Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/FvcY54_4Xd3SP5jUHsssgPUjPWI.roa
File: FvcY54_4Xd3SP5jUHsssgPUjPWI.roa (raw, json)
Hash identifier: mK/khdjGNfYDd2L4lRRjd1t7dSCixAk/b+s+67v28NI=
Subject key identifier: 16:F7:18:E7:8F:F8:5D:DD:D2:3F:98:D4:1E:CB:2C:80:F5:23:3D:62
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 018CC8010F07F9835FEC58CF731BDE494C7D
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/FvcY54_4Xd3SP5jUHsssgPUjPWI.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35779
IP address blocks: 188.93.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 13:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0f:07:f9:83:5f:ec:58:cf:73:1b:de:49:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16f718e78ff85dddd23f98d41ecb2c80f5233d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:b7:13:ce:48:f2:62:43:ff:8f:f8:e6:6b:
de:f6:1d:41:4a:b0:4f:b2:f8:d5:ad:d6:df:16:dd:
2a:e8:88:a4:13:ba:a7:88:b6:ed:c9:60:f6:0f:72:
e2:35:0e:ee:63:a8:df:00:5f:be:19:43:0b:dc:f1:
6b:69:a8:63:24:f1:b5:ef:f3:fd:a8:33:a7:fa:fc:
c0:c8:e0:dd:31:4c:a8:28:ea:d1:a6:43:3d:19:84:
fe:e4:77:52:ae:83:b7:c9:ce:7e:d3:12:fb:4a:4d:
67:c5:84:8d:61:f9:f3:d2:ca:2c:53:2b:ca:64:93:
92:b4:7c:62:4c:99:95:b4:28:85:d1:fa:91:b4:70:
09:5c:5c:2b:5f:f2:6d:fe:c4:85:5b:a8:b6:91:97:
e1:14:af:0b:55:70:83:2d:5d:2e:c4:01:8a:a7:ce:
14:a0:f0:53:fc:d2:ab:6d:00:38:45:50:8b:2c:ed:
a1:97:ae:8a:f5:7e:77:dc:13:23:19:67:55:5d:a5:
21:db:38:45:6d:ce:64:ac:d4:4f:fc:1f:46:06:f3:
e6:45:a2:b9:72:ed:6f:bd:30:2b:a9:75:ff:56:71:
fe:fe:c9:eb:89:7f:80:c2:e6:2c:be:53:d3:4c:2f:
45:35:ec:d5:0b:5b:cd:c7:e3:09:0b:3f:0f:ad:cc:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:18:E7:8F:F8:5D:DD:D2:3F:98:D4:1E:CB:2C:80:F5:23:3D:62
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/FvcY54_4Xd3SP5jUHsssgPUjPWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.122.0/23
Signature Algorithm: sha256WithRSAEncryption
46:eb:02:3a:a5:12:91:87:5e:8c:3a:71:8e:5e:f6:57:e6:38:
a8:77:ff:aa:b2:af:16:75:d7:85:ab:c4:05:ad:44:68:28:d5:
ce:5b:4f:87:1a:20:6a:8d:39:45:74:9d:8e:78:8d:b9:01:2f:
00:62:ef:53:54:b3:40:1b:ec:48:00:b6:93:f6:57:a8:8e:bd:
9b:de:ab:d6:bb:6d:5a:25:60:f3:c4:6d:30:7b:44:d2:73:5f:
38:15:cd:22:a7:df:37:26:bd:85:94:47:0a:01:b2:68:89:17:
ae:12:3e:13:8c:37:ed:d9:c7:2f:d9:44:3c:cb:06:30:82:7c:
5e:fe:c4:97:2d:5a:2c:3f:bd:5e:0d:43:ff:99:08:33:42:b7:
87:a7:55:e7:00:1f:da:b9:d8:7e:10:5b:14:18:3f:68:bb:23:
20:46:b8:b1:68:91:75:5b:66:b9:90:f1:3e:4b:77:a4:4b:5b:
2c:cc:49:99:20:94:6c:49:74:4f:a0:f2:d0:b6:fa:2d:d1:35:
39:b9:f0:20:98:5b:2c:06:2f:a0:25:ee:6a:2e:d4:a5:09:17:
a7:5e:24:a4:ce:67:b4:8c:3d:ae:25:3a:bf:bc:df:52:a5:fe:
39:dc:fd:ac:d4:b3:fc:fb:59:79:67:45:0e:d6:92:4d:50:98:
35:47:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 16:36:44 2024 by rpki-client on console-fra.rpki-client.org