Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/A1waSgHCUFC0sOxgC3l2LSr3hNw.roa
File: A1waSgHCUFC0sOxgC3l2LSr3hNw.roa (raw, json)
Hash identifier: Dk1cb1XwVDetChXvEVizsbrO2JEwlKpvqdF6gsYivxQ=
Subject key identifier: 03:5C:1A:4A:01:C2:50:50:B4:B0:EC:60:0B:79:76:2D:2A:F7:84:DC
Certificate issuer: /CN=179fbe82afcb4e54c7d497123a5c837114c57162
Certificate serial: 018CC801CFDE7B024D9169F45C62397D7360
Authority key identifier: 17:9F:BE:82:AF:CB:4E:54:C7:D4:97:12:3A:5C:83:71:14:C5:71:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/A1waSgHCUFC0sOxgC3l2LSr3hNw.roa
Signing time: Tue 02 Jan 2024 02:30:11 +0000
ROA not before: Tue 02 Jan 2024 02:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202146
IP address blocks: 185.52.64.0/22 maxlen: 24
2a04:c500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:cf:de:7b:02:4d:91:69:f4:5c:62:39:7d:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179fbe82afcb4e54c7d497123a5c837114c57162
Validity
Not Before: Jan 2 02:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=035c1a4a01c25050b4b0ec600b79762d2af784dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:44:77:85:57:79:3e:0a:29:f3:a8:0b:3f:
92:d8:ea:c3:35:0f:8a:a6:94:79:eb:f9:0f:e6:d3:
c9:a8:a4:88:ce:97:03:6b:70:90:c6:1e:05:ff:f4:
f5:5d:08:f7:a0:1c:82:b6:ae:3f:0d:34:8a:e6:2b:
3c:a0:1a:d7:f7:33:47:1f:bb:91:98:f4:9c:cf:c6:
51:0b:50:35:ea:f1:d0:cd:9a:8c:dc:f8:d7:d1:77:
9f:a2:fb:68:5d:a8:42:99:a0:b1:00:f3:8f:c6:7b:
c0:6e:dd:be:79:41:3c:f8:ad:ce:e2:8b:57:b5:e4:
12:21:d8:7f:8e:bf:15:f4:69:c3:d4:97:b0:82:63:
89:5f:81:91:5b:ec:05:28:94:85:bb:34:ef:aa:0f:
c4:c0:1d:0d:ad:c2:ad:11:ae:4c:61:46:65:57:a1:
2c:1d:08:69:28:38:06:28:dd:df:1a:10:75:5e:5d:
8c:f9:7c:49:97:c5:92:0f:52:6b:3b:5e:ad:8f:b8:
6d:20:f9:3a:20:8b:aa:d4:20:ad:9f:91:0f:c4:4e:
4a:ee:6f:fc:56:51:02:ae:53:db:9c:0e:8a:cf:0c:
f9:04:2d:28:1f:2c:a7:f5:22:0b:19:9c:3f:8f:fb:
d5:e3:15:6b:98:4a:47:e6:82:65:8d:a3:df:d4:42:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:1A:4A:01:C2:50:50:B4:B0:EC:60:0B:79:76:2D:2A:F7:84:DC
X509v3 Authority Key Identifier:
keyid:17:9F:BE:82:AF:CB:4E:54:C7:D4:97:12:3A:5C:83:71:14:C5:71:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/A1waSgHCUFC0sOxgC3l2LSr3hNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.64.0/22
IPv6:
2a04:c500::/29
Signature Algorithm: sha256WithRSAEncryption
33:99:c6:8d:a1:09:eb:54:ad:23:c4:4f:b2:f0:be:c4:c0:c0:
04:34:65:35:34:1d:46:d4:02:2f:78:90:c1:69:dd:f4:da:94:
82:3d:2a:30:83:20:a5:3d:fd:f3:39:2b:6d:ad:df:28:ca:22:
10:82:b9:69:0a:8e:5c:7b:67:37:89:93:4e:53:e6:69:ce:4f:
75:3e:c0:00:22:55:be:ac:42:a8:4a:aa:e6:7a:dd:20:67:d6:
4f:1a:e1:8d:e5:52:02:d2:44:a1:92:a6:23:85:16:27:b4:e8:
53:39:ff:47:ec:80:fe:17:d5:29:9a:be:c2:3d:b4:1c:0f:63:
9e:83:ec:6a:f3:ba:7d:a7:ab:a9:f6:80:5f:36:93:34:8c:a1:
1a:ff:5b:2f:f8:fd:c3:83:74:c5:d5:e5:12:d3:82:a3:8b:e8:
cd:d3:df:93:db:8b:7f:26:ca:f1:48:07:4c:e2:32:de:82:e6:
4a:36:44:ff:03:67:ab:d9:89:02:b2:51:36:a1:dc:80:54:ec:
21:9d:85:35:1f:03:88:4d:36:8a:f7:86:10:34:d0:12:b7:fd:
7e:a2:a1:bf:cc:d6:57:28:51:9e:38:3a:84:9e:66:e7:6e:6d:
95:74:c1:31:2f:02:e2:fe:4f:19:3f:22:44:9f:f1:cc:04:13:
dd:03:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:42:33 2024 by rpki-client on console-fra.rpki-client.org