Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/Cc-CsdfEw_venQ5QUqkUMrRNgbU.roa
File: Cc-CsdfEw_venQ5QUqkUMrRNgbU.roa (raw, json)
Hash identifier: UVyq4Swrs/OmbNKiuuhZ9mVVycfW3t32QYAnnqJMKBc=
Subject key identifier: 09:CF:82:B1:D7:C4:C3:FB:DE:9D:0E:50:52:A9:14:32:B4:4D:81:B5
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 018CC2DAE81A5A40D877A475280E9CDBB77F
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/Cc-CsdfEw_venQ5QUqkUMrRNgbU.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 85.158.142.0/24 maxlen: 24
85.158.143.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
193.109.255.0/24 maxlen: 24
46.226.52.0/23 maxlen: 23
193.109.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:1a:5a:40:d8:77:a4:75:28:0e:9c:db:b7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09cf82b1d7c4c3fbde9d0e5052a91432b44d81b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:f1:48:fd:29:3b:b2:4d:b6:ff:7d:54:82:
ac:f2:78:c5:71:f1:28:33:15:ba:8e:5b:74:75:59:
b5:2a:1b:1d:50:fa:9b:46:b0:a3:19:9c:c4:02:97:
5f:97:8a:64:65:65:8e:b9:ab:ae:08:43:fc:bf:66:
92:27:e5:bd:95:b4:4c:e6:84:83:36:37:de:a5:09:
8a:7d:aa:55:43:18:c2:38:0b:76:1e:e2:75:8c:56:
0f:59:28:6f:06:38:e9:3d:db:ad:9b:01:76:8d:83:
04:c2:53:b5:2d:a9:5f:ee:21:d7:79:82:97:cd:1f:
20:53:b1:63:f7:54:39:fa:77:5e:11:a4:34:78:b0:
64:55:69:23:09:98:c1:96:d1:3b:12:42:bb:99:9c:
ff:dc:66:db:32:5b:8c:38:1d:e2:0c:0f:af:82:8d:
a8:1d:4a:48:c2:f0:24:64:6e:06:29:c8:dd:83:fa:
cd:42:c4:8e:a2:11:e0:4a:ee:1a:48:d1:79:14:d4:
b2:cb:91:6a:2f:6b:35:0b:b3:83:10:19:23:b0:ee:
7e:42:43:11:66:af:a8:1d:50:75:45:29:91:44:08:
4c:61:12:80:ad:17:f3:12:7e:14:7a:70:a8:65:0d:
d3:40:2c:30:66:a9:09:9e:d2:49:02:91:09:dc:15:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:82:B1:D7:C4:C3:FB:DE:9D:0E:50:52:A9:14:32:B4:4D:81:B5
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/Cc-CsdfEw_venQ5QUqkUMrRNgbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/23
85.158.142.0/23
193.109.254.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
46:ec:fc:e8:59:d8:db:23:1f:e7:70:49:05:9c:4e:b6:3e:64:
2e:73:ed:b7:67:47:e3:df:c4:62:e3:d6:e9:e2:bd:c5:19:9e:
3b:02:b9:e1:50:bd:6e:96:54:44:7a:26:e5:65:86:88:88:c9:
49:52:cd:3b:14:0f:0a:92:d8:77:ca:fd:79:09:0b:2f:d8:30:
2e:93:68:ca:d8:4c:4d:d9:82:32:7b:0f:d8:e3:76:35:20:3e:
36:e0:5e:b3:fa:bb:76:85:c4:43:be:30:a8:7e:1e:50:f3:bc:
66:3f:4f:89:d8:fa:55:ea:f4:5e:17:d8:31:63:7e:97:dc:83:
6d:43:27:99:a8:de:b1:66:8d:b2:3f:5d:eb:08:a5:82:4a:d3:
94:61:bc:f2:4d:97:a2:14:73:d6:41:a0:04:39:51:16:d2:60:
79:83:7c:25:98:9c:ce:42:dc:e9:29:4d:f8:e4:dc:8e:e7:8b:
4b:b8:64:01:28:ae:51:43:49:49:70:a0:8e:76:82:cd:db:1f:
53:34:80:bb:60:3f:39:fa:cb:b5:3a:d6:16:36:34:c0:50:00:
ea:bf:47:6d:fd:5c:d3:91:d4:79:c0:f7:32:0f:21:89:8a:3d:
66:ce:f6:40:69:32:0c:16:1e:dd:3b:da:af:fb:26:5f:dd:c8:
e5:89:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:18:08 2024 by rpki-client on console-ams.rpki-client.org