Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/CZBYtFtERvkk-WebE5L-8PzVC4s.roa
File: CZBYtFtERvkk-WebE5L-8PzVC4s.roa (raw, json)
Hash identifier: UBICLIySEJDFFBa6wTrrci90rqH33Dk9Dlw5oMDE5mg=
Subject key identifier: 09:90:58:B4:5B:44:46:F9:24:F9:67:9B:13:92:FE:F0:FC:D5:0B:8B
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 018CC94DAC5687D09AF783189D1B404D5828
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/CZBYtFtERvkk-WebE5L-8PzVC4s.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206037
IP address blocks: 185.14.176.0/24 maxlen: 24
185.14.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ac:56:87:d0:9a:f7:83:18:9d:1b:40:4d:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=099058b45b4446f924f9679b1392fef0fcd50b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:71:5e:ec:04:8b:5e:2d:77:06:04:ba:e1:
40:15:48:b1:be:3c:5e:43:89:ab:44:03:4b:91:ec:
cb:55:96:1f:45:74:4b:4e:97:f9:53:2a:28:f1:9d:
9c:cb:52:da:64:41:e8:bb:ad:e0:fd:45:33:22:47:
cc:ed:75:6f:11:9c:df:22:af:10:21:04:3a:68:72:
39:ae:3c:c1:ac:97:64:26:1e:9a:24:32:78:0e:d3:
05:fc:09:95:51:ab:b2:b1:4e:b5:25:b9:43:95:8e:
0a:cf:c3:44:a9:e4:b0:ab:75:77:5e:fb:17:18:82:
9f:84:3b:9b:45:a2:fe:d4:79:32:6a:37:ec:1c:ab:
32:23:8e:65:a0:f1:92:8f:2a:20:63:6a:05:74:dc:
48:8e:89:ed:36:9a:0a:49:74:c7:5d:6d:04:e9:15:
d2:73:24:cb:07:21:fb:00:45:1c:ce:25:70:4b:11:
80:d3:8e:80:07:9b:6f:46:4c:4f:65:40:91:a5:97:
35:56:3f:56:61:4a:53:ca:40:2f:2d:d6:96:bb:4b:
6e:65:5d:1c:c4:dd:96:b0:2c:80:85:7d:1b:55:1c:
f2:be:ee:c9:85:25:fa:fb:b4:50:31:c9:15:00:41:
0d:aa:39:04:09:78:dd:d2:d7:aa:dd:31:30:b4:ce:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:58:B4:5B:44:46:F9:24:F9:67:9B:13:92:FE:F0:FC:D5:0B:8B
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/CZBYtFtERvkk-WebE5L-8PzVC4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.176.0/24
185.14.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:44:c7:9e:be:f7:ed:c4:7f:a8:eb:41:4f:dc:bd:5a:bb:00:
b8:6f:6f:4c:29:8f:64:68:b0:a6:15:ff:c9:bd:58:c5:dd:dc:
b6:7e:6f:7a:53:c5:8f:42:31:cf:72:cd:ce:aa:b2:fa:a3:9c:
2c:bb:46:f1:93:c9:f2:1c:15:70:d1:cb:ae:6a:86:09:e5:d9:
61:d1:35:7c:11:b4:8f:a8:d3:24:aa:e2:8f:4d:48:8a:ba:5d:
ca:f9:64:d4:2d:26:0e:6d:ff:05:75:d5:e8:d8:24:a6:b1:b5:
4b:91:24:94:0e:c8:fb:17:e0:a6:02:6c:97:67:33:f2:58:11:
a3:34:60:70:8b:39:65:01:c4:ca:5e:ad:f6:5d:3f:f8:ac:67:
33:50:f5:44:f7:d7:b9:45:38:54:36:5f:f6:c9:ff:29:68:89:
63:15:3b:ad:ad:47:a8:b8:8d:2e:35:43:dc:54:d4:1c:5f:af:
68:48:2e:9b:34:0f:f0:e3:43:88:3f:2e:93:39:33:9f:13:23:
eb:9f:40:4f:f4:b7:b9:95:9e:18:5c:96:b5:0b:d8:c6:86:63:
d1:8e:57:ad:a0:d0:18:94:4a:0b:21:ed:fc:87:5b:8e:25:8d:
d1:0e:64:48:bd:63:7a:92:af:09:32:e2:c8:75:a5:43:62:61:
4a:97:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:33 2024 by rpki-client on console-ams.rpki-client.org