Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/cug377GHKyRnXerIRZmull_8wvo.roa
File: cug377GHKyRnXerIRZmull_8wvo.roa (raw, json)
Hash identifier: IxNsay94By86aM/+bn9cOHol3sZyJ69Yy/jhl0itHu4=
Subject key identifier: 72:E8:37:EF:B1:87:2B:24:67:5D:EA:C8:45:99:AE:96:5F:FC:C2:FA
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 018CC3B6D762CEB78E56D3E436A34DF4AA7C
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/cug377GHKyRnXerIRZmull_8wvo.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208305
IP address blocks: 217.111.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d7:62:ce:b7:8e:56:d3:e4:36:a3:4d:f4:aa:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72e837efb1872b24675deac84599ae965ffcc2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:42:fa:93:e5:c7:2d:6e:7b:07:21:15:ee:
16:7d:01:57:6a:f0:cd:a6:0a:c8:4c:10:55:b3:91:
0a:07:47:75:d3:cc:51:c8:04:3e:aa:2d:9c:93:e4:
d9:1c:2e:44:8e:ee:d0:f8:72:b4:00:7a:d1:28:0e:
fe:76:25:fb:2b:d5:1f:36:4a:c4:b7:20:cf:ab:2f:
a7:8e:dd:0d:9b:fc:9d:46:4b:c1:5b:2d:9d:76:67:
a8:e6:97:32:f3:55:19:09:85:a2:fa:19:33:b1:55:
15:1c:fe:d5:42:8f:5b:c5:e0:25:0d:e9:98:1a:2a:
34:ba:77:4c:5c:b5:6e:92:3b:a2:80:8e:fc:36:64:
64:84:fd:f4:3c:8d:29:16:83:89:a3:0d:0e:d2:f2:
b3:b3:27:a0:8c:71:16:f8:19:81:84:ec:7d:4c:0f:
97:4c:c7:97:2a:a3:02:08:ec:fd:b8:ff:c6:e0:88:
1d:b5:90:d1:24:a0:79:45:c8:02:2f:01:61:f6:69:
7d:78:a9:0e:63:dc:2c:c2:5b:a2:2d:dc:5d:6d:2d:
ae:67:f4:a2:0d:cb:64:75:65:93:90:a0:c2:4f:86:
6b:8a:bb:25:cf:84:26:a6:3d:bc:be:58:7e:e9:09:
89:41:cf:7c:3b:7d:4e:71:8b:af:15:9b:31:bc:8e:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E8:37:EF:B1:87:2B:24:67:5D:EA:C8:45:99:AE:96:5F:FC:C2:FA
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/cug377GHKyRnXerIRZmull_8wvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.111.139.0/24
Signature Algorithm: sha256WithRSAEncryption
21:28:ac:84:25:11:3b:14:d3:bc:34:51:7e:39:08:a0:e2:5a:
b0:08:8f:98:db:5b:8d:b9:82:49:0f:b2:28:d9:15:ac:11:d0:
9f:24:06:fd:d6:a6:24:dd:75:4f:6c:61:b0:99:2b:e7:ac:78:
3e:2f:92:04:bd:0a:e5:2f:d2:19:e6:3e:39:f0:e4:93:4a:6e:
6b:32:be:a1:0d:99:5c:15:16:af:7b:32:2e:19:7a:19:cc:53:
2d:2f:c1:89:51:4f:6a:47:f7:8e:3b:29:e1:84:8c:a9:d1:7b:
04:9d:60:5f:c1:03:ac:83:c9:f1:6d:8a:79:00:fc:ab:4d:4a:
63:ba:f4:75:50:b1:b4:4d:ac:e5:2b:6c:c3:9f:c1:81:7f:22:
3a:f1:67:72:3b:d8:cf:71:ff:21:3b:72:71:a2:8e:d6:e2:15:
79:4e:c6:cf:0a:26:b0:18:d9:26:4f:a9:82:b2:83:7b:02:96:
93:19:3d:8b:8d:9f:68:67:8c:ca:98:d3:34:df:d3:ca:04:7f:
a2:1b:d3:b7:68:55:5b:78:47:52:d6:d2:33:c3:2a:0f:53:34:
5b:23:1c:97:0a:bf:cc:55:02:43:95:41:f1:6d:ed:a2:5e:e9:
96:5f:ba:dc:da:0f:34:27:13:93:7e:46:5e:7b:52:5f:20:33:
04:b8:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 22:43:35 2024 by rpki-client on console-fra.rpki-client.org