Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zM-IHQWZsZUeZVhD4TasuMU1Fss.roa
File: zM-IHQWZsZUeZVhD4TasuMU1Fss.roa (raw, json)
Hash identifier: QhQ/wZOz4DoKx0M90vCj+sro3l21r1aEhN6RP0C83NA=
Subject key identifier: CC:CF:88:1D:05:99:B1:95:1E:65:58:43:E1:36:AC:B8:C5:35:16:CB
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B943250614DAADE920053A5F5F6BD7
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zM-IHQWZsZUeZVhD4TasuMU1Fss.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203633
IP address blocks: 85.187.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:43:25:06:14:da:ad:e9:20:05:3a:5f:5f:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cccf881d0599b1951e655843e136acb8c53516cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:08:7a:cc:97:f0:7d:0b:71:12:dd:db:a8:
70:5e:aa:f6:14:e1:4f:de:f4:e7:b3:56:a5:e5:1e:
9f:d9:12:d9:82:c5:cd:eb:be:48:34:9b:48:29:00:
c8:e9:7d:63:7c:26:4d:85:f4:49:75:d6:0c:52:09:
77:08:f1:67:84:42:43:34:e7:03:ce:60:b7:2a:75:
77:b8:38:58:c5:62:d2:51:e0:41:2d:0f:01:4c:0a:
ba:e4:d0:3f:d2:b3:13:23:9a:38:a6:48:b1:78:3f:
03:6c:3f:0b:c5:c2:5c:5a:85:df:92:44:80:12:97:
84:bb:d3:29:d7:49:fe:d5:37:01:cd:2d:39:3b:e5:
99:95:cc:ca:81:b1:c9:e6:6d:00:43:1b:7a:00:53:
3b:89:25:15:2e:00:d2:53:33:f9:11:ed:17:a6:2d:
9b:07:84:75:79:e5:5d:ad:ab:da:58:0a:72:db:45:
4e:32:6e:4d:d0:61:44:49:ff:3e:44:fe:57:fb:71:
25:9a:60:fe:de:83:af:7f:94:2a:b3:6a:28:b4:a6:
38:f7:bc:08:a9:51:22:2b:d8:19:a3:2b:56:d4:15:
03:26:86:79:b4:d6:62:a8:5e:02:59:95:92:cc:be:
22:aa:b1:0e:da:50:c6:c1:c4:7f:c9:72:77:a5:c7:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:88:1D:05:99:B1:95:1E:65:58:43:E1:36:AC:B8:C5:35:16:CB
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zM-IHQWZsZUeZVhD4TasuMU1Fss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.42.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:44:5c:c2:9f:5a:72:1b:39:df:d0:16:a7:b7:c1:4e:09:24:
7c:39:06:0f:90:2e:a7:53:5f:e1:d2:9c:6c:6a:39:e8:90:ed:
82:b1:5d:1c:ac:73:1d:6e:12:55:e6:2e:ef:5f:d3:7a:b0:8a:
99:4e:23:71:26:4f:1e:17:cc:32:a9:c4:a1:a8:7f:ae:94:e3:
3f:04:8c:d6:aa:db:af:98:61:40:45:c2:30:72:80:75:d3:85:
31:a8:59:67:b8:a9:4e:84:fd:1c:db:4c:78:1e:8e:68:1c:28:
fc:31:aa:0a:37:bd:5b:f0:4f:a6:00:61:92:ec:04:78:8f:93:
6d:12:44:ed:bc:ef:74:e7:d5:da:80:ef:3a:35:2b:31:a9:30:
ab:c0:b5:1b:ff:74:e0:25:b8:97:de:d6:4a:45:c4:4c:68:ce:
68:76:fb:c0:ca:0e:b8:05:d2:65:1c:a6:de:90:3b:be:5b:86:
d4:24:3a:c0:45:c8:4d:99:f2:ec:61:57:e8:c8:54:cd:cb:e7:
ae:1d:b0:e9:41:44:72:6a:49:4e:9c:5b:9e:8c:63:69:ec:5c:
33:bb:a6:eb:e1:01:31:af:28:f8:15:2f:e6:1f:fc:e6:53:1e:
41:82:e0:df:47:9a:ee:e4:b0:5d:3a:9a:99:e0:67:9b:6b:21:
36:07:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:58:59 2024 by rpki-client on console-fra.rpki-client.org