Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/CKuLBvj-lgKgvMEHCZFZmml9v5U.roa
File: CKuLBvj-lgKgvMEHCZFZmml9v5U.roa (raw, json)
Hash identifier: KejlxUus7N9L5KYmMydmsBMDMRvyza5woXt4bb9aJyg=
Subject key identifier: 08:AB:8B:06:F8:FE:96:02:A0:BC:C1:07:09:91:59:9A:69:7D:BF:95
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0193491E6972580DB10C3EA561B9D1FD83FE
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/CKuLBvj-lgKgvMEHCZFZmml9v5U.roa
Signing time: Wed 20 Nov 2024 10:29:10 +0000
ROA not before: Wed 20 Nov 2024 10:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43366
IP address blocks: 45.85.220.0/22 maxlen: 24
185.61.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:1e:69:72:58:0d:b1:0c:3e:a5:61:b9:d1:fd:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Nov 20 10:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08ab8b06f8fe9602a0bcc1070991599a697dbf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:e8:2d:87:df:ab:2c:39:84:cc:c8:ed:31:
e1:8f:bf:5f:02:6b:fd:f7:71:d6:6f:0f:f8:e3:ce:
e6:20:49:64:fd:28:e6:37:34:d2:f7:2c:dd:7e:6d:
6d:05:c1:a7:1c:a3:b0:af:a4:0e:a3:8b:a5:d5:4d:
cd:e4:f3:78:6c:21:c3:5f:ca:e0:57:0a:98:36:be:
0d:8c:21:a6:e3:85:89:a0:0e:18:0d:dc:d5:8c:3d:
e0:a1:9c:86:3f:50:99:4f:47:ad:94:1e:e1:b4:4d:
ba:19:6e:ac:d9:16:2b:6e:63:77:ed:f0:36:64:c3:
93:73:7c:3d:3e:d0:a1:ec:08:d7:90:ca:15:14:d1:
29:73:da:56:9d:1f:32:a7:2d:a3:93:73:91:16:ba:
e0:46:82:39:a8:92:76:6f:e1:ea:aa:1d:d8:7a:1b:
2e:5f:14:2d:6c:c2:f5:f7:27:9b:d8:13:61:3e:ef:
ae:e8:5f:60:5d:48:03:a7:55:cf:cc:be:1c:38:39:
a9:44:78:31:d6:38:82:26:c8:40:5a:11:f7:71:42:
c2:46:8f:9c:08:29:11:24:5d:4d:07:ba:ce:c5:fc:
ca:1e:dc:0a:ac:3b:00:18:e9:1a:75:89:fe:90:39:
b4:17:a1:5c:d5:a0:48:5c:62:cb:2d:3d:cc:49:ff:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:8B:06:F8:FE:96:02:A0:BC:C1:07:09:91:59:9A:69:7D:BF:95
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/CKuLBvj-lgKgvMEHCZFZmml9v5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.220.0/22
185.61.248.0/22
Signature Algorithm: sha256WithRSAEncryption
42:2c:c8:da:0c:93:4d:8b:fb:47:99:ee:81:6a:fb:f6:54:a3:
8d:35:8f:ad:d9:ee:03:cb:bf:ef:55:ce:68:fd:28:cc:01:69:
2f:b5:ae:38:7e:35:8b:db:4f:45:b1:87:cb:59:0e:8c:dc:5b:
51:67:3a:2d:3c:4e:7a:0e:c8:fc:4e:29:80:5c:ed:37:81:f8:
75:87:95:8b:96:6c:59:2f:15:33:f8:a3:b8:d0:18:27:a6:6e:
b4:41:66:4f:e7:2b:ee:74:55:fb:e3:d2:b5:f9:6f:80:32:82:
69:37:38:85:7e:4d:81:83:be:5f:b9:cc:c4:9d:b3:0f:3f:49:
6b:70:6c:bb:f7:34:37:2d:1d:5c:8c:16:b1:73:6f:4b:e5:56:
13:c0:b5:90:05:b7:d6:6b:76:47:20:aa:1d:41:fa:0c:14:8c:
79:6b:6e:22:1d:f3:b7:3d:4b:74:81:0f:5b:60:7f:b4:b4:25:
68:0b:19:9b:0e:c3:90:4e:50:3d:24:ac:d4:97:3e:68:18:e9:
81:af:75:fb:89:46:41:02:c4:11:1e:4d:14:46:e7:ca:d9:29:
f9:b5:54:de:db:9f:7b:38:63:31:6a:79:3e:8e:4e:c4:c0:de:
40:94:d2:c6:7e:50:ae:32:71:9e:90:fa:b5:e7:84:58:eb:e3:
3e:46:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:42 2024 by rpki-client on console-fra.rpki-client.org