Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/CGDzSLCz0MBYOeF-N5ITaGRDzLI.roa
File: CGDzSLCz0MBYOeF-N5ITaGRDzLI.roa (raw, json)
Hash identifier: O94YwN2vLyCWqRnb6iZODw0i/Wk0ZOE6xpeq4KS1DV8=
Subject key identifier: 08:60:F3:48:B0:B3:D0:C0:58:39:E1:7E:37:92:13:68:64:43:CC:B2
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 018CC2DAB60500A7587BE002BCA5802813A9
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/CGDzSLCz0MBYOeF-N5ITaGRDzLI.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48674
IP address blocks: 91.211.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b6:05:00:a7:58:7b:e0:02:bc:a5:80:28:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0860f348b0b3d0c05839e17e379213686443ccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:ec:bb:7c:61:92:d8:da:3a:56:61:71:de:
e5:dd:2f:31:1b:82:83:af:c8:69:3c:04:96:05:93:
18:c4:54:c3:e5:60:89:d3:12:98:0c:13:ed:95:16:
2c:b1:20:4b:d4:19:bc:e0:94:ef:7e:1a:53:28:14:
ea:f7:ec:d0:2e:92:af:d8:85:ef:e8:f3:6a:96:7d:
b4:ba:16:63:63:3e:ee:7e:42:68:ef:b2:a8:b3:19:
c2:5e:8e:62:0a:c2:53:1b:38:48:93:e2:9b:bd:1e:
a5:0b:66:ba:3f:96:39:e7:17:d9:c0:03:55:61:7a:
b8:b0:02:0e:28:eb:44:6a:5a:ae:67:ec:d2:ad:03:
a8:f5:97:cc:85:0e:1a:0e:22:a5:dd:db:e2:8e:91:
5d:24:9d:83:6c:c7:a7:d3:22:bc:07:4c:44:60:41:
d4:c7:77:51:ee:3f:67:82:9d:d2:14:ab:ee:fd:cd:
5e:9e:a5:4a:75:5f:61:5d:ad:ed:fe:db:ff:24:dc:
ce:82:f7:81:76:0e:3f:23:69:bc:0c:66:14:4d:70:
c2:7f:ac:c6:98:72:a0:e3:f3:fc:08:03:77:eb:c5:
b5:98:72:3e:7e:5d:6d:96:ae:d3:df:c0:ea:e9:0e:
5f:93:0f:81:26:dd:6d:97:61:a4:f2:3f:63:5b:6c:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:F3:48:B0:B3:D0:C0:58:39:E1:7E:37:92:13:68:64:43:CC:B2
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/CGDzSLCz0MBYOeF-N5ITaGRDzLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.176.0/24
Signature Algorithm: sha256WithRSAEncryption
47:09:c5:f2:b7:91:e1:19:11:7a:ae:25:2b:7e:93:30:51:97:
9f:87:8b:ed:73:1a:1b:d4:4d:87:4b:8c:6f:ea:1c:2f:6b:17:
e0:90:60:fe:40:c4:c9:75:f9:c6:4d:d9:c4:3d:d9:e2:9a:ec:
34:57:68:ec:b2:8c:c8:61:23:c1:33:66:54:b7:5c:4c:e6:5b:
85:f2:25:5f:eb:07:20:56:9b:51:dc:59:8f:ea:34:b3:20:aa:
8e:6a:f9:69:e9:c8:11:20:16:10:d0:96:ef:91:9e:ef:bc:80:
69:bb:f3:41:55:cd:93:f5:d3:37:19:eb:cb:5b:70:3c:f3:8b:
fd:09:e7:37:7f:f7:db:09:f9:c2:56:fc:84:5a:f1:ad:52:6e:
a1:03:b6:f3:10:8b:4b:f8:8a:2f:b6:0c:40:50:03:30:bb:8a:
8c:ff:e4:b7:16:6c:8e:43:7a:ce:de:21:a0:d4:88:5d:fc:17:
d2:fb:a9:54:f7:5b:3d:34:21:69:27:fe:6f:ca:04:3a:fa:1a:
bf:c2:3c:84:af:19:b4:de:0d:c3:29:79:eb:0d:55:f4:14:a0:
60:91:89:cf:63:55:1b:f1:f1:58:b4:03:24:e7:8e:e2:bf:c4:
b2:59:a2:b7:72:71:36:05:c3:99:51:6c:0f:1a:dc:9a:41:f2:
0c:c0:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:45:19 2024 by rpki-client on console-fra.rpki-client.org