Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CzzMrfOU-cpnXDxWIwuKwBN6Mro.roa
File: CzzMrfOU-cpnXDxWIwuKwBN6Mro.roa (raw, json)
Hash identifier: gzR5VovefpGk0NOTE7cftWnezFJGwwr07OMZ7RNTCr4=
Subject key identifier: 0B:3C:CC:AD:F3:94:F9:CA:67:5C:3C:56:23:0B:8A:C0:13:7A:32:BA
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E35805E4FE44422A5D8D252C94BE3
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CzzMrfOU-cpnXDxWIwuKwBN6Mro.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43763
IP address blocks: 213.176.192.0/19 maxlen: 19
79.132.32.0/19 maxlen: 19
95.171.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:35:80:5e:4f:e4:44:22:a5:d8:d2:52:c9:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b3cccadf394f9ca675c3c56230b8ac0137a32ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:20:29:88:52:b6:57:de:74:53:23:9c:89:
9c:d1:7a:a0:d7:1f:bb:c9:49:34:50:15:4c:73:30:
47:18:7e:8d:e6:81:be:c7:f4:eb:76:20:12:a4:c3:
b8:49:ab:e2:d6:18:97:0f:7c:57:79:98:a9:cb:58:
1b:71:12:39:cc:6c:32:0d:b3:46:54:b5:38:8c:7a:
e6:d9:1a:72:b4:05:80:cd:27:3f:94:07:fb:22:30:
31:8a:06:e2:fb:f5:91:76:be:8f:ac:b5:a2:e4:70:
6f:f4:bc:67:6e:52:30:ce:ae:cc:40:4e:06:20:b9:
95:ea:70:a6:cc:27:95:63:9e:c1:4e:25:31:81:ee:
55:13:d4:80:45:68:4f:54:48:24:fa:2a:c5:7f:ad:
d9:e0:95:02:53:c0:60:2c:86:e5:9f:ff:84:d1:a8:
16:c9:00:52:f7:0a:c0:73:91:ad:81:e1:db:7e:c7:
e2:23:d7:d4:8e:6e:f2:9a:43:ed:04:45:68:c4:ea:
24:64:71:d4:37:e1:ba:a7:74:60:ff:b1:32:0c:83:
79:fa:78:55:54:c8:52:7f:e1:06:fc:24:d4:f4:69:
4f:e6:13:0e:15:09:9e:1d:25:86:47:65:f0:d9:bf:
d9:49:a8:5c:39:95:07:ab:19:5a:c2:51:49:0a:7c:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3C:CC:AD:F3:94:F9:CA:67:5C:3C:56:23:0B:8A:C0:13:7A:32:BA
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/CzzMrfOU-cpnXDxWIwuKwBN6Mro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.32.0/19
95.171.128.0/19
213.176.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:3a:79:45:29:1b:2b:53:31:9e:1e:60:95:48:f1:07:9d:75:
ea:7a:d9:43:4b:f1:c6:c2:0d:f8:6b:4d:bd:65:55:9e:9a:02:
fb:08:a7:6a:c6:72:6e:38:c1:5d:fa:a2:79:60:2c:3a:46:2e:
f2:3c:79:b1:1b:78:68:d7:02:d9:14:c2:1e:aa:68:60:c2:ff:
8a:87:5b:b9:70:ce:cc:82:34:79:ae:5b:63:30:bb:ab:6a:8b:
13:54:4e:fe:1f:7e:ad:c3:6b:91:d8:9c:59:0f:5b:80:cb:78:
01:73:6c:e0:f4:c8:d8:f8:f2:cc:7f:a5:a6:e0:23:8b:3a:41:
81:82:0d:7a:93:b3:23:7c:62:92:8f:37:36:b0:6a:61:53:5c:
cd:85:0a:07:f3:af:a2:35:ba:6b:43:76:26:80:87:c5:02:77:
e6:fd:a6:f9:34:c4:bf:6d:b0:ea:27:ee:66:2c:55:e4:33:13:
dc:eb:0f:5d:75:b4:aa:22:7c:e1:c0:68:7c:61:a9:fb:b4:cb:
70:bc:31:cf:11:1c:c0:fb:2b:1e:49:dd:4d:17:72:40:d8:83:
e0:98:0d:e4:4c:25:e4:ff:93:a3:60:11:61:84:58:36:c0:c3:
ed:6f:7e:de:1d:fa:4a:0c:9b:dd:ef:23:a8:91:25:9a:cb:b1:
4f:be:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:09:06 2024 by rpki-client on console-fra.rpki-client.org