Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CdCGJdwiK8thdfKorSgGRnjJl7g.roa
File: CdCGJdwiK8thdfKorSgGRnjJl7g.roa (raw, json)
Hash identifier: laggn6Xv2U0yZEEsUJpqkmurBkAVIyXShENmHhvZmPk=
Subject key identifier: 09:D0:86:25:DC:22:2B:CB:61:75:F2:A8:AD:28:06:46:78:C9:97:B8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F487BE2AC85A57B9BACD6AE894A36
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CdCGJdwiK8thdfKorSgGRnjJl7g.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208139
IP address blocks: 185.200.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:48:7b:e2:ac:85:a5:7b:9b:ac:d6:ae:89:4a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09d08625dc222bcb6175f2a8ad28064678c997b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:9f:74:d8:f8:98:53:97:58:4d:67:e9:e2:
47:c7:54:46:64:43:29:a2:9c:58:b6:10:ca:65:65:
9f:7d:01:25:22:2d:50:3c:c5:7f:8d:d4:e8:f6:23:
bd:d8:9e:f8:18:58:57:6a:67:c0:b9:7b:c7:7d:0a:
b5:8f:21:f9:c6:b1:d3:b2:e1:e1:ba:82:db:01:47:
55:f8:9b:4e:25:5f:3e:c9:59:25:69:ca:73:61:af:
88:fd:76:4b:3a:9d:c1:27:c4:ce:1a:12:a5:ec:ba:
04:cb:d2:77:51:6a:c4:94:45:0b:95:f9:d2:c2:be:
39:58:f1:7e:df:d1:a2:bf:b6:6d:ff:f3:92:10:50:
6b:36:4e:a8:5f:6f:25:54:0f:46:f1:cc:94:ac:c2:
64:11:ae:a9:df:d0:36:b0:b5:2a:df:10:27:d8:1c:
71:86:17:9a:5d:00:db:2c:4d:19:da:0c:66:77:21:
3f:38:93:c7:70:8a:6e:d5:90:e0:5b:f5:df:dc:a0:
b2:ff:c5:a6:16:8d:88:34:a4:3a:ad:33:1c:c2:af:
4c:f3:85:63:da:28:8c:8e:2f:dc:a6:9e:4b:09:bd:
9e:e4:64:8c:d8:5b:d3:cd:c1:ab:62:a7:fe:e3:5e:
5b:e9:12:08:49:8f:8c:58:6b:7c:b5:cf:ff:d3:33:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:86:25:DC:22:2B:CB:61:75:F2:A8:AD:28:06:46:78:C9:97:B8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CdCGJdwiK8thdfKorSgGRnjJl7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4f:19:78:20:ad:c7:90:ad:ef:0c:4a:d9:23:ea:d1:a9:dd:
8e:53:89:e9:ac:e6:62:04:84:39:b8:57:f9:e4:b4:a1:dc:5e:
7d:01:38:3c:ff:61:bf:6c:62:65:c5:ff:3d:c5:e0:6c:37:b1:
7f:b4:d6:2e:5a:84:32:02:99:e9:51:ba:0e:42:ac:68:fe:d1:
96:d3:52:55:db:a5:18:ca:a4:e1:dc:26:7e:a2:f2:ef:a1:94:
1e:b5:41:1b:38:79:78:d3:0b:93:18:9f:9a:23:b2:eb:59:4a:
01:df:70:6d:20:0b:4b:8a:00:66:52:e2:9b:a5:15:76:36:34:
58:fa:eb:53:6c:77:bc:8e:65:48:66:ef:26:9c:69:d9:1f:bc:
08:d7:57:e6:23:bd:bc:c7:12:dc:3a:31:2d:4b:99:4d:9e:2a:
a1:78:18:6a:56:d2:0d:b9:aa:c4:7b:0d:a6:4b:cf:77:15:02:
82:04:57:b7:63:19:9e:22:2e:4c:0c:68:ef:87:6f:c6:6a:f1:
6e:aa:c3:85:7a:c4:92:18:17:f7:ca:ba:b7:ce:2b:a9:e9:cb:
b6:0f:a0:06:a3:c1:0b:7a:1e:fd:97:77:94:b3:2d:00:8e:a7:
34:7c:ba:a7:4d:e9:2b:95:9a:84:67:e3:3c:58:6a:af:80:16:
0b:6a:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:48:37 2024 by rpki-client on console-ams.rpki-client.org