Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/Cefp2MinUNICkZh50zBZ0en6wPE.roa
File: Cefp2MinUNICkZh50zBZ0en6wPE.roa (raw, json)
Hash identifier: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=
Subject key identifier: 09:E7:E9:D8:C8:A7:50:D2:02:91:98:79:D3:30:59:D1:E9:FA:C0:F1
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019423D6FC7031A7ED319387C7B9A6D96450
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/Cefp2MinUNICkZh50zBZ0en6wPE.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58161
IP address blocks: 178.215.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fc:70:31:a7:ed:31:93:87:c7:b9:a6:d9:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09e7e9d8c8a750d202919879d33059d1e9fac0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:16:89:a3:ff:23:1d:ae:99:64:c8:b9:87:
6a:78:c2:24:1b:92:b2:5e:9e:af:fa:09:fe:83:f9:
20:a9:13:ed:52:fb:7f:30:08:e4:3b:9d:14:1f:89:
e4:a0:b2:a8:26:6b:81:f7:d5:0d:90:23:04:58:f5:
79:81:a2:ba:1c:04:6d:f3:b6:1c:45:1e:fb:31:ea:
0a:be:32:d9:8e:9c:42:d8:79:07:15:41:31:b9:a5:
10:35:3d:b6:e6:eb:41:56:7b:b8:c7:b3:8b:7b:c7:
38:98:5a:44:0f:1d:0b:fa:b6:8f:f2:02:c6:31:6b:
b2:b5:96:88:c8:a7:4d:f9:24:59:37:f3:1a:00:f1:
1b:9d:33:72:a6:bb:3d:8f:8c:f9:0c:47:ce:0d:6a:
9a:2e:95:bb:61:3c:d4:67:99:a8:5d:31:18:16:2f:
f0:6f:44:90:ad:b2:8c:73:7a:e9:b4:30:84:56:f4:
29:83:d7:68:4b:34:1f:32:c9:83:b3:b0:4b:1a:1a:
ef:d0:87:dd:e3:dd:92:7d:57:df:48:9e:b2:a0:fd:
6e:8b:f1:ad:7b:8e:ae:0e:28:5f:ae:6d:15:bb:ec:
2b:dd:71:19:d6:da:9c:cd:fd:b4:55:d4:bc:ad:b1:
c3:2d:27:ff:c4:1a:1a:6d:86:c1:00:52:db:82:2e:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:E9:D8:C8:A7:50:D2:02:91:98:79:D3:30:59:D1:E9:FA:C0:F1
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/Cefp2MinUNICkZh50zBZ0en6wPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5b:19:0f:7f:e9:a9:63:f9:e5:3f:cc:bf:df:5e:be:c1:f3:
8c:2d:39:56:36:0e:e1:c7:4f:3f:f3:ce:d0:ae:c7:5f:8d:ba:
81:a0:cc:e8:04:47:f3:64:22:4f:80:cb:f4:e2:df:0c:0c:3a:
aa:64:bd:0c:a6:67:a6:e3:21:d7:69:24:64:54:f0:f6:9e:a1:
74:46:9b:30:a6:74:c0:fa:0f:38:ed:74:83:69:26:ae:0b:1a:
ac:55:53:62:86:78:a6:22:54:cc:5d:3e:c1:c4:ab:9a:45:b6:
c0:ec:2a:cf:4d:39:b6:48:7a:12:c7:d5:7c:4a:d0:b9:6c:f0:
8f:0f:d5:59:3f:66:86:33:8a:0c:df:c7:ea:98:9b:4a:3d:6d:
70:1c:b3:dd:54:eb:b1:f2:55:36:33:be:84:91:e6:6a:83:96:
c0:3e:03:d7:0f:5f:ed:ae:b9:bc:f7:d8:65:92:6e:f9:29:d4:
55:d5:17:9d:13:42:48:0a:e6:24:1f:fe:24:87:21:17:50:32:
44:ef:c5:bb:dd:af:16:b2:ea:46:a4:fe:3c:e8:7a:6a:cc:81:
31:0a:9f:af:75:1e:da:82:a1:0b:35:d8:49:95:c9:7f:d4:6b:
75:12:a2:ef:30:e5:2e:13:99:c6:51:8c:55:d8:d0:9d:5b:ba:
22:6e:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:39 2025 by rpki-client