Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9CDGMeXmyQp4WMOm4pZ1sFA-cog.roa
File: 9CDGMeXmyQp4WMOm4pZ1sFA-cog.roa (raw, json)
Hash identifier: W/hUl9kjMjIH+FrfIstS/ee13yZYblh0P+5pVNa76ow=
Subject key identifier: F4:20:C6:31:E5:E6:C9:0A:78:58:C3:A6:E2:96:75:B0:50:3E:72:88
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79530067176D8E4EBA837520714E3D0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9CDGMeXmyQp4WMOm4pZ1sFA-cog.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202973
IP address blocks: 193.233.134.0/24 maxlen: 24
193.233.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:30:06:71:76:d8:e4:eb:a8:37:52:07:14:e3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f420c631e5e6c90a7858c3a6e29675b0503e7288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:69:ad:7f:ad:3b:c1:16:06:24:7d:24:ff:
fa:93:85:d0:4b:a6:aa:0e:16:df:76:76:15:ea:78:
9c:96:dc:a6:22:8b:f8:fb:c5:8b:66:bf:80:c2:45:
7f:d2:9e:71:04:70:a2:6a:98:d7:a4:00:36:5a:5d:
a6:d6:a5:57:21:91:a0:66:a4:04:94:63:0b:e1:cc:
05:fc:da:c7:cd:4e:a3:36:4f:57:55:94:b8:3a:33:
36:e9:65:8b:a6:c1:f4:fe:14:60:77:95:1e:28:2c:
15:63:be:a7:ef:04:a2:da:85:50:66:4d:c2:8c:db:
f8:91:50:68:96:77:2e:55:14:d4:5f:d5:8a:98:45:
d8:5b:0e:26:4a:ff:a6:08:59:21:ac:3d:59:6b:25:
05:af:8f:69:32:d8:12:ae:e9:33:6f:4e:f9:1b:46:
53:b8:d0:e9:f2:a0:31:c7:f6:64:f7:72:b8:69:d2:
b6:91:50:82:c8:aa:db:e5:1c:e5:49:5d:ab:7f:20:
03:d5:99:52:fa:a3:fe:b6:bd:54:e0:d4:82:2f:30:
2d:5b:e5:0f:7b:7e:9b:7e:2f:f2:30:04:f5:61:75:
1c:2c:15:a8:ad:88:4a:df:09:6d:6e:d8:12:41:92:
e8:13:44:72:d8:a3:7d:1a:51:de:da:a8:37:2d:c6:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:20:C6:31:E5:E6:C9:0A:78:58:C3:A6:E2:96:75:B0:50:3E:72:88
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/9CDGMeXmyQp4WMOm4pZ1sFA-cog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
193.233.254.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cc:6c:6d:b0:23:f1:78:f7:91:39:e7:aa:7f:7f:66:de:3d:
fd:97:b9:42:57:0d:06:80:7d:ce:76:0f:ad:07:fc:61:11:06:
14:ec:36:3c:ad:45:c2:a7:44:5c:c6:53:2d:28:97:08:ab:22:
f1:dd:10:c1:89:0d:b4:7b:f0:c0:fd:5b:d8:5c:fa:16:dc:88:
88:08:11:07:be:26:9c:21:c3:26:7a:0f:1f:6f:a3:40:a5:9d:
6e:5d:d2:be:96:4c:aa:eb:12:27:6b:10:b8:35:34:c8:7a:84:
16:86:91:30:53:cf:24:2f:59:8c:49:91:13:81:b8:75:4c:ea:
66:c8:26:42:12:93:b2:fd:f2:2c:7d:17:02:b4:b7:18:70:87:
07:ac:ce:78:6c:df:7b:14:89:b3:5e:b3:c8:e5:b7:8b:3a:7c:
76:07:94:45:57:03:0a:94:e4:57:6b:5a:1f:b8:c5:12:0a:60:
1f:37:69:bf:fc:a7:9e:33:58:2d:7b:b8:d9:e0:0e:05:3b:2d:
49:46:0c:9c:fd:ad:35:b5:89:45:f2:a8:83:f5:df:3c:58:bf:
ec:83:13:7f:cd:3e:15:db:72:36:37:ff:15:55:96:41:77:7f:
87:ba:79:ce:b2:cf:57:b7:58:9f:5b:0f:ba:52:93:94:d3:a2:
b3:d3:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:16:02 2024 by rpki-client on console-ams.rpki-client.org