Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/CSf296uznDJMeOfOeikV0KA67y0.roa
File: CSf296uznDJMeOfOeikV0KA67y0.roa (raw, json)
Hash identifier: +cvFB/wejoiozPKTuOTDXcaCFOrlXBQAHp5apmRVSxI=
Subject key identifier: 09:27:F6:F7:AB:B3:9C:32:4C:78:E7:CE:7A:29:15:D0:A0:3A:EF:2D
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 018CC2DAC89AB503168AE3461A87839125A8
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/CSf296uznDJMeOfOeikV0KA67y0.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208905
IP address blocks: 193.163.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c8:9a:b5:03:16:8a:e3:46:1a:87:83:91:25:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0927f6f7abb39c324c78e7ce7a2915d0a03aef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:c1:cb:ad:d9:9b:8e:11:76:46:81:d7:70:
d7:23:68:54:53:eb:b5:7e:ab:74:36:8c:9a:88:f9:
9a:6c:19:c3:9e:c0:21:10:65:ec:63:1d:c6:99:39:
c0:1c:d9:25:48:fa:99:8d:c0:cc:08:89:33:d9:a7:
68:17:0a:43:86:b5:08:b7:ac:22:eb:8e:81:cd:d7:
5f:ca:31:84:4e:64:f9:af:fe:33:be:e5:01:2e:2e:
ff:48:02:af:91:2e:9f:4a:f2:9d:b1:50:d5:1e:d3:
b4:2b:cc:8b:3f:e0:7a:2f:91:f0:44:bf:08:8f:2a:
a5:11:f9:ca:13:0d:21:53:de:1b:89:ae:c0:62:34:
03:a1:82:9e:3f:63:59:dc:61:eb:72:bf:8d:6a:5b:
47:bf:c8:0d:d0:36:de:35:73:db:18:75:df:92:37:
21:61:8d:eb:8f:78:5d:41:f5:36:79:91:04:79:48:
81:e8:7b:e0:d4:5c:74:05:08:69:89:f5:f8:52:12:
46:55:57:a5:d1:8c:1b:e4:5f:0c:46:4f:66:c4:98:
4f:17:7f:04:bf:3c:04:50:76:0c:d2:cb:f2:f5:56:
56:63:03:7b:52:f3:1b:e7:ea:3f:7f:2d:08:5e:3c:
2c:16:42:da:93:39:53:89:5b:9b:d0:c6:14:3d:14:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:27:F6:F7:AB:B3:9C:32:4C:78:E7:CE:7A:29:15:D0:A0:3A:EF:2D
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/CSf296uznDJMeOfOeikV0KA67y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
97:41:aa:99:0c:65:6c:d0:56:e1:39:ec:1e:07:8d:9d:9e:a8:
2e:69:4c:d4:51:70:a1:a7:88:61:a2:aa:c7:d1:9f:e4:49:e3:
78:55:68:ea:7c:d1:1a:c2:59:4c:bc:32:75:9a:ce:e7:5c:a7:
9c:79:19:66:90:20:35:ef:0a:05:ca:91:3d:66:86:9b:e7:81:
41:1c:ce:c0:39:6f:36:8f:c5:c9:31:ef:2f:38:5b:8e:75:8c:
f0:b6:a1:b7:24:fa:48:c7:52:39:c1:04:8a:f4:4a:1f:7a:c6:
9f:fc:2e:2d:8c:7b:46:24:80:c7:87:1b:43:c5:9f:6d:27:66:
75:7e:8b:67:ff:a6:31:ee:0f:8d:4a:86:24:54:a0:01:c5:a7:
58:13:af:d4:12:bb:c2:78:18:cb:f0:41:fc:cb:98:61:69:62:
2c:72:b4:6f:98:f5:16:29:a1:f3:5d:a5:ba:37:5d:48:b7:d7:
5c:ac:d1:14:ad:65:1c:e1:15:74:49:d1:9d:43:88:6e:f2:58:
9a:b6:5d:8d:c2:22:95:3c:05:d8:f7:26:2b:e8:74:d4:0c:8c:
2a:e8:12:5a:b6:00:c7:74:16:72:08:a8:53:c8:bd:f3:1d:bd:
e9:eb:41:60:bb:51:de:3c:2a:b4:00:5e:65:81:e3:d2:59:c9:
f0:7c:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:10:20 2024 by rpki-client on console-fra.rpki-client.org