Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/CuXSRM8u5_PUCs_-oHYAZePrEy4.roa
File: CuXSRM8u5_PUCs_-oHYAZePrEy4.roa (raw, json)
Hash identifier: C+Z9N0kJb4t0a9d1nt5jC7DCU5NgS48akaYtNfeUUNA=
Subject key identifier: 0A:E5:D2:44:CF:2E:E7:F3:D4:0A:CF:FE:A0:76:00:65:E3:EB:13:2E
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 018CC64B6DFCBC6CB1D9C50D6334BF58A1CF
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/CuXSRM8u5_PUCs_-oHYAZePrEy4.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24939
IP address blocks: 193.111.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6d:fc:bc:6c:b1:d9:c5:0d:63:34:bf:58:a1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ae5d244cf2ee7f3d40acffea0760065e3eb132e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:62:dc:ba:c9:2b:35:a1:72:11:35:eb:ad:
93:ab:24:8a:ae:95:b7:bc:21:6d:ae:56:a4:d0:e0:
35:ae:5e:5a:25:f8:bf:12:8d:14:d4:45:0e:79:1c:
d3:38:a4:cf:4a:46:dc:2c:72:4e:7d:dc:16:7d:ad:
4b:d2:b5:9c:21:eb:ab:8b:bb:3d:8d:e5:b3:aa:ad:
84:c8:94:dc:b4:7a:e4:a7:73:f7:dd:4b:d4:42:de:
b7:1d:52:2c:c9:bc:bf:55:da:6d:33:cd:50:72:c0:
ff:cb:17:bd:06:c4:6a:16:48:4c:87:eb:60:b6:c3:
01:62:09:63:94:7f:e9:e1:67:4b:81:f9:39:be:57:
e1:57:17:a2:72:50:c9:72:31:ca:a6:a8:32:53:d1:
83:5b:03:55:df:14:f1:b2:bf:32:81:77:06:b2:70:
55:e9:74:df:f8:88:95:bb:ca:53:c8:5a:36:00:30:
40:57:37:11:4b:88:ae:b9:6f:54:41:f8:22:1f:e1:
05:dc:61:7c:90:b2:0e:36:b7:de:58:ae:8d:66:6c:
4b:04:e3:d9:53:10:b1:06:24:db:49:98:61:12:71:
25:17:64:30:b7:21:41:4a:76:73:0c:75:b3:79:0b:
f0:87:98:69:73:fe:e0:ca:1b:d8:e0:90:5b:26:ea:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:D2:44:CF:2E:E7:F3:D4:0A:CF:FE:A0:76:00:65:E3:EB:13:2E
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/CuXSRM8u5_PUCs_-oHYAZePrEy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:3f:b7:89:b8:a8:f6:00:4f:c7:4e:90:a0:27:45:9d:36:c5:
e3:b4:68:ea:ab:59:28:d3:13:cd:34:d7:1c:de:8d:cb:26:76:
59:e0:5b:e2:9a:25:c7:68:51:60:c3:30:db:cf:dd:ab:25:62:
36:dd:d5:6d:d1:09:bc:ce:85:c4:62:fa:86:d4:02:4f:00:80:
26:07:a1:40:55:d5:c3:c6:f7:35:36:96:01:81:d0:04:d1:52:
f3:20:63:e1:31:2a:a5:1b:13:9d:65:42:ca:c6:9d:ba:44:91:
70:fb:36:25:f0:3a:11:78:39:bd:46:92:a2:a2:3c:b9:70:bd:
35:0d:31:07:db:64:c6:e5:91:06:3a:20:20:83:38:9b:47:fd:
98:47:80:4c:ef:68:f1:a3:ae:12:ce:6b:99:8b:e3:44:06:9a:
e5:02:c4:af:27:ca:14:a3:de:d9:f2:e6:c0:fe:3e:38:92:d0:
72:a5:d1:37:52:a0:bb:35:a8:fa:8a:cb:7a:ca:02:e2:b7:10:
e1:ea:f7:b6:d0:1b:8f:ce:53:54:b8:1c:da:69:bb:8f:60:a9:
f1:37:f9:22:84:f0:b8:c1:72:76:e7:18:b6:e3:8f:0d:2c:e0:
dc:37:06:a4:22:f8:3a:27:21:ca:5e:9d:21:04:6e:a3:0e:9e:
18:77:5c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:57 2024 by rpki-client on console-ams.rpki-client.org