Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/CUCf3iXcd6-yhfI6dozUge3Faek.roa
File: CUCf3iXcd6-yhfI6dozUge3Faek.roa (raw, json)
Hash identifier: rftHX+kpjdJYGYSjScGj6SvgQuapylMQ6tSD0+Wt420=
Subject key identifier: 09:40:9F:DE:25:DC:77:AF:B2:85:F2:3A:76:8C:D4:81:ED:C5:69:E9
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 019007F460F14F239B17FDCA4E37092A5F6E
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/CUCf3iXcd6-yhfI6dozUge3Faek.roa
Signing time: Tue 11 Jun 2024 15:39:34 +0000
ROA not before: Tue 11 Jun 2024 15:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:8f80::/32 maxlen: 32
2a11:8f82::/32 maxlen: 32
2a11:8f87::/32 maxlen: 32
2a11:f180::/32 maxlen: 32
2a11:f181::/32 maxlen: 32
2a11:f183::/32 maxlen: 32
2a12:1803::/32 maxlen: 32
2a12:1805::/32 maxlen: 32
2a12:1cc1::/32 maxlen: 32
2a12:1cc5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:f4:60:f1:4f:23:9b:17:fd:ca:4e:37:09:2a:5f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Jun 11 15:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09409fde25dc77afb285f23a768cd481edc569e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:b3:62:23:9e:3b:53:ad:57:7b:ec:69:bc:
8d:c7:07:44:f1:70:e0:aa:48:11:2a:0a:16:a1:ed:
7c:0d:fb:72:03:a6:de:ff:c3:46:b0:25:94:7e:f3:
89:da:44:fb:56:dd:45:a9:36:f0:43:9d:50:11:24:
01:fc:ce:55:5b:4a:e2:60:4a:70:9d:15:24:9d:3f:
c8:c7:90:4a:4d:31:8d:9f:7d:a1:8d:47:cd:66:15:
92:61:b1:81:8c:b4:0c:d9:8e:ee:88:e1:75:71:db:
ee:bf:d0:2b:77:21:fe:5a:98:67:dd:fd:6c:fa:72:
2c:58:ef:03:01:d8:a0:5f:6f:28:aa:d6:9e:89:28:
0e:4d:45:93:32:4f:2d:dd:f0:43:6c:b3:b8:fb:89:
19:55:6f:34:cb:69:15:95:76:aa:58:03:c2:e0:93:
f5:f8:7d:73:ea:a8:af:4f:a3:77:17:11:a7:5d:96:
22:62:b0:b5:13:25:ee:7a:d3:60:d5:ab:b1:26:82:
26:13:08:9a:2b:50:32:be:6a:bf:bd:54:11:d3:b3:
27:63:b2:67:1c:7b:4e:71:2a:88:03:1d:5d:fd:60:
af:f2:59:85:0d:59:40:90:1e:24:55:09:ae:92:cd:
4b:c5:b6:f7:b2:15:0a:93:9c:1a:51:35:69:ee:b4:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:9F:DE:25:DC:77:AF:B2:85:F2:3A:76:8C:D4:81:ED:C5:69:E9
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/CUCf3iXcd6-yhfI6dozUge3Faek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8f80::/32
2a11:8f82::/32
2a11:8f87::/32
2a11:f180::/31
2a11:f183::/32
2a12:1803::/32
2a12:1805::/32
2a12:1cc1::/32
2a12:1cc5::/32
Signature Algorithm: sha256WithRSAEncryption
a4:e5:aa:1a:ba:81:8c:14:ad:0f:c0:03:43:6a:b2:1c:ce:90:
0e:76:cd:4a:b8:f3:12:31:32:ee:97:bf:ee:e8:5c:c5:f2:13:
e7:0b:26:86:64:44:1c:e5:46:95:91:de:d6:02:f2:7c:c4:a3:
81:dd:73:3c:42:4a:84:da:93:40:19:97:f9:d6:a0:f1:d5:e6:
8c:1a:a8:d6:7b:0f:9e:1d:de:28:9f:07:e3:a8:a4:b8:96:10:
97:84:b2:3a:03:5c:1a:c4:0f:de:5f:15:ee:26:0b:e9:b7:16:
8c:65:d9:44:bd:6c:c7:76:40:e4:c9:c8:0d:01:bb:d0:98:c5:
35:3e:4c:fe:74:42:cd:78:d4:84:61:ee:fd:52:36:68:bb:6f:
fe:9a:55:84:42:aa:5f:89:ef:b7:f5:a8:eb:e9:2c:6a:07:41:
23:35:f0:96:d8:85:80:a0:c8:25:9c:ac:ce:9e:8d:79:d5:b1:
88:5f:fc:4f:b1:cf:c8:36:c9:6d:2f:2d:1e:05:e1:b6:6f:85:
bc:32:44:ba:13:47:92:29:3c:4c:5e:e5:28:8f:f0:09:57:38:
d0:c0:ef:92:02:d2:66:9f:30:9a:d2:08:e2:b9:0f:58:64:02:
55:90:e6:38:03:a8:4c:a9:56:c1:6e:f3:38:89:99:0b:90:86:
d8:2a:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:36:30 2024 by rpki-client on console-ams.rpki-client.org