Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/CzyTJ_Ns0DcjPQDjL1G00EyyDbM.roa
File: CzyTJ_Ns0DcjPQDjL1G00EyyDbM.roa (raw, json)
Hash identifier: 7qiemVbRLeq+9scMJ2CZh9suqqOjnW0YO3P3rOMG2KQ=
Subject key identifier: 0B:3C:93:27:F3:6C:D0:37:23:3D:00:E3:2F:51:B4:D0:4C:B2:0D:B3
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 018DF52F8435247D537A83DC7A7C4D19D2EF
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/CzyTJ_Ns0DcjPQDjL1G00EyyDbM.roa
Signing time: Thu 29 Feb 2024 14:05:48 +0000
ROA not before: Thu 29 Feb 2024 14:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212285
IP address blocks: 185.107.134.0/24 maxlen: 24
185.107.135.0/24 maxlen: 24
194.5.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:2f:84:35:24:7d:53:7a:83:dc:7a:7c:4d:19:d2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Feb 29 14:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b3c9327f36cd037233d00e32f51b4d04cb20db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:37:43:ec:9b:18:f7:bb:67:d3:dc:3e:21:
92:4a:69:3b:ad:ae:13:b6:90:2a:c9:0c:e0:f2:b1:
93:80:fb:ec:12:2f:e1:97:8f:95:d8:e7:88:57:2b:
f8:70:3c:14:03:85:0e:8a:1f:95:de:75:02:0c:43:
e1:cc:2a:28:39:7c:e7:c7:6b:cb:59:62:f3:dc:7b:
6c:91:c6:7a:db:bc:a9:52:5d:0a:02:76:6a:11:4d:
d6:a0:82:8e:69:f5:9d:2a:84:79:2a:0d:24:da:25:
99:a7:ef:3b:1f:13:cb:8b:0b:4b:81:8d:09:2a:d8:
69:6d:29:7f:14:a4:8c:f5:99:53:ba:2a:16:a0:72:
d6:6c:d9:a9:3f:c2:56:69:04:fd:da:ad:15:b5:61:
48:22:b6:aa:19:12:c9:16:77:2b:f4:41:e3:ab:34:
53:23:f4:b4:a4:38:01:6f:03:88:8b:c0:92:18:32:
74:ac:66:c8:87:c1:c4:2f:76:21:f7:9b:18:1e:87:
89:7c:5a:58:f0:7f:66:9f:72:5a:9b:d2:7f:5f:1e:
4c:5c:9c:8f:c9:0b:cb:6b:64:98:25:21:5b:98:c3:
4f:0c:ec:64:5e:73:40:50:10:1e:e1:5b:6b:8d:da:
0a:0a:b8:d4:e5:19:b4:9d:25:ff:01:e0:74:af:b1:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3C:93:27:F3:6C:D0:37:23:3D:00:E3:2F:51:B4:D0:4C:B2:0D:B3
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/CzyTJ_Ns0DcjPQDjL1G00EyyDbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.134.0/23
194.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bc:15:37:29:44:48:0f:d8:1b:42:6a:cf:f3:90:6e:db:b5:
7c:e8:cb:8c:f6:e9:a1:8f:bf:00:95:60:15:1e:5a:26:87:57:
c0:93:8e:84:02:bb:f6:c1:a2:61:ec:3d:bc:ac:2b:30:0d:af:
c9:78:f4:8d:5f:e4:65:67:29:a1:b0:c9:37:a9:fe:55:58:06:
af:61:96:e2:94:9f:10:fb:07:2d:35:ad:be:cc:6a:aa:4f:28:
be:28:3c:b9:5a:9d:6d:a9:41:8f:ad:a9:4a:44:78:2d:19:37:
5e:62:cc:f5:df:26:c0:04:12:82:72:7f:91:fd:cf:ea:1b:89:
1d:92:23:f4:0f:13:b3:cd:61:72:cf:e9:f0:ee:d0:e6:d2:ad:
de:12:6d:16:4d:eb:98:24:d4:ac:4f:13:6f:c7:8b:d7:46:a9:
a3:cf:fa:f4:9a:aa:0b:70:12:65:c3:db:77:dc:72:eb:3d:1f:
2f:22:05:32:08:ed:95:d8:f7:5f:b1:e5:b3:79:43:cd:b4:71:
67:10:c3:ec:1b:8c:c3:65:35:01:fe:2f:73:84:f1:eb:81:d6:
1c:5c:83:e3:ca:d5:1a:52:94:f5:51:a4:8d:5e:b1:d9:81:04:
9e:6b:48:b5:72:b2:ff:3d:e8:4d:91:ac:05:e1:21:2f:e8:c8:
35:42:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:44 2024 by rpki-client on console-fra.rpki-client.org