Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Cn_JCQAi_psI2nM9-YK4q9qRfCA.roa
File: Cn_JCQAi_psI2nM9-YK4q9qRfCA.roa (raw, json)
Hash identifier: HYmUwyD9mSsNvabUHLObXp8Z16Rwu1EvyrBvqP5vSyg=
Subject key identifier: 0A:7F:C9:09:00:22:FE:9B:08:DA:73:3D:F9:82:B8:AB:DA:91:7C:20
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DEF97A019CF76D4FBE49C9A366901
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Cn_JCQAi_psI2nM9-YK4q9qRfCA.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198833
IP address blocks: 5.8.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ef:97:a0:19:cf:76:d4:fb:e4:9c:9a:36:69:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a7fc9090022fe9b08da733df982b8abda917c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:a9:95:51:bf:67:97:75:ca:0f:39:aa:5a:
39:a5:69:fa:16:ab:8d:e5:ee:35:d6:59:05:9e:0f:
a0:62:9a:30:6c:dd:9f:f5:05:38:ec:93:e8:aa:88:
3e:bf:f6:f3:2f:7c:1c:c6:1f:e9:37:a2:66:5c:ba:
14:23:39:ec:51:00:b0:7a:04:60:50:e9:d2:07:d2:
c9:12:b0:ea:26:64:d1:d6:48:8a:13:9b:30:a0:cd:
97:77:1b:a2:78:d0:20:af:a6:0f:62:eb:24:6c:ad:
8c:32:1d:df:4a:93:98:84:bf:a0:ac:27:6f:f2:5c:
31:54:e5:9f:33:78:48:6a:be:1b:d6:9b:c0:6b:b8:
4d:51:ef:ac:d8:87:b8:33:63:bf:56:2f:2a:ef:cf:
58:b9:17:fb:9d:6e:b1:3c:c7:83:13:6a:64:f8:01:
ab:6b:f0:f0:ca:aa:b0:90:da:ae:a9:c9:ed:97:a0:
16:7d:bc:37:8b:4d:5a:cf:9e:24:1a:f6:5c:f3:25:
b6:fe:ea:28:da:23:12:23:0f:05:a0:57:74:93:4a:
ee:03:20:1d:88:44:77:d7:89:83:cd:e5:4f:86:46:
21:d7:6f:74:0b:06:5b:15:ab:58:94:c2:7b:30:d6:
5d:63:e5:85:b4:61:81:8a:37:52:e4:c7:a1:6b:7e:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:C9:09:00:22:FE:9B:08:DA:73:3D:F9:82:B8:AB:DA:91:7C:20
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Cn_JCQAi_psI2nM9-YK4q9qRfCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.178.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c1:f5:c1:17:c1:fd:a9:e1:67:00:02:a8:7e:90:a9:10:5b:
14:0a:85:d1:16:9c:bf:c8:15:a1:66:ef:3c:e4:86:77:b2:c1:
51:22:d3:1f:eb:bd:d5:75:b8:10:e9:42:85:1c:e4:72:48:f7:
35:8b:e1:38:c3:a2:d6:3b:5e:22:4d:14:66:9d:3d:a7:5c:82:
a5:12:c2:66:50:6e:72:d2:36:0f:34:2a:02:00:51:44:f2:d0:
91:4f:a1:79:08:8c:9f:de:6a:61:8a:3a:b9:9f:e1:24:39:04:
f3:a6:b6:d8:8c:87:38:f1:16:6d:62:ad:65:20:cf:17:b4:df:
60:60:a4:0c:30:e5:0a:eb:6f:85:4b:7b:8a:2d:c6:59:0a:b6:
48:0b:c5:09:93:83:1b:27:9f:7c:7b:e9:3a:12:d0:30:77:a7:
66:46:aa:bd:ca:12:68:b9:8b:be:4e:bc:e3:5c:72:e5:5f:fd:
72:95:3d:ab:45:68:0d:1d:4f:f0:48:98:48:42:e1:35:a8:20:
8d:1d:5a:0f:85:c7:79:f1:d7:a0:df:74:30:10:82:dc:88:8d:
c7:ee:06:f1:13:bf:2c:15:be:df:73:b2:24:5d:73:48:65:ea:
93:5a:83:a9:47:8b:4f:f2:12:38:74:b2:bd:4e:8d:78:18:5b:
ac:aa:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:24 2024 by rpki-client on console-ams.rpki-client.org