Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/c0CrbX8U1FxuRrDZg7dBD1NooNo.roa
File: c0CrbX8U1FxuRrDZg7dBD1NooNo.roa (raw, json)
Hash identifier: fLaieHUdZgIO41jLrsiiWe0z6UaayWpV/uVEeUmj830=
Subject key identifier: 73:40:AB:6D:7F:14:D4:5C:6E:46:B0:D9:83:B7:41:0F:53:68:A0:DA
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 018CC348DBA16CB826AD3EC2B6FF8D9A0AA5
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/c0CrbX8U1FxuRrDZg7dBD1NooNo.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12578
IP address blocks: 195.35.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:db:a1:6c:b8:26:ad:3e:c2:b6:ff:8d:9a:0a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7340ab6d7f14d45c6e46b0d983b7410f5368a0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:82:82:d6:74:ab:43:1d:19:0d:ed:0e:a7:
f2:50:1a:39:99:8d:3e:d9:37:67:fa:d8:f6:5b:5f:
d8:ee:f3:13:b9:67:cc:15:75:55:86:5d:6e:f8:13:
4f:46:b9:46:61:7f:91:24:cc:13:3b:02:17:44:d7:
a4:f4:8f:13:92:54:60:1d:c9:0d:1f:be:d8:7b:3c:
1e:84:9f:02:01:dd:8c:19:cf:63:47:1d:6a:27:0a:
a0:a5:7b:8b:c3:0a:4b:d3:e4:d9:2c:87:61:7c:fd:
1a:92:d5:b6:e8:fd:66:41:a0:d5:a3:08:a6:f6:f2:
be:50:03:52:36:78:16:96:44:46:e9:57:3a:db:3c:
87:94:ba:8e:68:e1:82:06:f2:17:57:8b:ec:4b:d0:
60:3e:2b:bc:02:ad:77:c9:65:69:d1:89:f9:ac:c4:
bd:f7:29:4f:b7:4f:0b:63:1f:5a:97:df:ed:b0:cd:
2e:82:40:7f:d1:46:b6:29:30:ef:1d:50:18:80:63:
04:fc:83:fe:cb:c5:0c:c2:96:c3:51:36:9f:26:13:
e0:a1:83:f6:73:fc:e0:05:93:09:86:3d:01:66:3f:
03:90:71:14:48:84:1d:5e:ca:31:64:2e:31:a6:b3:
6e:4a:3a:33:8e:03:4b:2c:e8:ba:fa:2f:eb:e2:37:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:AB:6D:7F:14:D4:5C:6E:46:B0:D9:83:B7:41:0F:53:68:A0:DA
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/c0CrbX8U1FxuRrDZg7dBD1NooNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.107.0/24
Signature Algorithm: sha256WithRSAEncryption
22:35:bd:46:df:23:05:0c:08:15:03:f1:9d:52:2a:32:f0:56:
78:a3:6b:23:a5:ac:6e:e7:fd:1e:55:f3:fc:74:0c:6d:75:c7:
71:d6:66:3a:73:1f:e3:3e:c6:8c:41:28:99:d4:e3:07:d6:b5:
44:f9:88:a1:b6:6d:a4:73:91:28:a4:43:60:2e:5c:54:56:d8:
df:f3:39:a6:f9:cb:db:c5:f3:94:b1:b6:11:f3:2d:25:0d:cd:
7e:75:1a:0e:4a:18:63:d4:11:2f:47:4c:66:58:0b:9d:48:7d:
bc:20:ab:a6:8c:a5:38:95:1c:49:77:44:26:56:6e:34:c6:36:
1c:7d:08:2d:b5:35:7d:b0:fe:6b:39:a0:a8:84:69:3d:55:fc:
34:2b:0e:92:5d:be:f4:97:2f:eb:e8:42:56:f5:5c:be:0a:9b:
91:e2:b8:f0:c6:4b:f8:9a:1e:a7:18:a3:24:f1:67:b3:a2:53:
3e:a0:5b:ca:d0:88:13:13:61:9f:7d:ff:0f:8c:f3:93:03:6a:
2d:f5:75:12:7a:5c:1e:9e:8e:d0:8f:2e:23:a4:a2:9f:5b:e6:
5e:bc:e4:67:c5:f3:37:2f:19:26:40:19:f4:fa:a3:bd:f7:ef:
4f:cc:b1:ab:c4:83:31:ed:61:54:e5:85:b4:0f:c7:2d:09:43:
cf:4b:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:48 2024 by rpki-client on console-ams.rpki-client.org