Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CjTVhDRUdYeYGpfw19vf8IdBcu4.roa
File: CjTVhDRUdYeYGpfw19vf8IdBcu4.roa (raw, json)
Hash identifier: mdffuqPdTXZApk9676GRStovFZhT4PmFv7pCJJymj+I=
Subject key identifier: 0A:34:D5:84:34:54:75:87:98:1A:97:F0:D7:DB:DF:F0:87:41:72:EE
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746F21F258647866C82A9EAE76331AE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CjTVhDRUdYeYGpfw19vf8IdBcu4.roa
Signing time: Thu 02 Jan 2025 13:49:08 +0000
ROA not before: Thu 02 Jan 2025 13:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 194.233.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:f2:1f:25:86:47:86:6c:82:a9:ea:e7:63:31:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a34d58434547587981a97f0d7dbdff0874172ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:90:72:00:cd:2b:7b:26:8d:aa:a0:73:ed:
4d:98:89:94:9f:8b:54:22:fe:8d:be:d8:e0:9d:af:
e1:a8:e2:5c:48:37:4f:c3:e7:f0:22:ce:d3:45:37:
1b:72:4f:08:9b:f2:73:ab:06:b4:0e:10:ed:eb:03:
55:dd:39:e9:66:d4:8c:bd:5b:80:eb:69:f9:ad:71:
4c:89:a1:b9:b9:61:98:da:29:60:0b:c1:02:d2:4b:
39:3e:0a:2d:c0:5f:a0:ef:6c:b4:e1:f5:34:16:fc:
42:ba:34:4c:8a:1f:49:1d:73:91:b8:4d:8b:69:e8:
cf:86:b2:78:72:b1:09:ce:6a:df:7b:f9:8a:78:1a:
a5:8a:a3:e8:19:1c:4f:06:e5:f9:26:6f:2a:70:cc:
11:6a:6b:34:ba:44:e3:59:98:29:06:ce:81:27:ee:
46:58:9c:1f:ba:7d:bd:65:56:c2:ac:4a:ae:10:b6:
6f:e1:b7:a1:df:6f:09:88:4b:37:99:71:d7:73:fd:
03:14:c3:78:a7:5d:2b:8f:af:22:0f:73:db:c3:de:
70:bf:5d:1c:73:08:14:4a:3c:e0:6f:ad:a2:69:0b:
4c:4b:e4:17:ae:cd:db:18:b7:10:a7:a7:ee:8e:31:
aa:fa:ef:ef:81:62:f1:84:61:17:77:e0:2b:87:5f:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:D5:84:34:54:75:87:98:1A:97:F0:D7:DB:DF:F0:87:41:72:EE
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/CjTVhDRUdYeYGpfw19vf8IdBcu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:d3:76:ec:6d:3d:9e:0b:81:7c:50:ab:75:ac:ae:6c:f8:57:
2e:75:a7:e5:85:70:aa:9d:2a:12:12:f4:b2:d7:66:b0:39:b7:
26:b8:41:18:fe:e1:6b:ce:e2:18:d3:da:6b:6a:95:d3:cc:82:
2e:82:ff:97:41:bb:ec:84:3c:8c:a2:39:7c:e0:4a:05:9c:29:
18:df:70:be:a2:5d:51:65:54:bb:f4:62:df:88:8b:a8:10:89:
83:80:c4:59:f4:44:85:18:96:8c:fb:55:72:47:fd:2c:57:a9:
ff:40:35:31:b5:1d:41:2c:f9:b7:91:fb:18:16:01:d9:72:66:
16:37:46:ac:59:17:a4:5b:e4:33:e1:77:1c:02:50:cc:b0:67:
59:e2:9a:42:3b:3c:25:cf:a8:e9:db:e3:39:fd:57:64:2d:0d:
b6:ad:ce:3c:d9:59:d5:f2:71:22:9d:5c:36:62:ea:08:3e:65:
cd:50:52:b5:67:63:c7:03:4c:23:ae:fe:f6:f1:f6:b7:3c:43:
90:5c:91:2f:59:78:9d:b7:6d:67:32:44:f1:a5:13:7a:12:26:
2a:56:93:5b:3d:69:11:66:31:b1:a2:ac:9e:d5:de:e3:2f:7c:
44:0d:2a:b6:1f:f5:bd:56:fb:d7:2b:1a:c8:f1:56:55:9c:5d:
31:06:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:18 2025 by rpki-client