:C6:6E:47:8B:9C:22:8B:97:50:36:EE:BF:1E:8F:FC:8D
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fGTXMMZuR4ucIouXUDbuvx6P_I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d1:9e:8c:88:ce:1b:2f:2b:54:c5:7b:65:59:8f:e6:5f:a0:
ae:cd:92:5b:c1:a8:f2:3d:3b:38:40:5d:16:a7:da:a8:45:7c:
30:f3:d9:2d:8c:d0:00:aa:40:ec:a8:8e:df:96:96:41:17:99:
92:1a:87:b6:4b:20:aa:0b:d0:70:20:e6:31:ce:de:0e:3c:6e:
e3:18:88:00:4f:5c:b5:4b:fd:af:43:5c:78:a9:67:a5:91:ee:
a7:12:f6:8b:fc:bc:8a:56:4b:25:c4:6e:4e:29:74:e8:5c:e8:
f6:0e:82:7f:cb:0f:86:f6:bc:89:1b:63:cf:1d:5e:3d:24:fd:
49:c4:64:27:b2:1e:d6:3e:be:2d:1f:46:e1:3f:18:9c:d3:67:
05:65:e7:ea:da:51:49:6b:10:b4:5c:9f:4e:d7:41:49:53:17:
9d:03:38:9a:24:1f:1c:04:ab:ab:90:2b:6d:45:8a:92:6b:d9:
a5:f7:d8:65:30:a7:59:b7:ef:47:04:0f:68:ce:f8:7a:72:c9:
c4:2d:0e:d5:7d:af:30:7f:fb:fd:85:8b:70:20:16:4e:65:e8:
6c:6b:97:80:e4:34:2d:ee:64:16:c9:c0:66:82:a4:8f:80:92:
a5:14:f4:e7:55:27:75:62:81:ce:fc:8a:7d:ed:e7:c4:8e:1a:
63:14:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:52:04 2024 by rpki-client on console-fra.rpki-client.org