Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/cFPFb08wBSozccKvA9_61PcrByI.roa
File: cFPFb08wBSozccKvA9_61PcrByI.roa (raw, json)
Hash identifier: Fc/0o2ABxon4K03jjLCy6RzhOm6oF05VMZvC8TuXu90=
Subject key identifier: 70:53:C5:6F:4F:30:05:2A:33:71:C2:AF:03:DF:FA:D4:F7:2B:07:22
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 018CC424512831311BE0B115E64D37BEDA32
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/cFPFb08wBSozccKvA9_61PcrByI.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206564
IP address blocks: 193.104.9.0/24 maxlen: 32
193.109.236.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:51:28:31:31:1b:e0:b1:15:e6:4d:37:be:da:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7053c56f4f30052a3371c2af03dffad4f72b0722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:e9:d5:90:00:a4:c0:02:4e:bf:a2:71:fb:
6f:24:c1:58:49:fd:ee:78:93:96:b0:6c:51:59:13:
4b:e9:f2:97:e0:5a:9e:94:74:f2:c9:ad:f1:74:ee:
0d:7c:92:8d:47:fc:b0:3c:06:26:ed:90:48:54:1f:
d4:a3:e1:0a:97:24:28:46:06:97:70:1a:e6:6b:46:
36:8c:f4:4e:f6:d3:ab:40:9e:55:75:e5:ec:2f:3d:
9e:c2:6a:a1:49:ca:10:52:51:89:ce:b8:e3:6c:6e:
87:c3:fa:23:12:6e:96:6b:ba:5c:bc:c1:fc:ce:80:
5f:fe:43:ba:53:c9:9d:74:a7:fd:4d:71:fe:96:49:
b8:af:15:16:a8:10:e0:ae:ca:6b:96:e6:ef:83:70:
f3:5b:27:4a:8a:43:04:b3:e2:6a:0e:c1:68:c2:1d:
14:f1:37:90:89:02:52:c6:46:6f:4d:16:6f:b9:2d:
40:b8:78:45:e4:3d:48:4e:05:71:32:16:79:7c:26:
63:bf:15:99:a5:a8:9a:48:1f:7c:26:9b:62:b3:ec:
35:35:40:66:f7:95:dc:8e:8f:95:8e:70:99:a2:e5:
f6:b8:b6:2b:76:ad:b5:6d:05:4d:f6:94:d8:63:8d:
7c:75:eb:6a:a2:7e:53:b1:06:75:71:a8:fd:b1:25:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:C5:6F:4F:30:05:2A:33:71:C2:AF:03:DF:FA:D4:F7:2B:07:22
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/cFPFb08wBSozccKvA9_61PcrByI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.9.0/24
193.109.236.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:14:f2:d1:61:f2:61:bd:0d:72:81:a3:f7:c1:9c:9d:93:3a:
38:0f:ec:7d:79:07:e5:8b:2a:4b:f2:55:cb:5b:60:f3:58:af:
72:6c:9d:05:e6:2b:f8:a5:56:86:3d:97:d3:b4:73:1b:06:a1:
91:35:8d:24:cf:3d:55:b1:e3:d4:3c:73:69:91:a6:ec:25:d3:
62:5e:6b:84:6b:87:30:5d:96:3d:9b:ce:c4:af:fb:75:2c:04:
be:f2:df:bc:e3:2d:85:d6:7a:52:b8:2a:31:65:69:fd:69:d4:
91:99:51:7f:d3:23:cb:ec:18:72:a2:f8:53:31:1b:4c:9d:2b:
1a:75:25:39:25:c4:43:34:a8:7b:f7:7f:5c:c6:d5:8c:06:a7:
c0:f6:8c:e6:6d:26:b7:6c:15:43:af:9b:97:08:19:e9:bb:c9:
3a:5f:e7:96:9b:2c:f7:c6:e9:88:4d:ff:e7:03:67:c0:4e:02:
40:01:12:5b:eb:e9:de:e4:3a:6a:0f:16:7f:89:17:78:d1:27:
87:dc:48:c5:1c:67:35:68:59:e2:43:36:fb:c2:72:1e:df:eb:
81:15:03:12:4e:f7:80:80:b6:12:ef:69:af:a6:13:a2:26:e1:
1e:e9:66:10:7d:5b:d2:f4:38:ad:96:92:ba:c7:b2:0f:49:70:
39:5a:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:56:42 2024 by rpki-client on console-ams.rpki-client.org