Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa
File: CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa (raw, json)
Hash identifier: 9IsdrM1fsHHb3ey4XHd2LKfKojYUrRZfDS77c1iBUII=
Subject key identifier: 08:5B:B4:18:0C:22:31:06:48:A7:C5:8C:BC:A1:53:FA:BD:F0:7D:37
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 018CC5DC0F073B487BADE096A015227F0608
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206874
IP address blocks: 185.164.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0f:07:3b:48:7b:ad:e0:96:a0:15:22:7f:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=085bb4180c22310648a7c58cbca153fabdf07d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:16:b7:e1:1a:56:5b:55:22:cc:a4:dd:10:
fd:e8:e5:6a:71:ab:06:b4:8b:4a:2b:ab:91:f0:e5:
46:c5:f2:53:83:f2:6a:80:07:80:51:32:be:70:0d:
16:a4:5b:af:0c:9e:56:b7:27:bd:c9:75:93:ee:5a:
4f:1a:e3:19:5a:4b:de:d8:23:23:b5:a8:62:56:9f:
fe:20:38:7d:de:2d:64:7f:6a:3a:2a:a6:fc:94:6d:
96:7e:da:6d:22:00:1d:0d:1e:35:d3:6e:21:37:10:
10:58:d9:15:71:eb:5e:53:23:d2:3b:28:54:92:35:
6e:81:e7:ff:ab:e7:f5:12:c9:4a:29:d0:7a:d7:53:
90:0f:81:8c:1d:c4:f2:fc:23:18:a0:d5:23:08:6f:
4c:9c:09:ac:4c:8c:f9:00:09:a2:90:60:4d:4b:9c:
40:ed:4e:5c:48:d3:78:50:c3:33:c5:b1:3c:a2:8f:
4e:40:45:41:e9:44:a4:fb:88:07:7e:be:36:a2:0e:
1d:89:7b:4b:db:41:55:6f:bb:79:d5:c3:ed:48:e6:
17:f2:5c:87:6f:4c:27:fb:38:32:30:84:6b:03:7c:
c4:16:ba:a2:16:09:b6:7b:a1:95:f8:ef:f1:46:7f:
35:ee:94:f2:10:b7:0f:15:96:3d:e9:26:26:e3:71:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:B4:18:0C:22:31:06:48:A7:C5:8C:BC:A1:53:FA:BD:F0:7D:37
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/CFu0GAwiMQZIp8WMvKFT-r3wfTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:0d:0b:9b:0b:6d:6d:89:1d:ad:8d:07:fd:3a:fe:34:06:4c:
c1:46:dd:bf:85:ba:3e:2e:03:36:49:ab:7b:a4:7e:e5:b8:3f:
e7:a1:10:14:d9:b3:ab:96:90:b3:a2:cd:29:11:31:16:98:13:
76:00:7f:be:70:00:d9:7e:19:61:95:91:2e:50:c0:d5:0d:6a:
dc:af:c8:89:1b:7f:21:15:5c:51:1b:76:8e:33:72:d1:a5:a5:
d9:97:b0:97:91:04:bc:fd:ec:0c:eb:84:43:34:b5:a9:d5:f8:
1c:6c:ff:aa:40:00:fa:03:12:fa:4c:b3:5a:26:63:72:b9:4e:
8c:4c:d0:8c:1b:9c:8b:79:c1:1a:0a:d9:7d:0c:35:a0:e9:85:
31:7a:7a:30:94:56:5b:20:87:df:9a:2b:c1:05:03:03:0d:91:
73:26:ef:60:10:ce:48:11:95:f3:49:ca:4b:9e:5d:1f:f7:47:
45:8b:31:80:a6:4f:d6:69:5f:0b:af:8e:29:3e:fe:85:e8:43:
2f:c1:69:23:eb:7a:d0:80:0e:ac:db:b2:9a:5e:4f:14:f5:b0:
8b:a2:41:94:8b:d6:7d:a2:de:9e:63:2d:79:8e:d3:48:5e:cc:
6e:2d:f5:d8:c7:0f:4f:41:be:ad:05:be:81:11:61:1b:8f:9e:
df:28:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:03:19 2024 by rpki-client on console-ams.rpki-client.org