Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/CUxoxoHUFgCcWdXLBL1XTZtblHU.roa
File: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (raw, json)
Hash identifier: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=
Subject key identifier: 09:4C:68:C6:81:D4:16:00:9C:59:D5:CB:04:BD:57:4D:9B:5B:94:75
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019420D5A29FC7548E71BC2C20B27CD90D1E
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/CUxoxoHUFgCcWdXLBL1XTZtblHU.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 153.109.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a2:9f:c7:54:8e:71:bc:2c:20:b2:7c:d9:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=094c68c681d416009c59d5cb04bd574d9b5b9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:0e:c7:b4:ff:9b:b0:be:55:a5:05:20:6b:
62:4d:2e:16:dd:af:24:8d:8e:77:82:39:73:cd:dc:
1d:4d:9f:80:5e:11:aa:23:80:60:67:06:c0:a4:72:
e9:49:ad:ee:50:1b:83:bd:d6:16:29:aa:88:ff:b8:
6a:5c:22:28:3c:84:63:58:5f:bc:53:0a:74:20:65:
07:79:42:2e:2b:bc:ff:91:21:dc:28:39:12:e0:40:
cc:9d:eb:38:86:6f:45:af:3c:55:b4:a3:df:89:4d:
71:c3:75:03:c8:21:35:c3:4d:67:2c:b8:80:c1:4e:
34:1a:48:28:f2:85:f8:66:b6:50:8f:d8:d8:4a:ca:
db:ba:96:4a:cf:d7:1a:35:e1:2a:28:96:fa:f7:9a:
29:35:b3:ce:d4:72:b5:f2:85:1a:c5:60:a2:97:a0:
d9:58:ee:07:54:67:ed:10:c8:4f:fd:eb:bc:65:ab:
f0:48:78:bc:7c:2e:9d:c1:a1:3c:04:1c:68:48:ed:
d9:a5:30:90:a4:e2:2a:2e:2f:ba:0b:95:30:f8:fd:
dc:71:19:0a:45:13:a4:05:2b:bf:da:65:1f:e9:b5:
11:a1:63:51:cb:6f:28:dc:42:77:db:9a:b3:f5:0d:
a8:25:be:cf:96:b7:9e:75:d5:ef:77:9e:6e:b4:6d:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:68:C6:81:D4:16:00:9C:59:D5:CB:04:BD:57:4D:9B:5B:94:75
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/CUxoxoHUFgCcWdXLBL1XTZtblHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:0d:e8:63:5c:cb:7f:b2:63:66:6a:07:cc:25:6e:d3:0f:9c:
12:0d:06:43:ee:2b:6b:15:5f:2a:ad:7f:50:9e:a0:c0:a1:c9:
2c:4b:8f:9b:8d:8a:89:82:37:5e:1a:b6:88:fc:81:9a:09:0a:
1d:83:af:5f:d2:00:67:57:a3:9d:10:49:dd:13:33:f9:07:fb:
ed:65:73:6a:5a:0a:ed:23:db:19:86:33:d6:d6:e8:60:ae:64:
04:26:d4:07:00:db:3d:68:45:84:d6:47:96:9f:a7:1d:fe:f4:
b4:e0:37:cb:82:c7:a5:78:d9:40:f7:ed:1d:b4:a1:93:7d:5e:
27:10:cb:4b:96:c5:13:b1:00:c8:15:9f:b9:d5:63:99:b9:d9:
9b:c5:4a:61:0f:f0:17:da:78:53:3b:58:0b:ac:8e:c9:f0:e9:
e6:de:3d:62:27:a5:91:6a:25:91:ec:62:4b:1a:d8:18:9c:3d:
7a:1e:4d:d4:87:5d:19:36:04:34:4e:45:9f:68:f7:4e:e2:d6:
8e:b9:f5:bc:f5:b4:ad:69:04:17:88:85:fc:1d:2a:f9:7e:dd:
ea:fc:0a:87:86:e5:64:ed:cf:60:d7:d1:06:a5:04:8c:f2:6b:
95:97:6c:2a:06:4e:a8:85:9c:bd:c0:9b:1c:1f:bd:14:bd:d6:
27:e5:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:21:49 2025 by rpki-client