Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CUxheNHo4nckAP6k5yhQwlA1HtE.roa
File: CUxheNHo4nckAP6k5yhQwlA1HtE.roa (raw, json)
Hash identifier: 8hUsEz0RcFsYdBh82z0konnRXdwHSJQH5KwIgwFvsyI=
Subject key identifier: 09:4C:61:78:D1:E8:E2:77:24:00:FE:A4:E7:28:50:C2:50:35:1E:D1
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 018CC86F86918158DDF4C1F5BE8550EBB4E8
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CUxheNHo4nckAP6k5yhQwlA1HtE.roa
Signing time: Tue 02 Jan 2024 04:30:01 +0000
ROA not before: Tue 02 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61101
IP address blocks: 185.41.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:86:91:81:58:dd:f4:c1:f5:be:85:50:eb:b4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jan 2 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=094c6178d1e8e2772400fea4e72850c250351ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:82:0a:05:d6:15:35:94:68:e3:32:74:61:
b3:fd:16:5a:09:70:65:08:eb:e2:1f:ed:68:e2:a6:
71:7f:08:bf:48:a9:6d:67:63:a7:8e:62:85:fa:9b:
af:c0:bb:57:bc:17:2e:53:65:84:1f:4f:68:96:88:
07:0c:cc:1b:0c:78:2c:bf:24:62:0c:9d:2a:7e:31:
3f:69:e9:e7:98:89:0b:51:e8:1e:0f:b2:51:bb:44:
79:f5:29:05:1d:d0:de:bc:4b:30:76:ca:d8:1d:ab:
13:9e:87:0c:88:6f:fb:1f:25:10:89:ec:74:2f:6f:
99:37:aa:63:02:fe:63:67:0e:23:ed:aa:e3:b0:30:
c2:f9:d6:2c:fc:93:7c:ab:d8:dd:7c:40:b1:ef:17:
6c:28:97:f5:be:ca:d3:41:af:69:8b:6e:64:34:89:
23:c1:5d:e0:1a:56:d6:4c:f3:ea:57:4c:25:8a:19:
cc:15:3d:6c:ab:0e:59:f1:15:40:ab:6d:cf:49:5d:
2d:c4:37:48:2c:d7:7b:8b:6c:ea:2b:54:bc:c1:ee:
d8:d5:45:23:5b:8b:3f:c0:2d:61:12:c7:81:a1:69:
74:98:01:1f:1d:ae:22:7d:49:c8:aa:96:6e:14:19:
4b:c6:80:d9:73:64:d4:18:0a:7a:c5:3f:d2:b6:c0:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:61:78:D1:E8:E2:77:24:00:FE:A4:E7:28:50:C2:50:35:1E:D1
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CUxheNHo4nckAP6k5yhQwlA1HtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0e:64:8d:a1:66:49:67:64:53:94:c4:a7:78:dd:6f:d0:10:
e5:47:47:59:ce:96:01:b7:84:cb:b0:82:92:9d:4a:e8:52:6b:
06:f2:74:53:34:20:ae:5e:ff:22:e8:f0:d5:1b:b7:5f:66:de:
84:dc:41:57:16:66:49:10:48:3a:70:3e:5e:d5:a7:4f:40:ba:
6a:fe:bb:7c:d6:b8:d6:85:a4:23:88:b0:c3:9f:ba:dd:12:39:
ef:75:4c:af:b6:28:04:46:ea:7e:f7:3c:34:66:cf:be:07:89:
0e:35:19:58:a7:fc:ef:34:01:cd:46:35:92:6b:e7:85:58:fa:
8f:2e:6d:49:81:b7:95:4f:02:25:c3:28:ce:3a:a4:e9:51:c8:
6b:76:8f:a8:c4:c8:ca:7e:55:8a:71:83:9f:5a:59:a6:2c:4b:
98:c6:c5:a3:e3:4a:90:91:75:77:39:64:d8:3b:db:28:37:ba:
4a:10:63:36:c8:8d:df:b5:d9:4b:b1:7e:9c:26:63:31:bd:e4:
ee:af:3d:6d:34:f7:69:03:e6:91:0c:d5:22:e6:0e:ac:fc:9c:
66:3a:30:23:f4:92:6a:a3:12:14:32:a3:b9:05:1a:61:27:a9:
2d:f2:f7:0a:fb:37:a8:2b:3b:6c:2b:52:17:91:95:2e:b3:0d:
5f:f1:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:06:35 2024 by rpki-client on console-fra.rpki-client.org