Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/CX0GYCSug4Pralm5hmRpGYanFQE.roa
File: CX0GYCSug4Pralm5hmRpGYanFQE.roa (raw, json)
Hash identifier: HVLIbPuFzQV19BRWDMPXqnic/lL8pdcGi1gSK355Syk=
Subject key identifier: 09:7D:06:60:24:AE:83:83:EB:6A:59:B9:86:64:69:19:86:A7:15:01
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 018CC8DD02569AFDD1E6FF57E088F704C6DC
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/CX0GYCSug4Pralm5hmRpGYanFQE.roa
Signing time: Tue 02 Jan 2024 06:29:36 +0000
ROA not before: Tue 02 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.206.120.0/24 maxlen: 24
2a10:a200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:02:56:9a:fd:d1:e6:ff:57:e0:88:f7:04:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Jan 2 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=097d066024ae8383eb6a59b98664691986a71501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:62:4a:be:8f:2c:1c:94:b5:f1:45:d7:91:
9c:1a:88:c6:1b:78:6a:94:32:4a:43:8e:e1:89:bf:
b5:ce:6b:e2:27:f4:40:80:06:b8:b5:b1:27:cf:7d:
0c:0a:a3:10:8e:b1:88:b3:3e:8d:2e:84:a4:69:57:
6c:02:c2:a4:bc:ca:16:cc:0f:b5:d5:db:dc:21:7d:
54:91:69:7f:87:f3:af:90:46:c2:51:cf:cb:2e:1e:
a2:d9:f5:db:76:c8:70:e9:c3:03:cc:a9:ba:4d:c2:
c6:cf:8f:fa:0c:c1:af:20:d4:70:e0:30:b3:1c:c0:
9d:6c:cd:fb:49:76:b1:a4:4d:a7:2f:2e:1e:20:df:
47:c2:b1:5c:8c:04:38:a1:66:d2:6d:0a:7b:78:e7:
5d:0c:1b:38:57:97:25:de:63:d1:0e:d6:8e:2c:b0:
4d:ed:f2:e6:3e:a4:6e:ac:87:58:a1:28:5b:09:c5:
66:2f:8e:f9:c8:7c:ab:1b:84:62:51:f4:85:18:ac:
dc:d2:a8:44:18:10:08:64:43:2f:12:ca:93:7b:0d:
b6:56:dc:a7:79:8f:37:ee:b8:4d:d8:ae:77:d7:60:
3f:a1:44:41:68:95:68:36:a0:c7:32:5c:41:cc:1c:
f8:7d:e1:38:9d:96:40:9c:92:7a:98:4c:17:93:bd:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7D:06:60:24:AE:83:83:EB:6A:59:B9:86:64:69:19:86:A7:15:01
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/CX0GYCSug4Pralm5hmRpGYanFQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.120.0/24
IPv6:
2a10:a200::/48
Signature Algorithm: sha256WithRSAEncryption
6d:85:54:dc:a9:a0:42:6e:1c:6e:04:70:26:58:85:80:78:28:
cd:6c:72:0b:8a:4d:2c:84:ce:ff:98:eb:9f:f7:5c:ee:9a:7b:
29:23:07:2d:1c:cf:58:a8:cb:7c:16:50:b6:a5:05:6e:e7:32:
9c:41:ed:c7:58:c9:b9:74:fe:43:0a:c0:c1:17:a5:8d:68:a6:
1c:22:54:ee:a1:72:28:81:47:4f:d9:63:b8:db:63:c7:3d:b0:
00:cc:30:bf:72:a5:9c:9a:d9:ca:96:5a:91:c9:35:b6:71:14:
e1:16:0a:86:79:49:6c:34:69:bc:9b:5e:ae:d2:5a:76:9a:6f:
8e:9c:d4:37:a1:07:04:6d:75:0c:f8:a2:50:06:15:2d:84:55:
18:24:9a:6c:92:76:a0:a6:04:c3:89:f9:79:55:5c:7f:d0:de:
1a:bb:8d:93:d8:c7:42:d7:cb:b9:a6:7d:4d:b2:b9:02:25:34:
40:e1:12:95:c6:ac:32:7a:24:12:67:00:6a:e8:56:97:0e:c7:
69:31:dd:9b:88:e7:72:ac:e0:c3:27:3b:55:9d:4f:ff:22:94:
d0:e5:7f:06:33:1f:71:f7:c9:d8:f5:08:3d:4b:7c:01:90:68:
a0:0f:fb:13:f0:d1:9e:fa:e2:45:9a:16:a0:c2:46:e9:b7:9c:
8a:f9:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:50:00 2024 by rpki-client on console-fra.rpki-client.org