Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CFzxVik7M8py9raxChxiAD_2sGI.roa
File: CFzxVik7M8py9raxChxiAD_2sGI.roa (raw, json)
Hash identifier: t7d0+C0F6RJN9MsIkpFXqWgtMq1pzs7xt9jiY3UphsI=
Subject key identifier: 08:5C:F1:56:29:3B:33:CA:72:F6:B6:B1:0A:1C:62:00:3F:F6:B0:62
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EEA53BF81E4A9B3D7C63EC0EC10FF
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CFzxVik7M8py9raxChxiAD_2sGI.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31420
IP address blocks: 5.104.184.0/21 maxlen: 24
176.241.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 21:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ea:53:bf:81:e4:a9:b3:d7:c6:3e:c0:ec:10:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=085cf156293b33ca72f6b6b10a1c62003ff6b062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:8a:e1:d4:94:85:26:79:92:51:3a:ec:ce:
d1:30:56:e0:10:52:f9:a7:e4:6d:1b:50:47:94:2c:
a3:22:ee:4c:94:a5:58:72:6c:41:06:4d:28:3c:c1:
78:a9:cd:cb:14:80:71:e7:a6:84:59:ee:15:7c:f2:
18:6b:c8:6a:54:b9:5a:73:d6:dd:2f:bc:ea:16:a0:
1c:8c:f1:19:f9:7c:ae:ef:7b:d7:f6:a8:c8:19:76:
9b:ac:b8:d3:1c:2d:9b:4b:bb:a9:92:6f:1e:6e:b3:
eb:8f:b0:bc:01:97:62:32:9a:9c:93:24:b7:5a:dc:
db:c6:10:67:e1:42:8b:c3:8e:5b:67:49:44:82:f1:
df:62:8c:2f:c7:06:c4:9f:c3:b4:9c:b9:ef:ac:19:
26:e6:e9:99:66:ff:2a:ac:69:76:78:a4:cc:06:48:
f4:df:3d:07:ba:f9:c3:b0:de:6e:93:cd:88:d0:c5:
7a:71:9b:ee:28:54:d8:77:4d:de:bf:e0:9d:0b:1c:
4e:8f:2e:ad:ec:5f:4a:af:d4:cb:b3:d3:20:fc:55:
f0:60:c1:1b:7d:41:40:00:a6:2f:2f:a1:31:85:ae:
2f:f3:7d:cf:b7:63:18:dc:b5:0b:8c:ac:ce:5d:ac:
1f:ba:aa:37:ce:99:34:ab:7b:e3:0a:4c:2a:5d:b6:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5C:F1:56:29:3B:33:CA:72:F6:B6:B1:0A:1C:62:00:3F:F6:B0:62
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/CFzxVik7M8py9raxChxiAD_2sGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.184.0/21
176.241.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:04:e6:9e:0d:7d:6e:16:be:75:e8:29:c3:c5:22:7c:4a:a3:
13:49:54:19:cf:30:b6:d1:94:58:01:d3:42:c4:f2:99:44:cc:
f6:f0:90:a4:7b:32:62:38:25:f3:f9:a3:aa:80:5c:60:e2:f4:
e2:81:b5:1b:4f:54:f0:a6:68:6d:c0:40:8c:80:08:94:3f:e9:
41:ab:68:22:8e:97:e7:bd:e4:3c:cb:a8:6d:e5:a1:0d:03:d4:
fb:45:5f:5c:88:c5:b7:d2:9e:08:c1:de:ec:46:37:72:98:dc:
03:d9:ef:b4:05:51:2b:d5:2b:ed:ba:3c:dc:6d:23:66:47:d3:
7b:0b:88:59:42:3e:37:3e:32:6f:00:50:8a:2d:30:02:16:81:
d2:7d:30:a3:6d:17:78:a9:86:08:13:84:02:fb:4b:af:dd:4e:
95:48:7f:de:09:bc:64:5a:e7:bd:53:cc:16:07:b2:67:8d:fa:
97:cd:43:ee:72:d1:36:d7:cc:a2:ee:9d:af:07:23:14:4e:0b:
07:ce:ef:ad:dd:23:ac:41:06:82:e7:e8:9b:0c:c5:f0:a5:93:
78:7e:d1:9b:2a:00:60:eb:6c:dc:37:a2:44:28:8e:17:4e:2f:
a8:eb:be:16:f1:c2:c8:8c:89:ad:21:c1:7b:fd:37:bf:df:74:
ed:35:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:23:40 2024 by rpki-client on console-fra.rpki-client.org