Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/rcxU_C1kfEJjIUJPadbge7dAYjQ.roa
File: rcxU_C1kfEJjIUJPadbge7dAYjQ.roa (raw, json)
Hash identifier: rCNY8cn2Wn/p2IE3UaxZ5+oEFfwvP+Br6u1/Va28X2k=
Subject key identifier: AD:CC:54:FC:2D:64:7C:42:63:21:42:4F:69:D6:E0:7B:B7:40:62:34
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019103FDB64A5A639C87DEB2F60325BDFEF7
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/rcxU_C1kfEJjIUJPadbge7dAYjQ.roa
Signing time: Tue 30 Jul 2024 14:14:04 +0000
ROA not before: Tue 30 Jul 2024 14:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35325
IP address blocks: 185.208.228.0/22 maxlen: 22
185.208.228.0/23 maxlen: 23
185.208.230.0/23 maxlen: 23
193.239.234.0/23 maxlen: 23
193.239.234.0/24 maxlen: 24
193.239.235.0/24 maxlen: 24
194.187.152.0/22 maxlen: 22
194.187.152.0/23 maxlen: 23
194.187.154.0/23 maxlen: 23
2a0c:3a80::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:fd:b6:4a:5a:63:9c:87:de:b2:f6:03:25:bd:fe:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Jul 30 14:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adcc54fc2d647c426321424f69d6e07bb7406234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:45:2a:ad:a9:84:68:a8:c1:94:d2:f7:1b:
dd:09:ff:0e:de:a9:15:8d:31:b4:19:0b:31:37:98:
52:17:b2:8a:17:33:95:f7:ea:a2:ac:8c:b1:3c:6a:
33:e8:ef:54:0d:87:7a:49:bb:38:3e:c6:4e:5e:14:
61:4c:47:e3:fd:fb:88:eb:47:67:f0:9b:67:7c:a9:
5c:c0:11:14:31:9e:34:20:37:a0:18:8d:4d:d4:67:
51:f5:3c:27:62:c9:05:6f:15:45:32:51:79:60:7d:
d9:63:23:51:9e:0a:d1:0e:0b:a4:f0:80:21:22:67:
8a:0f:28:01:8d:06:29:a2:84:6f:71:05:6c:ae:7e:
2f:2a:b7:a9:7c:4f:e6:43:a4:41:0c:ab:75:cd:7b:
61:3c:e4:07:41:71:8a:c1:06:5e:12:38:ff:e3:c5:
63:ac:e7:13:42:37:9b:82:19:08:41:81:d0:3f:f1:
3b:1e:58:b9:73:7c:ef:9b:89:ac:5c:8d:51:4b:34:
c8:c2:85:fb:82:80:4a:39:f9:94:e1:91:f3:62:58:
ed:7d:61:cc:83:f6:61:42:2d:be:74:fd:3a:24:d6:
57:84:a0:db:e7:eb:a2:1d:a1:fa:f5:07:7d:ad:31:
4d:7b:73:7a:a4:28:8b:c6:ba:39:13:ab:9a:a9:28:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:54:FC:2D:64:7C:42:63:21:42:4F:69:D6:E0:7B:B7:40:62:34
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/rcxU_C1kfEJjIUJPadbge7dAYjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.228.0/22
193.239.234.0/23
194.187.152.0/22
IPv6:
2a0c:3a80::/40
Signature Algorithm: sha256WithRSAEncryption
5f:d5:5e:e4:b6:b7:6d:c1:c5:65:1e:95:0a:57:8b:12:fb:5c:
ed:07:eb:c8:ed:41:4c:36:3a:0b:70:a6:cb:d9:f9:cc:22:94:
34:25:1b:ae:e7:9d:a8:ed:5b:e4:9f:f3:63:4b:dc:7f:4d:a4:
a3:ba:4a:ac:67:63:d4:b1:04:80:3a:f2:02:8f:04:23:59:46:
10:e8:77:68:51:66:60:7a:cc:b4:2a:2f:7d:c3:f6:2d:61:6c:
0e:79:6a:bd:37:c6:c0:38:c6:1e:a3:60:cb:3f:e8:59:87:c1:
2e:b8:dd:ed:5c:78:d5:8e:2b:45:85:77:0f:fb:a2:c7:cf:7a:
90:47:2e:6c:44:77:eb:24:9c:b9:e9:28:a5:8c:f3:ce:15:bf:
b0:00:5b:15:4a:e9:e9:3a:f9:79:e4:79:c7:14:f0:f6:f9:5c:
ee:15:70:a3:b2:de:3d:ce:07:57:57:6e:4f:05:78:33:ed:91:
6a:d4:89:f0:85:03:5a:fd:05:6a:f2:89:b5:b1:9e:f6:ed:d8:
51:46:cb:1f:01:d6:fe:a0:66:6b:1c:3a:dd:e2:9f:d3:2c:ff:
78:3a:f6:52:11:84:bc:e6:37:78:e7:fb:b8:08:9f:ac:f1:39:
bb:1d:07:d6:f6:ff:1a:9e:58:91:7f:1c:35:03:bb:d2:31:32:
0b:75:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:22 2024 by rpki-client on console-fra.rpki-client.org