Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/9CfRsFACNy51DMJtzqi1r-TBOXU.roa
File: 9CfRsFACNy51DMJtzqi1r-TBOXU.roa (raw, json)
Hash identifier: pc+RAcxWypFAcFBoHCd7X3As6MlqlshZEEKEpDAkOfY=
Subject key identifier: F4:27:D1:B0:50:02:37:2E:75:0C:C2:6D:CE:A8:B5:AF:E4:C1:39:75
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 018CC86F7A6951D4937AA4CDA4870184C7EF
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/9CfRsFACNy51DMJtzqi1r-TBOXU.roa
Signing time: Tue 02 Jan 2024 04:29:58 +0000
ROA not before: Tue 02 Jan 2024 04:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204834
IP address blocks: 185.188.112.0/24 maxlen: 24
178.157.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:7a:69:51:d4:93:7a:a4:cd:a4:87:01:84:c7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jan 2 04:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f427d1b05002372e750cc26dcea8b5afe4c13975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:98:c0:3e:cb:97:26:22:ec:d5:a0:d7:9d:
b9:35:d8:6d:49:64:09:7d:c0:31:31:28:b0:69:b4:
5f:59:48:5a:e8:58:47:79:67:e6:da:ec:07:43:c4:
ad:f5:91:18:31:5c:a4:73:45:83:29:e1:52:6c:52:
3d:04:57:ed:19:b1:f7:fc:c9:e6:73:dd:7b:86:72:
35:06:d0:32:34:95:25:dc:f6:28:35:83:4d:ad:cc:
08:25:87:26:4f:c3:45:45:1e:cf:8b:48:96:e1:c9:
4b:92:c1:e0:ef:f1:d5:5a:60:6c:2f:62:f4:8b:93:
53:86:e0:e5:f2:36:4f:4a:75:0c:fa:aa:74:cf:1e:
4d:ea:57:f2:7c:6d:4e:3a:e1:a9:a5:ed:d4:2c:e9:
41:f0:27:2a:0f:cb:7b:9b:df:8d:86:1b:9a:e5:38:
3a:66:f8:b1:a4:85:a8:fb:a8:70:fe:a4:b1:b4:49:
f8:76:90:fc:c1:23:9e:f8:27:60:95:b8:79:db:c8:
b6:de:40:28:71:ee:8e:60:bc:25:6b:1a:6a:e5:34:
2f:29:6e:3b:95:92:14:f3:c4:9e:0c:2c:a5:19:c9:
6d:89:c5:48:4b:92:a7:cf:6a:f8:43:49:4f:62:b7:
b3:31:99:cb:de:0d:0b:c4:24:d1:63:9c:b3:21:14:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:D1:B0:50:02:37:2E:75:0C:C2:6D:CE:A8:B5:AF:E4:C1:39:75
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/9CfRsFACNy51DMJtzqi1r-TBOXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.0.0/24
185.188.112.0/24
Signature Algorithm: sha256WithRSAEncryption
89:22:6f:4b:22:dd:50:1d:1a:94:77:6b:48:fb:66:cf:42:1e:
c6:8e:6b:85:4e:2c:47:32:2d:0d:b1:69:68:c8:c9:b9:ca:ce:
bf:16:97:6b:58:14:fe:49:ee:fb:5d:0e:28:83:b8:1d:61:cc:
d0:3b:65:96:b6:d6:63:ee:9c:dc:06:d1:66:80:f6:df:ea:0d:
1c:f9:8f:85:60:a7:60:ca:6d:52:84:ab:df:5a:16:ee:88:e6:
74:1f:26:4d:f3:c6:7d:eb:12:78:5d:ef:a1:a2:b1:af:10:40:
be:0d:2e:09:8d:3e:c9:7a:88:c6:e8:13:79:80:95:08:28:b1:
4c:85:91:60:59:99:3e:ef:d8:0c:3d:34:f0:5a:73:9c:62:aa:
f8:92:2e:fe:08:f4:71:82:f2:40:81:d8:e8:40:57:84:5a:7a:
2b:60:a2:33:f8:de:22:c4:a2:dc:b5:9b:ea:a5:aa:6b:cc:49:
da:df:bb:7d:43:f5:08:69:4c:1e:21:34:1e:2e:09:85:8a:cc:
a3:d9:37:18:fb:a1:c9:f9:14:d8:61:a1:07:f0:75:85:83:a1:
24:90:2e:72:93:38:ad:d9:f8:1a:e7:1a:f9:c7:a1:f6:fa:7e:
3a:d1:cc:49:02:6a:3e:27:cf:d6:9c:51:d6:94:0c:2a:8b:5a:
17:78:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:09 2024 by rpki-client on console-fra.rpki-client.org