Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/xWFBgbpKIkEjBTKjnPThAU8nOuk.roa
File: xWFBgbpKIkEjBTKjnPThAU8nOuk.roa (raw, json)
Hash identifier: 5TMOY8wRHQOfG8t8pzzevPXvFtbV023pHQfmGUo9CZI=
Subject key identifier: C5:61:41:81:BA:4A:22:41:23:05:32:A3:9C:F4:E1:01:4F:27:3A:E9
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 018CC6B826A9185D757513BDE5DA681A142D
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/xWFBgbpKIkEjBTKjnPThAU8nOuk.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212865
IP address blocks: 95.214.148.0/22 maxlen: 24
194.69.196.0/23 maxlen: 24
2.59.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:26:a9:18:5d:75:75:13:bd:e5:da:68:1a:14:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5614181ba4a2241230532a39cf4e1014f273ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:50:a2:28:1e:03:23:fc:23:0e:72:90:0e:
e4:3a:30:dd:d1:2c:62:8f:6e:aa:58:48:b8:75:9a:
f6:c7:ee:4c:28:1c:b9:eb:77:5f:16:5c:24:27:ab:
bf:d4:87:44:94:28:c9:8b:34:3e:98:e7:13:47:42:
76:84:d0:45:4e:8a:05:a8:ba:4a:50:5e:53:33:6e:
f9:10:64:18:52:5b:87:c2:b2:d1:af:0d:4c:90:2d:
47:79:8f:c4:dd:ef:1e:77:1f:ac:32:31:6b:81:2f:
97:db:55:60:8b:10:c6:5d:76:6a:2f:45:a7:3d:39:
71:e9:8f:47:12:7f:d7:16:e6:8a:7d:fa:b3:88:0c:
32:30:17:1a:2e:0f:4d:c8:a9:60:3f:ae:c9:f4:a8:
8b:dc:85:0c:f1:fc:83:34:bb:92:53:f4:b4:f4:a6:
48:7f:27:b4:8e:f0:2d:d2:ae:51:e1:7f:61:0d:5e:
2e:2b:f3:8a:ad:47:34:76:0d:00:c7:1f:98:3c:73:
bf:cf:70:d5:25:2c:7f:5e:13:b1:40:c3:21:c0:3c:
d8:84:b4:f3:94:29:b0:a3:f4:df:37:80:7d:b6:e6:
8b:93:b6:f9:27:49:90:bc:a1:63:27:31:22:e1:2f:
4c:86:c5:80:0b:1f:31:ef:ca:c2:a0:d1:ad:60:90:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:41:81:BA:4A:22:41:23:05:32:A3:9C:F4:E1:01:4F:27:3A:E9
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/xWFBgbpKIkEjBTKjnPThAU8nOuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.120.0/22
95.214.148.0/22
194.69.196.0/23
Signature Algorithm: sha256WithRSAEncryption
30:7f:54:04:03:02:a4:e8:c3:cf:59:45:1a:4f:16:3c:74:10:
6f:d6:fe:9f:34:8b:c7:0c:b0:e7:6e:ef:0a:da:f9:40:0f:cc:
cf:39:a2:d7:f7:c1:99:38:ee:51:f0:18:01:63:af:d7:b2:da:
3b:0d:7b:f2:6d:c6:05:be:10:9c:94:88:c7:97:aa:f4:20:18:
c4:76:1e:88:4a:e2:7a:21:73:27:a6:89:53:d5:bc:69:38:d9:
b0:4a:11:6d:93:30:b3:48:55:e5:17:70:0b:c3:40:33:c7:64:
5c:08:1b:18:79:5f:5a:b6:16:3e:66:40:32:f9:91:65:dc:e4:
b4:30:61:20:c6:e6:8e:0e:b0:81:a2:eb:69:90:ed:a9:13:38:
0b:16:b3:2e:91:d9:73:55:a8:75:55:91:dc:09:57:7d:d8:51:
1d:86:12:36:b3:04:79:f7:f0:1b:9f:b7:42:3b:04:12:5b:7f:
43:7a:51:aa:59:66:3d:55:3f:80:b6:a0:f4:48:bb:c9:55:af:
0f:58:44:74:a7:fb:a1:e3:25:e2:65:95:33:f7:1d:c8:54:9b:
ea:eb:11:8c:6f:6c:31:4b:74:13:36:e7:1f:a6:7d:35:82:10:
04:95:92:86:80:ed:e4:27:24:66:75:bb:c7:9c:4f:d4:4d:81:
25:72:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:40:49 2024 by rpki-client on console-fra.rpki-client.org