Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CxT8oESUQgEuKpLShsyDBCB8D7g.roa
File: CxT8oESUQgEuKpLShsyDBCB8D7g.roa (raw, json)
Hash identifier: 8Ripm23q0Cp+2dswGaGpA+WbR5+T9nDabzj7izLJMyA=
Subject key identifier: 0B:14:FC:A0:44:94:42:01:2E:2A:92:D2:86:CC:83:04:20:7C:0F:B8
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64AD8BFE87CF2790D6A148844C1E791
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CxT8oESUQgEuKpLShsyDBCB8D7g.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57960
IP address blocks: 212.86.116.0/22 maxlen: 22
212.86.124.0/22 maxlen: 22
212.86.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d8:bf:e8:7c:f2:79:0d:6a:14:88:44:c1:e7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b14fca0449442012e2a92d286cc8304207c0fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:3b:c0:c2:3d:c1:30:f0:e9:ac:f5:98:9c:
28:d4:14:a3:06:13:08:64:74:fd:8b:46:94:46:ca:
cb:9e:9a:cc:f4:1f:33:ef:d7:e5:16:17:52:61:a1:
40:55:5c:e4:38:41:b2:94:93:c8:17:73:f4:e6:c7:
c7:df:70:06:46:00:04:4c:f8:1e:0f:68:0e:f7:a7:
32:89:c3:82:a9:37:fb:36:5a:ab:43:8a:e2:0d:39:
a6:1c:1a:f7:36:cd:cb:b3:bc:95:1e:aa:6a:11:bf:
ad:da:13:72:0b:ca:f0:f5:f4:a7:d3:ea:91:7f:aa:
d8:75:0c:9e:84:a6:93:3d:1b:37:dc:9b:c4:dc:bf:
79:04:4c:f0:37:81:9e:b8:2d:73:b3:e7:30:0f:14:
bb:5f:f6:ea:bc:45:0e:69:53:d2:cb:dc:a1:ec:95:
6c:50:37:57:1f:31:bb:b4:a8:10:35:99:34:98:1a:
af:49:70:43:90:d1:ec:05:03:a6:68:69:9b:19:d0:
9b:bb:88:02:9f:83:e7:e0:35:ee:bd:3e:80:b5:35:
78:0b:be:37:ce:31:e0:82:fa:b6:87:35:a9:4c:9a:
e9:71:58:fe:79:b1:90:94:6d:29:51:56:3c:25:68:
ed:f0:10:06:e4:78:43:44:d7:9d:b9:51:7e:6e:bf:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:14:FC:A0:44:94:42:01:2E:2A:92:D2:86:CC:83:04:20:7C:0F:B8
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/CxT8oESUQgEuKpLShsyDBCB8D7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.116.0-212.86.127.255
Signature Algorithm: sha256WithRSAEncryption
70:be:fa:5e:da:08:fd:48:e2:ba:2d:bf:65:d5:4f:99:dd:ea:
61:fb:f6:b2:bd:c4:fa:ee:f3:3d:1b:20:ea:83:b5:91:e1:05:
11:2f:c0:a9:9b:af:6c:8f:d4:2c:e7:a5:0e:0c:ab:95:c7:3a:
7f:05:e1:66:bc:09:c2:44:9f:d9:5f:02:a7:98:d1:08:45:ad:
0b:34:77:0b:4c:96:49:ee:97:cf:9c:39:45:7c:60:ff:62:41:
fe:ee:9b:b6:cb:bc:43:80:ed:3f:00:27:d6:14:9a:17:09:c7:
5c:35:2a:0e:f6:fe:82:b1:44:14:a1:0a:72:51:73:70:60:c5:
12:d2:42:6f:00:1a:26:f5:88:f2:ef:25:9c:50:c8:ad:52:0a:
f8:54:9b:73:2f:9d:d4:64:cd:ef:0c:c5:9d:5c:93:e4:19:0f:
fa:b1:7d:53:b7:92:9f:8a:50:90:f3:b4:bc:0c:54:58:25:76:
34:10:6f:bc:88:4f:d3:0a:48:1c:2c:e9:a4:1f:3f:99:42:15:
6e:e6:6a:a4:39:31:f0:ff:2f:72:91:b8:e9:52:ee:60:26:a1:
29:e6:87:ea:06:ce:c4:ab:76:40:15:e6:93:6d:2f:7c:19:97:
60:a2:fd:14:bf:9a:86:96:18:7c:eb:ca:ff:5b:14:81:54:34:
dd:94:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:22:44 2024 by rpki-client on console-fra.rpki-client.org