Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cc_LzOj7O0RYuyow78kanXY2nfQ.roa
File: cc_LzOj7O0RYuyow78kanXY2nfQ.roa (raw, json)
Hash identifier: 0l0xwr7ULW8qrfo2QAj/Biox9z6JZ2/sRxOwZKSWSv0=
Subject key identifier: 71:CF:CB:CC:E8:FB:3B:44:58:BB:2A:30:EF:C9:1A:9D:76:36:9D:F4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80308C3760C9F390E3A14B7FA8AA5E1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cc_LzOj7O0RYuyow78kanXY2nfQ.roa
Signing time: Tue 02 Jan 2024 02:31:31 +0000
ROA not before: Tue 02 Jan 2024 02:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210409
IP address blocks: 193.182.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:08:c3:76:0c:9f:39:0e:3a:14:b7:fa:8a:a5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71cfcbcce8fb3b4458bb2a30efc91a9d76369df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:79:d0:a5:df:9c:ef:41:d4:36:f2:f3:b0:
c0:e1:fb:db:7a:fa:c9:98:c6:db:80:b2:f6:2f:8a:
30:ff:c9:0e:ad:c5:b9:8d:c7:05:1e:b7:ca:44:01:
2c:bd:4a:ae:99:92:16:c7:e3:0e:65:d7:51:d6:1c:
0c:20:bd:27:f3:ec:85:62:ba:af:60:ff:c9:3b:8e:
2a:65:18:2b:12:28:42:df:1a:c8:7f:0f:db:e0:1c:
26:b7:f8:0e:d7:bc:e2:46:39:ce:53:ff:23:31:d6:
d3:4e:e7:da:18:1c:38:54:c1:56:60:3f:51:e1:ef:
fd:af:58:79:06:b6:82:21:5a:83:a6:2a:d2:99:ff:
86:63:ed:8f:d1:d1:e9:99:38:12:43:fc:43:8c:11:
12:4d:ff:9b:87:52:17:f1:82:0a:e2:73:50:eb:bb:
4c:bb:27:cd:10:0c:c5:58:7b:d1:38:0c:8e:fd:70:
3e:d0:63:dd:31:f2:41:36:e6:9b:a2:a2:62:49:3c:
1b:7a:88:86:7d:53:24:c5:3c:a6:79:44:aa:17:cb:
9f:55:1a:45:ab:69:0f:1e:a6:77:25:d1:b6:10:d0:
af:70:5c:2a:6e:ab:20:06:00:82:9d:0a:b3:1e:25:
41:1f:b5:12:63:c3:fa:be:30:7a:a3:41:2c:43:b1:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CF:CB:CC:E8:FB:3B:44:58:BB:2A:30:EF:C9:1A:9D:76:36:9D:F4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/cc_LzOj7O0RYuyow78kanXY2nfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.7.0/24
Signature Algorithm: sha256WithRSAEncryption
73:9a:cf:24:b9:18:78:41:87:8c:b1:65:db:79:6b:8c:db:a6:
7f:e8:4e:ad:e9:89:74:b5:b3:d6:d4:fb:1f:7d:63:73:c0:bc:
0b:d6:6b:64:e0:d6:c1:68:a5:b2:35:58:e1:43:8c:19:5e:f1:
40:21:cd:48:d7:3b:be:c4:44:55:1a:90:87:a3:6c:ef:49:18:
8b:f4:fa:26:a8:a7:6d:94:55:ad:c0:b4:af:bb:1c:ef:8f:d7:
f6:c0:f2:55:03:c3:ea:a0:90:cc:79:6d:74:88:f0:86:22:6c:
3e:41:13:25:c0:1d:2d:5f:63:49:f6:c5:c1:e1:3c:95:ef:40:
00:18:69:7c:99:f1:34:b7:5c:4a:73:d1:b2:f3:bf:cd:86:a8:
08:f2:9e:84:cd:a7:95:e2:55:cf:c9:bc:a7:01:1f:41:08:f8:
e3:95:3e:f8:b0:5b:8d:c6:7f:4b:11:06:f3:d3:57:13:a2:06:
d0:27:10:fc:0d:19:64:e3:6f:35:a1:c0:36:c4:6c:d7:52:97:
36:9e:6a:4c:19:2a:e3:4b:61:28:0b:e4:0b:98:20:d0:cd:a5:
3a:f2:a1:20:6d:1b:c0:63:11:d7:0f:10:4e:da:ea:5f:e9:42:
27:d5:f9:dc:42:5c:38:41:31:41:7e:b1:1f:a4:6e:ba:fa:57:
e2:ee:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 04:09:16 2024 by rpki-client on console-ams.rpki-client.org