Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/CP_JGey0BwwdkF1heNorjgCZa0o.roa
File: CP_JGey0BwwdkF1heNorjgCZa0o.roa (raw, json)
Hash identifier: Pcar/5gkIUzhLpvDz9JB7QkU9UibHd/GabCQIlLw5kw=
Subject key identifier: 08:FF:C9:19:EC:B4:07:0C:1D:90:5D:61:78:DA:2B:8E:00:99:6B:4A
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019131185890DB28D4F4E1F3CCF631D328A8
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/CP_JGey0BwwdkF1heNorjgCZa0o.roa
Signing time: Thu 08 Aug 2024 08:26:04 +0000
ROA not before: Thu 08 Aug 2024 08:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214503
IP address blocks: 45.84.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 20:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:18:58:90:db:28:d4:f4:e1:f3:cc:f6:31:d3:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Aug 8 08:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08ffc919ecb4070c1d905d6178da2b8e00996b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:64:31:bd:3e:bd:29:fb:9d:04:ac:87:69:
22:fc:66:e4:d5:d8:f5:02:57:bb:a9:18:aa:e9:22:
1d:48:9f:f4:41:64:93:29:27:1a:95:29:23:04:c4:
15:b1:4d:79:96:a8:79:09:70:3b:c7:95:c6:11:27:
95:c9:96:51:2b:63:41:e9:a1:b0:48:89:65:76:df:
bf:c8:de:93:42:ef:ba:8b:76:a6:8a:80:15:01:69:
ab:dc:40:1f:aa:4f:9e:3e:50:39:b3:68:c9:50:aa:
1a:97:b6:8d:a0:37:1d:95:e6:31:6c:eb:b8:34:a7:
c2:9d:79:1f:65:19:f1:21:27:5e:88:e2:72:82:3f:
6a:f6:b8:fc:4a:f3:b5:61:5e:1e:df:50:f4:03:c1:
88:54:37:3f:4d:43:fb:72:08:33:5c:7d:aa:e0:ab:
e6:0d:d9:1d:d6:fc:b5:2d:30:4a:8f:de:58:c7:fa:
6f:79:b3:40:bd:b2:95:dd:e4:61:29:5d:e4:77:7a:
8d:d5:8d:62:42:6e:14:51:31:6c:d5:4e:a7:a1:36:
9c:c6:e9:0c:66:51:da:6c:a2:3d:ef:bd:27:fc:55:
c2:47:5e:e5:f3:de:52:20:d7:6c:1a:5a:f0:d1:c3:
02:61:23:3d:2c:0d:c0:d7:9a:1e:1a:92:e2:14:08:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FF:C9:19:EC:B4:07:0C:1D:90:5D:61:78:DA:2B:8E:00:99:6B:4A
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/CP_JGey0BwwdkF1heNorjgCZa0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.107.0/24
Signature Algorithm: sha256WithRSAEncryption
11:23:d9:0e:23:f6:54:95:4f:75:a6:a2:8b:2a:61:f9:2b:2a:
26:0a:76:92:b6:fe:28:2b:30:f7:39:d0:e2:db:88:09:6f:98:
26:10:56:f5:cd:82:44:2f:d7:cd:3c:66:0b:2f:28:3d:a3:f9:
88:96:5b:73:55:4a:c2:95:5d:ce:c9:60:13:c4:d7:d7:a2:41:
86:f3:69:87:87:c8:28:c7:c8:b7:c2:75:27:05:d5:49:c3:4b:
d1:5c:e8:7e:c7:c8:03:94:f9:93:5d:8d:37:f1:83:8a:0e:69:
35:3e:66:02:b6:b1:40:be:c3:91:96:4b:29:06:f8:49:b0:7c:
e9:1d:36:35:db:12:24:a9:65:ae:4c:8c:e5:03:79:d8:b6:41:
90:c1:85:05:c8:99:54:e6:bc:ef:e5:a6:62:41:8f:97:af:73:
5c:d4:98:f5:0b:bd:c0:58:10:77:80:21:2c:4f:7b:65:a4:44:
89:a8:1c:85:3b:ac:d0:ea:ff:2c:b6:23:d6:2a:3b:14:49:cd:
97:af:10:c1:63:14:38:9e:7e:2d:92:5b:0b:fa:06:c4:89:0d:
86:57:78:ca:35:f3:9e:75:3d:c1:48:66:19:f8:f4:5a:74:d6:
f4:47:a1:30:8d:81:09:36:22:d8:2a:6f:17:15:a1:4c:1b:f4:
aa:52:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:22:45 2024 by rpki-client on console-fra.rpki-client.org