Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/AZrApC7xKE0Rbj_SNEc1cvO1eKM.roa
File: AZrApC7xKE0Rbj_SNEc1cvO1eKM.roa (raw, json)
Hash identifier: etPNaJEDSdLwHuyYSnPKl/DUtDqHG1JatpVOpAlG3IA=
Subject key identifier: 01:9A:C0:A4:2E:F1:28:4D:11:6E:3F:D2:34:47:35:72:F3:B5:78:A3
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 018CC4932FDEABA6C1B5984B781B7E027C39
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/AZrApC7xKE0Rbj_SNEc1cvO1eKM.roa
Signing time: Mon 01 Jan 2024 10:30:29 +0000
ROA not before: Mon 01 Jan 2024 10:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.79.75.0/24 maxlen: 24
185.79.72.0/24 maxlen: 24
185.79.74.0/24 maxlen: 24
185.79.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2f:de:ab:a6:c1:b5:98:4b:78:1b:7e:02:7c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=019ac0a42ef1284d116e3fd234473572f3b578a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:e7:f1:0c:42:d8:ab:48:93:aa:9e:ff:d1:
38:72:ed:6e:e6:50:43:d4:4d:d0:94:da:ef:d8:d3:
a1:d1:5d:dd:9e:dd:a8:33:b4:fb:d5:68:15:56:39:
3b:18:f3:7a:35:47:b3:36:1f:9e:3b:15:76:56:47:
03:07:78:b5:48:3f:96:1d:82:f2:d0:00:ea:57:17:
ac:0c:89:0a:2e:bc:56:a9:da:21:4c:d2:f9:c8:ed:
5a:94:6f:47:f3:62:a7:2b:d4:7f:34:e9:1b:f8:aa:
3c:90:bf:97:07:b5:dc:28:6e:e8:e4:2e:f5:f0:11:
12:4e:b4:3b:d1:a3:66:29:77:be:2b:25:a7:48:e3:
21:40:91:95:37:0e:94:cb:9c:ff:c7:0c:28:0f:30:
d9:43:9b:1f:ef:e4:a3:61:64:14:b9:55:a4:ba:9c:
b1:f2:7e:14:b7:dc:64:89:df:3e:0b:6f:54:9b:78:
23:73:d6:e7:8f:2a:0a:63:6a:5a:c2:0c:95:cf:3d:
bb:ea:20:fd:8a:a0:21:67:86:d3:dc:7f:c2:5e:4d:
6a:de:12:cd:2d:0c:30:56:30:07:af:b6:7f:5a:ea:
b6:2b:2c:73:03:33:65:6e:fc:02:2e:8e:5c:c6:da:
4c:8d:98:8a:63:3b:03:40:00:57:33:e6:a7:f2:d7:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:C0:A4:2E:F1:28:4D:11:6E:3F:D2:34:47:35:72:F3:B5:78:A3
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/AZrApC7xKE0Rbj_SNEc1cvO1eKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:ff:78:3a:47:35:d5:5c:35:81:60:cb:19:26:a3:60:ee:3a:
e0:92:bf:f8:d6:10:f0:b5:a1:af:22:bd:a3:24:5a:8f:df:29:
b8:a7:d3:9a:d7:65:89:ab:70:92:f5:b2:a8:1a:95:c4:91:c9:
c7:c6:a8:79:3e:0f:fc:79:36:47:17:b7:40:7b:29:38:15:29:
96:ad:b2:ba:c0:16:f3:d0:b1:41:4f:e4:e6:88:25:89:bc:2f:
0d:4c:75:72:56:96:9a:0e:a2:a7:ac:3e:70:00:32:a0:6d:9d:
ff:d5:fc:fb:cd:18:95:ff:5b:e7:b7:90:7e:5f:2c:67:ff:b1:
71:f6:a6:b9:5b:b5:44:19:e4:5b:cc:12:e2:a6:70:b0:c3:c8:
f5:23:18:78:9a:d7:3e:5b:d8:06:4c:24:b7:e3:9d:29:3c:ef:
dd:fc:ff:a7:19:3e:3f:ff:0f:1f:11:18:42:9c:b8:d5:36:31:
07:6f:82:f4:f2:41:5f:33:06:08:6c:57:41:a9:b9:46:6b:8a:
a7:39:c4:45:73:2d:a0:ef:04:a4:60:34:f6:9d:fd:63:25:88:
5b:15:73:0c:17:cd:4a:96:41:46:77:b1:7f:8d:b4:2e:62:5e:
a6:39:42:ae:79:8c:8d:f5:b8:53:aa:88:ae:51:40:61:e1:fe:
79:51:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:38:27 2024 by rpki-client on console-fra.rpki-client.org