Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/1-gWYMiXnymOFrZQ2YSaetNGkcQQ.roa
File: 1-gWYMiXnymOFrZQ2YSaetNGkcQQ.roa (raw, json)
Hash identifier: 0V5n2pmbhd4BwWg0ozHTeg5VPEnRBpc1tUxUAMKKdb4=
Subject key identifier: FA:05:98:32:25:E7:CA:63:85:AD:94:36:61:26:9E:B4:D1:A4:71:04
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 018CC8DE5FB47A5D4712FCDB0093AF907BB9
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/1-gWYMiXnymOFrZQ2YSaetNGkcQQ.roa
Signing time: Tue 02 Jan 2024 06:31:05 +0000
ROA not before: Tue 02 Jan 2024 06:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47995
IP address blocks: 193.164.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:5f:b4:7a:5d:47:12:fc:db:00:93:af:90:7b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Jan 2 06:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa05983225e7ca6385ad943661269eb4d1a47104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:56:e0:9c:e6:3a:59:98:3f:f7:80:87:af:
44:55:05:c9:29:30:94:32:86:35:92:3c:29:03:f1:
8a:46:db:dc:2b:81:9f:b4:05:01:de:25:6c:cf:52:
e4:fd:99:ff:ba:85:56:3a:26:8d:9a:e2:d8:d8:3b:
d5:95:7f:a1:4b:a0:91:62:bd:e1:9d:22:91:31:4c:
30:60:aa:5f:38:3c:4c:1a:1e:e8:de:c7:7e:9e:ff:
9b:2c:10:17:d6:f4:02:27:1d:ad:08:9d:6b:f5:96:
e9:b8:21:ed:75:0e:73:88:04:f1:65:e9:ff:04:11:
d9:5f:e7:5a:d4:e4:1c:f0:d3:6d:b5:40:1b:ca:e1:
5a:03:6c:c1:60:06:ab:a1:02:a3:6c:72:cc:d4:f3:
3b:60:4f:e9:65:1a:9b:e1:08:53:54:41:54:3b:32:
02:2c:45:25:be:ce:4c:37:57:0b:49:b6:08:31:df:
c2:2c:55:5e:d8:dd:23:c4:a8:c2:2e:18:fe:a8:b3:
39:c0:61:de:63:29:65:3b:2f:0c:f5:64:b4:64:03:
8e:01:cc:3d:85:96:70:7f:45:1c:e9:45:23:15:ea:
55:53:17:cd:f8:c6:19:e4:86:e2:10:95:80:a6:1d:
9e:eb:0f:2e:2b:53:89:02:b2:1f:31:d6:e5:a9:48:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:98:32:25:E7:CA:63:85:AD:94:36:61:26:9E:B4:D1:A4:71:04
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/1-gWYMiXnymOFrZQ2YSaetNGkcQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.16.0/22
Signature Algorithm: sha256WithRSAEncryption
87:cd:7a:8b:54:9f:1b:88:7f:68:f2:93:a1:f1:9f:5a:d0:75:
be:1b:b8:0a:e7:78:d7:0f:3c:b7:60:33:31:4b:ef:4c:be:31:
70:a6:ee:0a:55:39:05:2e:0e:55:75:d6:4a:d3:e3:c4:c7:1f:
8f:02:b4:b5:c1:53:c2:8a:cb:25:98:70:6a:0a:55:16:f5:6c:
f5:d7:26:61:4e:6c:11:76:94:9d:de:2c:bb:53:05:b1:52:b5:
48:a1:8b:78:f7:23:7a:a4:c7:40:d2:25:40:33:f4:b7:8e:f4:
d6:b1:27:b1:50:bd:91:7d:04:83:1f:20:c2:8e:73:c3:fb:0a:
c7:30:d5:2d:72:34:5d:c5:30:d3:4c:a8:84:bf:44:ba:8c:96:
a4:3d:a1:f1:36:7c:82:d0:5e:9f:70:fe:c0:61:bb:d7:e5:50:
25:3c:36:46:63:ee:57:c4:06:f2:53:17:87:43:5e:0f:3e:8b:
70:ec:b0:c4:d9:02:69:ab:11:9c:87:c9:4f:5e:24:e7:c3:a5:
27:8d:ae:f9:ec:f0:6a:1f:f8:c8:fb:64:a5:d2:62:57:a8:1f:
8c:f2:7b:81:67:41:8f:05:0a:4c:0e:e2:03:6c:3d:a7:0e:87:
ea:95:9f:f6:5f:25:a8:81:42:77:0e:cc:41:00:f8:07:79:6c:
8c:18:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:01:45 2024 by rpki-client on console-ams.rpki-client.org