Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/csfXR1_wjahNom3081dlFvfxpic.roa
File: csfXR1_wjahNom3081dlFvfxpic.roa (raw, json)
Hash identifier: oojER+L0bbccWy2iumTnK1Jt0LP38RGeFu+PAngVMnw=
Subject key identifier: 72:C7:D7:47:5F:F0:8D:A8:4D:A2:6D:F4:F3:57:65:16:F7:F1:A6:27
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0192E7E3D77FB125746729FCC557CDDE5C0F
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/csfXR1_wjahNom3081dlFvfxpic.roa
Signing time: Fri 01 Nov 2024 13:22:01 +0000
ROA not before: Fri 01 Nov 2024 13:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.213.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:e3:d7:7f:b1:25:74:67:29:fc:c5:57:cd:de:5c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Nov 1 13:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72c7d7475ff08da84da26df4f3576516f7f1a627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:10:50:f3:3c:74:1a:7f:e1:5c:6d:5a:28:
8d:1f:32:57:61:bc:ab:72:c8:d5:03:4d:13:d5:51:
7b:9f:20:6a:78:9e:a4:24:4b:a0:50:90:42:1d:06:
f2:2b:8e:2b:55:b3:b9:f7:41:e7:56:9d:e1:5a:c2:
86:24:47:70:56:78:9e:97:10:90:5a:a5:2b:9d:75:
06:da:ce:48:ab:a7:51:3f:80:03:b9:13:8d:f0:2a:
ab:28:33:5a:4f:ab:e6:0e:94:3c:52:ee:67:36:42:
a6:07:92:e8:89:60:d4:c8:35:b9:68:0e:11:aa:c5:
27:8b:76:32:af:78:0f:d9:d9:bc:fb:f1:04:c9:5e:
0b:a7:c6:83:9e:48:99:f5:8b:0d:29:71:31:1b:ae:
98:bc:f1:f0:c2:35:06:57:23:19:74:a5:d4:f9:76:
a2:2f:9b:51:99:0b:24:1a:9e:fa:6c:8b:02:9b:8a:
8f:38:16:d7:04:40:f1:c5:94:d1:fd:22:3d:05:ba:
1b:67:ca:fc:2b:1f:b0:78:67:3e:d2:6d:4c:f3:9c:
96:9e:06:11:4e:3c:2f:42:5f:9a:1d:e9:d4:58:3a:
07:cd:f5:6a:e7:12:c7:df:6a:a6:28:95:e2:71:40:
47:fc:17:e2:ca:ea:96:5c:8c:44:26:b3:da:95:5f:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:D7:47:5F:F0:8D:A8:4D:A2:6D:F4:F3:57:65:16:F7:F1:A6:27
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/csfXR1_wjahNom3081dlFvfxpic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.193.0/24
Signature Algorithm: sha256WithRSAEncryption
02:30:10:c8:e2:59:1e:37:8f:73:85:ed:2d:0b:cc:31:5d:5e:
35:83:b2:61:55:ab:af:c2:f7:27:47:79:73:ce:5b:7b:76:41:
8c:8e:d5:8a:f3:76:4f:7b:ef:b4:f8:f5:81:6e:ae:da:fe:5a:
05:6d:53:0a:87:13:71:4e:38:13:39:09:1e:7d:ef:0e:3e:5f:
34:7e:5f:34:ef:dc:fd:c8:3f:f0:43:07:9a:e5:0c:31:12:3e:
33:ec:3c:0b:7e:20:45:9c:33:34:fa:4d:94:11:1c:a3:4d:c4:
78:7c:fa:be:72:bb:d5:10:23:80:01:b3:cf:b6:f9:dc:c5:3e:
2e:84:a9:40:0d:1d:12:a6:78:71:5c:02:27:bf:58:7d:00:67:
e6:e6:13:83:2f:f2:e3:08:21:b8:d0:4e:c4:50:7e:db:04:82:
39:df:a8:ef:94:d1:62:8d:b4:6b:c2:29:2e:5f:26:84:bf:88:
2d:2d:16:67:b5:54:67:6b:75:db:39:b9:36:6b:ce:28:0f:ae:
60:47:12:36:5b:59:8f:36:1c:79:61:ba:6f:2a:7f:ac:cf:02:
c2:a7:b8:07:59:5e:ed:cd:b8:e0:89:6b:fe:74:3c:c4:8d:40:
f0:45:26:a2:d9:04:8e:7d:dd:25:21:38:50:76:8c:7e:bf:b4:
87:4a:d9:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLn49d/sSV0Zyn8xVfN3lwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjQxMTAxMTMyMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmM3ZDc0NzVmZjA4ZGE4NGRhMjZkZjRmMzU3NjUxNmY3ZjFhNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ8QUPM8dBp/4VxtWiiNHzJXYbyr
csjVA00T1VF7nyBqeJ6kJEugUJBCHQbyK44rVbO590HnVp3hWsKGJEdwVnielxCQ
WqUrnXUG2s5Iq6dRP4ADuRON8CqrKDNaT6vmDpQ8Uu5nNkKmB5LoiWDUyDW5aA4R
qsUni3Yyr3gP2dm8+/EEyV4Lp8aDnkiZ9YsNKXExG66YvPHwwjUGVyMZdKXU+Xai
L5tRmQskGp76bIsCm4qPOBbXBEDxxZTR/SI9BbobZ8r8Kx+weGc+0m1M85yWngYR
TjwvQl+aHenUWDoHzfVq5xLH32qmKJXicUBH/BfiyuqWXIxEJrPalV8WcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLH10df8I2oTaJt9PNXZRb38aYnMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvY3NmWFIxX3dqYWhOb20zMDgxZGxGdmZ4cGljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudXBMA0G
CSqGSIb3DQEBCwUAA4IBAQACMBDI4lkeN49zhe0tC8wxXV41g7JhVauvwvcnR3lz
zlt7dkGMjtWK83ZPe++0+PWBbq7a/loFbVMKhxNxTjgTOQkefe8OPl80fl8079z9
yD/wQwea5QwxEj4z7DwLfiBFnDM0+k2UERyjTcR4fPq+crvVECOAAbPPtvncxT4u
hKlADR0SpnhxXAInv1h9AGfm5hODL/LjCCG40E7EUH7bBII536jvlNFijbRrwiku
XyaEv4gtLRZntVRna3XbObk2a84oD65gRxI2W1mPNhx5YbpvKn+szwLCp7gHWV7t
zbjgiWv+dDzEjUDwRSai2QSOfd0lIThQdox+v7SHStmM
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:26:08 2024 by rpki-client on console-fra.rpki-client.org