Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/cdpye_KyS4EmcLPLYSZp6vr21yY.roa
File: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (raw, json)
Hash identifier: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=
Subject key identifier: 71:DA:72:7B:F2:B2:4B:81:26:70:B3:CB:61:26:69:EA:FA:F6:D7:26
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 019425FC004AB38FBCEB85F877FE04942A54
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/cdpye_KyS4EmcLPLYSZp6vr21yY.roa
Signing time: Thu 02 Jan 2025 07:47:39 +0000
ROA not before: Thu 02 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57291
IP address blocks: 193.194.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:00:4a:b3:8f:bc:eb:85:f8:77:fe:04:94:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jan 2 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71da727bf2b24b812670b3cb612669eafaf6d726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:6a:4a:7c:eb:06:74:29:2b:1a:48:5f:9d:
0c:be:de:61:e7:d4:a6:82:80:92:2a:9f:3d:84:46:
51:6c:ab:43:28:6f:2f:4f:5d:94:59:28:df:0e:94:
32:0e:2b:7d:d4:27:da:25:86:9f:94:b8:a5:92:36:
d0:29:14:80:51:f2:bd:59:e1:5d:86:62:01:96:08:
6e:98:8f:93:08:67:65:27:72:9a:e7:a8:fc:21:a4:
ae:bb:0e:44:28:cd:cf:50:a6:fe:b6:e9:f6:df:4c:
53:52:bc:d7:0f:34:7a:4b:38:5d:83:e4:b7:4a:ce:
43:07:f6:a4:3c:bc:f0:43:5f:62:b6:ab:73:ee:8b:
4d:2d:26:3a:6d:d8:21:c0:54:5e:c8:b6:48:b6:e2:
ef:f6:39:46:5d:c6:9d:2e:d9:9e:ec:4c:9a:54:af:
33:00:2c:c3:2d:5b:16:f5:9c:17:33:5b:7b:65:16:
6b:f2:d6:d7:bf:57:93:7c:4e:d6:fb:e7:05:66:29:
a6:b6:93:84:ee:c1:c2:84:65:3f:45:fe:72:51:76:
e4:4d:50:62:5e:d1:34:f3:7e:c9:f4:5c:9d:03:73:
6c:cf:cb:2f:e2:6b:06:cc:41:66:15:8d:dd:a6:f7:
ec:bc:48:57:0e:90:ec:f7:ef:1d:ec:4b:5f:f7:a0:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DA:72:7B:F2:B2:4B:81:26:70:B3:CB:61:26:69:EA:FA:F6:D7:26
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/cdpye_KyS4EmcLPLYSZp6vr21yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.120.0/23
Signature Algorithm: sha256WithRSAEncryption
50:1a:f4:61:86:4d:22:c0:60:a3:53:0e:a3:7e:04:dd:70:da:
7b:1d:e5:a3:db:51:32:58:32:71:76:d9:41:c0:8e:ca:87:23:
32:87:c1:58:db:b6:94:e1:f1:35:b5:56:b3:4d:c7:bf:6b:8d:
6a:57:9b:d2:d4:0c:5c:82:08:f2:dd:2c:74:55:b8:c4:73:53:
a5:7a:0f:79:db:eb:1e:33:68:ce:64:34:e0:f8:94:45:02:68:
7a:23:8c:4a:f7:9b:d5:4d:c8:2f:2a:49:ae:e2:83:c1:0e:47:
19:7e:69:c6:f7:fa:27:9b:1f:47:a8:9e:87:96:7a:01:bd:d6:
7b:dc:c0:cb:f7:ab:7f:06:02:6c:6f:e2:b9:8d:c3:f7:b4:f4:
39:4e:91:63:97:3f:35:f2:6f:ff:bc:be:6d:22:2f:e5:b0:22:
58:d0:13:aa:61:1c:da:88:8c:c4:a7:72:d0:68:24:fe:47:3a:
62:93:5e:9e:ff:39:a8:7d:d5:24:c7:d0:49:62:bc:18:26:4f:
ca:f8:cc:62:dc:6e:34:ad:37:f2:9e:db:53:f0:06:8f:12:d4:
e2:56:0b:37:80:ab:6f:97:0d:f6:90:b4:80:e7:f4:99:18:db:
af:c6:fc:d1:1d:29:98:76:03:69:79:db:72:fb:bd:be:72:42:
05:f4:31:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ABKs4+864X4d/4ElCpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MWRlMjAzMjQwMDhiMmQyN2ViOTc0OTVhY2NlMmViYmNk
Yzg3YzcwHhcNMjUwMTAyMDc0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWRhNzI3YmYyYjI0YjgxMjY3MGIzY2I2MTI2NjllYWZhZjZkNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo95qSnzrBnQpKxpIX50Mvt5h59Sm
goCSKp89hEZRbKtDKG8vT12UWSjfDpQyDit91CfaJYaflLilkjbQKRSAUfK9WeFd
hmIBlghumI+TCGdlJ3Ka56j8IaSuuw5EKM3PUKb+tun230xTUrzXDzR6Szhdg+S3
Ss5DB/akPLzwQ19itqtz7otNLSY6bdghwFReyLZItuLv9jlGXcadLtme7EyaVK8z
ACzDLVsW9ZwXM1t7ZRZr8tbXv1eTfE7W++cFZimmtpOE7sHChGU/Rf5yUXbkTVBi
XtE0837J9FydA3Nsz8sv4msGzEFmFY3dpvfsvEhXDpDs9+8d7Etf96AhnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHacnvyskuBJnCzy2Emaer69tcmMB8GA1UdIwQY
MBaAFIYd4gMkAIstJ+uXSVrM4uu83IfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUt
MWU0NmFlODcyMWVmLzEvY2RweWVfS3lTNEVtY0xQTFlTWnA2dnIyMXlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUtMWU0NmFlODcyMWVm
LzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcJ4MA0G
CSqGSIb3DQEBCwUAA4IBAQBQGvRhhk0iwGCjUw6jfgTdcNp7HeWj21EyWDJxdtlB
wI7KhyMyh8FY27aU4fE1tVazTce/a41qV5vS1Axcggjy3Sx0VbjEc1Oleg952+se
M2jOZDTg+JRFAmh6I4xK95vVTcgvKkmu4oPBDkcZfmnG9/onmx9HqJ6HlnoBvdZ7
3MDL96t/BgJsb+K5jcP3tPQ5TpFjlz818m//vL5tIi/lsCJY0BOqYRzaiIzEp3LQ
aCT+Rzpik16e/zmofdUkx9BJYrwYJk/K+Mxi3G40rTfynttT8AaPEtTiVgs3gKtv
lw32kLSA5/SZGNuvxvzRHSmYdgNpedty+72+ckIF9DGQ
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:50:00 2025 by rpki-client