Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/_cCMb8-YTSa9cK4jg8Cc5qPJIdg.roa
File: _cCMb8-YTSa9cK4jg8Cc5qPJIdg.roa (raw, json)
Hash identifier: Zr/bmxZJU+pwZAAQjD2I7EphQ2jUkmnD4b86NMd89CM=
Subject key identifier: FD:C0:8C:6F:CF:98:4D:26:BD:70:AE:23:83:C0:9C:E6:A3:C9:21:D8
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019301237616AC94409FC9CD95BC68F3EE86
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/_cCMb8-YTSa9cK4jg8Cc5qPJIdg.roa
Signing time: Wed 06 Nov 2024 11:02:01 +0000
ROA not before: Wed 06 Nov 2024 11:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202169
IP address blocks: 91.215.48.0/22 maxlen: 24
185.19.188.0/23 maxlen: 24
185.19.190.0/24 maxlen: 24
185.240.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:23:76:16:ac:94:40:9f:c9:cd:95:bc:68:f3:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 6 11:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdc08c6fcf984d26bd70ae2383c09ce6a3c921d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:59:af:04:4c:fd:af:d1:f1:b2:36:74:3f:
11:7e:a7:75:f4:51:70:a8:fd:b5:03:8d:1f:e2:01:
30:05:f7:4d:d0:27:0a:88:21:24:c6:b7:f1:09:a8:
c3:f1:ff:d5:b4:b9:7a:38:cc:9f:ad:2b:aa:cc:c9:
0c:2a:b5:aa:9e:5d:a9:ec:d5:18:48:fd:36:73:28:
89:d5:98:93:85:2b:41:88:fe:b4:5c:33:74:af:47:
eb:f6:c7:39:c0:11:5a:d4:4b:64:2b:96:8b:f0:93:
af:b7:eb:f4:6f:00:6f:14:14:5a:b6:c2:d9:27:13:
cd:ca:d6:4f:f1:cd:a6:2b:d3:08:4b:e8:ce:d2:d4:
33:9a:b0:ef:c5:64:ff:83:b4:ee:a8:1d:d9:63:31:
55:9f:55:8a:10:1a:81:a7:3d:6a:42:79:a6:fe:a4:
43:f9:15:50:06:7b:7a:16:0f:85:2f:9e:59:9d:9e:
c8:39:a6:86:78:e1:b7:9e:14:94:5d:21:a3:4d:03:
08:07:97:94:99:6b:bf:89:c9:35:ab:6d:be:21:cd:
7f:06:a7:29:07:99:d2:55:96:94:42:80:57:c0:b0:
34:e5:79:10:0f:b6:21:1e:fc:c1:1e:65:b1:06:4e:
7e:af:3e:0a:36:0a:ca:e3:80:a4:aa:aa:fc:02:6e:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:8C:6F:CF:98:4D:26:BD:70:AE:23:83:C0:9C:E6:A3:C9:21:D8
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/_cCMb8-YTSa9cK4jg8Cc5qPJIdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.48.0/22
185.19.188.0-185.19.190.255
185.240.80.0/22
Signature Algorithm: sha256WithRSAEncryption
18:77:0b:ca:de:1c:e7:05:b0:d1:90:a3:eb:0e:d2:29:d6:7a:
5b:43:5e:7d:8a:00:6f:71:f7:8e:06:92:c3:20:df:af:ed:fd:
ab:b6:2a:d6:8e:11:fd:c6:e3:86:2c:db:4d:a3:03:73:4e:bb:
b8:41:e6:20:78:33:01:9a:f7:9d:73:f8:39:35:54:ae:1c:a1:
24:1e:e6:5c:67:28:16:22:48:a3:55:47:21:6c:3f:97:f5:9e:
19:7c:c9:24:b2:2f:77:1b:9f:02:6e:58:a6:1e:b6:db:8b:86:
c1:50:cd:fa:4d:d5:d9:3a:9a:a2:e7:87:d3:4d:08:75:58:74:
e3:91:58:d2:de:41:92:53:33:0a:72:a6:3c:2c:5b:2c:c4:02:
63:ef:da:34:ee:65:1e:6b:47:85:47:4e:6e:1d:2b:50:17:c7:
ba:55:3b:e5:ac:83:10:cf:83:6b:60:9f:ae:e9:5b:3a:6e:a1:
e4:ed:d7:a1:24:27:81:61:59:ab:0c:68:b4:de:a7:fa:76:fc:
b6:ce:b0:a4:1e:b3:fb:f1:53:cb:76:30:d3:b7:cd:ca:e7:e5:
e6:36:f0:b2:4d:81:46:b1:47:cf:f4:22:88:c5:8d:31:61:7a:
4b:99:61:ef:65:13:f0:77:58:f4:4d:19:1f:bd:ed:37:5b:45:
dd:30:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:34 2024 by rpki-client on console-fra.rpki-client.org