Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/_DV1a9kqVRBIzlmW--SN4hK6NS4.roa
File: _DV1a9kqVRBIzlmW--SN4hK6NS4.roa (raw, json)
Hash identifier: QCZD/3mJTApflOPAqd50mWdCMkzWSIiXmlhAMe16gzE=
Subject key identifier: FC:35:75:6B:D9:2A:55:10:48:CE:59:96:FB:E4:8D:E2:12:BA:35:2E
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 018CC94DE1FE74DCECA9311F2106484C4BDC
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/_DV1a9kqVRBIzlmW--SN4hK6NS4.roa
Signing time: Tue 02 Jan 2024 08:32:53 +0000
ROA not before: Tue 02 Jan 2024 08:32:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20847
IP address blocks: 193.105.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e1:fe:74:dc:ec:a9:31:1f:21:06:48:4c:4b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jan 2 08:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc35756bd92a551048ce5996fbe48de212ba352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:14:ed:b7:a1:2d:af:e0:96:1e:43:dc:85:
03:fa:c7:5a:98:90:ea:01:8b:52:a7:84:2e:a5:0e:
b8:0f:25:42:b0:5c:b6:c5:a7:cb:22:5c:a4:f5:70:
fa:6a:7e:64:39:e6:45:95:f5:eb:4a:b0:f4:46:c6:
97:d7:de:0a:c5:70:ed:4d:4b:b3:c0:c3:be:c8:92:
c4:f5:75:ab:be:76:ef:f2:1c:51:25:86:cf:0f:5f:
89:41:f7:b3:01:93:2c:d6:e8:7e:da:7d:08:0a:2d:
2b:a8:ac:a6:c9:28:bb:1e:31:3f:c5:01:78:3e:a3:
b8:37:bb:d0:00:68:af:70:e1:fe:01:9a:62:01:c9:
e7:cc:1c:53:14:db:c4:7b:c8:ab:dd:03:30:ae:a0:
42:6f:96:cf:64:ac:db:ab:c9:48:1d:4b:fc:24:52:
fe:3c:d9:7c:55:ee:8d:d1:51:44:e6:7c:4d:f8:b9:
06:c9:03:62:78:10:d9:90:c1:d7:22:b3:c0:77:5a:
7b:e7:ef:6e:41:ff:04:b2:72:9d:4e:da:cb:5e:dc:
16:56:4c:bc:98:bf:35:24:b4:f4:7d:07:06:ed:40:
4b:1c:51:8a:d6:7c:39:37:9f:70:7b:79:4b:5a:b2:
fd:fb:67:0f:e0:8b:82:da:19:a1:07:c6:3f:d2:f7:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:75:6B:D9:2A:55:10:48:CE:59:96:FB:E4:8D:E2:12:BA:35:2E
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/_DV1a9kqVRBIzlmW--SN4hK6NS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.12.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a9:00:14:b0:c0:fc:f8:81:18:cc:f9:42:03:94:ee:8c:ba:
c7:75:c8:5f:af:1a:44:1b:c0:09:5b:85:f0:c0:57:93:79:3c:
87:44:00:36:f2:82:80:3b:70:6e:b6:23:9a:d2:72:04:e2:83:
65:16:c8:e0:65:91:e8:31:34:9e:12:6a:67:fb:62:21:85:34:
cb:9c:e6:79:80:75:d2:6a:38:52:87:24:f5:41:c0:d8:09:62:
cb:8c:a8:19:94:7c:7c:a1:08:9e:60:85:9b:e9:73:9a:e8:36:
84:e9:aa:b6:d4:9b:0b:51:97:6d:04:a5:0d:ad:9d:56:80:8f:
ee:9b:b3:6c:4d:84:af:a5:50:ad:27:f0:0e:40:a1:bd:94:02:
99:46:81:23:ef:91:35:80:97:1b:1f:8c:79:e6:3d:e5:d4:f1:
36:bb:10:33:ec:f3:f0:3d:03:62:63:53:74:4f:c9:b5:c2:0d:
67:b1:e0:88:86:12:89:d3:6e:78:2c:2b:d7:a0:27:af:c2:20:
a3:32:39:58:a6:bb:99:a6:35:10:d2:86:e8:a2:09:a0:ab:61:
3c:12:e1:3e:2d:ab:11:b3:45:63:d1:1d:c2:84:af:bf:e0:13:
3e:19:a8:77:5f:d3:90:fa:e1:3b:f7:0e:38:85:c2:5e:77:82:
ea:0d:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 08:41:44 2024 by rpki-client on console-ams.rpki-client.org