Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CCMp0_RXXalXQPqS1N1SRE9C-_I.roa
File: CCMp0_RXXalXQPqS1N1SRE9C-_I.roa (raw, json)
Hash identifier: eRObP2yLZNJpNSwfhp11Q3T5tRu5PWNDRLt9ujX5AeA=
Subject key identifier: 08:23:29:D3:F4:57:5D:A9:57:40:FA:92:D4:DD:52:44:4F:42:FB:F2
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAC44A1746FAC19656CE47781584C7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CCMp0_RXXalXQPqS1N1SRE9C-_I.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50977
IP address blocks: 109.107.96.0/19 maxlen: 24
185.96.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c4:4a:17:46:fa:c1:96:56:ce:47:78:15:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=082329d3f4575da95740fa92d4dd52444f42fbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:da:e6:12:f3:54:06:5c:20:3b:67:6a:5c:
de:65:89:ff:5a:89:2b:e1:79:1f:52:34:5a:61:1b:
54:77:b0:a6:41:3b:2d:7b:64:26:2b:de:61:47:8e:
16:19:2d:e0:3f:21:ad:07:20:ec:a1:eb:f4:77:36:
97:d5:54:64:e3:ce:da:d4:4e:22:c5:3d:d0:b7:d9:
06:8a:19:23:15:2f:79:9b:85:7c:1a:35:c7:ac:00:
16:b2:3c:74:f5:42:62:12:68:87:bd:bd:3b:07:7f:
5d:81:61:1e:17:f8:97:c1:e3:a8:95:9c:14:2a:f4:
38:99:38:fc:84:22:1b:6e:96:5c:1f:78:94:a6:a3:
d6:07:03:2d:b8:33:02:c3:01:30:0b:a4:a1:97:2c:
e0:10:cd:30:57:fd:fc:ae:6c:b8:a1:5f:e1:6b:2d:
07:40:bc:01:ac:96:07:44:f9:44:26:f6:85:8e:24:
07:ea:8b:61:58:cd:c3:87:d7:84:c3:ff:15:53:b3:
ae:c8:1c:34:8c:14:81:8e:35:ce:2a:53:e9:a1:91:
07:4d:0f:02:d0:7c:9b:37:4c:31:45:d0:cb:8c:70:
73:fc:2f:be:09:30:a7:d2:12:f5:e2:51:e0:21:52:
df:46:4e:a1:57:8d:1e:80:71:7c:51:c9:39:fe:0d:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:29:D3:F4:57:5D:A9:57:40:FA:92:D4:DD:52:44:4F:42:FB:F2
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CCMp0_RXXalXQPqS1N1SRE9C-_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.96.0/19
185.96.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:95:ea:1b:0f:b4:84:05:b7:ab:68:88:47:6a:74:35:5b:02:
4a:08:84:50:ee:8c:a9:7e:9d:49:56:0d:6b:55:34:d3:ef:af:
e9:31:be:d3:21:c4:62:5c:4b:9b:74:a2:98:06:58:62:60:e0:
51:c2:31:ea:03:c1:ce:34:fd:7a:82:2a:7f:78:b7:0c:36:53:
33:ea:c1:87:51:f4:be:77:50:18:dc:49:f1:9f:37:5e:57:be:
96:93:10:93:95:65:ad:4f:5d:61:70:22:f2:70:34:91:54:70:
00:1f:62:93:e1:95:81:48:a7:e5:79:6c:21:ab:9f:cf:13:c1:
8b:b4:6f:4c:5f:97:01:85:bf:1c:44:5d:aa:4c:e3:d5:5b:2d:
f0:a3:5a:bd:b0:4e:11:bc:67:5b:6e:80:5f:4a:d0:0b:4b:6c:
3d:d4:a5:dc:80:1f:8a:ce:fb:c0:62:a6:85:8f:d2:fd:19:04:
ab:09:27:9a:58:b3:f1:46:c7:83:4a:7f:0d:d8:d4:2e:5f:cb:
0a:da:b1:8c:f7:7c:4e:7d:31:57:70:ac:cb:ef:72:5c:4d:68:
33:ba:18:cf:c0:86:f1:6b:65:db:9a:6e:39:8d:c5:3c:ad:81:
1f:cc:cd:b4:df:31:c1:db:fa:4c:a7:1b:df:55:0b:b5:96:78:
d7:c8:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:22:54 2024 by rpki-client on console-ams.rpki-client.org