Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/CSFcpFxG-xZm92yXJbwgZ7TwZKY.roa
File: CSFcpFxG-xZm92yXJbwgZ7TwZKY.roa (raw, json)
Hash identifier: c6w8vEeK1UQRLO2YClqpXLYhTxmpNAFFC4ezK0V6ZYw=
Subject key identifier: 09:21:5C:A4:5C:46:FB:16:66:F7:6C:97:25:BC:20:67:B4:F0:64:A6
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FE8374F2856827D8F5F70E45242B3
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/CSFcpFxG-xZm92yXJbwgZ7TwZKY.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16135
IP address blocks: 176.88.56.0/24 maxlen: 24
212.252.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e8:37:4f:28:56:82:7d:8f:5f:70:e4:52:42:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09215ca45c46fb1666f76c9725bc2067b4f064a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b6:4d:ff:51:b5:dd:8f:c9:1f:2b:b1:ca:60:
d3:4e:b8:51:1a:34:fa:11:ce:07:bb:89:5a:ba:bb:
ae:e8:05:52:27:ba:60:66:02:be:06:c8:04:fc:ef:
f8:80:d6:68:e8:a7:1c:d3:1f:55:75:3c:9e:46:88:
d0:0d:46:aa:c1:e5:6f:35:8b:63:2f:7b:c3:ad:ba:
e2:cf:c9:04:30:8c:a4:75:37:af:ad:f9:20:e9:a7:
0c:ee:0a:dd:59:10:f4:20:2d:a6:5b:42:98:67:be:
a6:c6:2d:8d:fc:16:91:9b:52:10:9a:51:b1:24:83:
50:5a:d7:cf:a6:4c:a0:8e:04:95:1a:dd:72:46:10:
d6:f8:de:9b:87:3f:5a:23:3e:c4:99:c5:65:6c:ef:
ac:7b:5d:6a:ab:ef:50:d2:42:a6:44:ed:b9:8a:7b:
61:89:f8:a0:50:82:6c:a9:79:6d:65:4d:85:d6:9d:
6a:5a:40:27:13:d3:f2:42:d3:24:b3:26:53:d4:7f:
a9:fb:e5:7e:d0:b2:5e:27:b6:89:12:43:7a:d0:6a:
93:da:76:0b:ff:12:1a:16:e2:40:8e:f3:b7:82:3c:
ba:73:49:64:9a:e4:5b:b9:3f:55:79:44:95:ff:c9:
3a:ce:ea:89:0e:60:93:29:cd:82:67:b5:47:3b:26:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:5C:A4:5C:46:FB:16:66:F7:6C:97:25:BC:20:67:B4:F0:64:A6
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/CSFcpFxG-xZm92yXJbwgZ7TwZKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.88.56.0/24
212.252.168.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5a:9f:dd:dc:dd:e1:fb:fd:38:c0:76:24:72:34:53:30:65:
ed:37:a7:4b:40:53:d9:43:67:c6:b7:19:f4:d2:12:9a:b1:65:
cb:78:17:d8:25:95:3f:d9:b9:3b:5b:6a:f3:e2:a5:1a:e6:56:
a9:fe:e4:8c:d7:92:23:d1:09:3d:3d:65:27:1a:49:ee:e0:ac:
02:14:bf:a1:f6:2e:40:32:7a:46:d4:59:54:11:d1:94:a4:38:
14:01:44:55:d3:5d:1a:1c:15:c0:ba:2f:27:df:bb:42:7e:a3:
ac:24:89:cb:a9:d5:bd:4d:51:d2:ef:8c:de:e0:ed:e6:6a:82:
5f:ed:e4:3d:c3:ad:06:38:42:55:84:3d:d7:db:70:f9:d5:43:
54:be:fa:e2:a2:16:c3:c1:77:a6:a9:4f:70:95:ad:fb:ab:2b:
76:3f:8a:22:b6:78:85:6b:a9:a4:c4:4b:52:86:b7:c1:32:85:
43:7f:0d:1f:6a:b5:28:86:45:e8:e3:d1:2f:2d:1a:ed:fe:01:
ac:81:10:23:3a:08:9d:cd:1c:89:33:9f:76:c1:bd:70:ff:60:
1f:db:43:e1:f1:0f:d6:a6:80:f5:a1:05:5b:2b:69:34:8b:37:
4b:14:51:2d:e9:98:b2:75:f8:c4:6e:d0:8f:3a:e8:0a:20:5c:
b5:37:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:06:36 2024 by rpki-client on console-ams.rpki-client.org