Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/0c_OduHywKuGmi23sb7vVwJUXN0.roa
File: 0c_OduHywKuGmi23sb7vVwJUXN0.roa (raw, json)
Hash identifier: A/M59MCivCkLAItJk02YQ+Jwh990WPy3d/PJGrAwqPU=
Subject key identifier: D1:CF:CE:76:E1:F2:C0:AB:86:9A:2D:B7:B1:BE:EF:57:02:54:5C:DD
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 018CC6B92F13030817E57FC332236F81C6D8
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/0c_OduHywKuGmi23sb7vVwJUXN0.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12933
IP address blocks: 193.41.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2f:13:03:08:17:e5:7f:c3:32:23:6f:81:c6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1cfce76e1f2c0ab869a2db7b1beef5702545cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:cb:67:0c:e0:76:64:0d:4a:fb:74:02:b8:
f8:20:22:aa:59:ff:59:ef:97:92:84:10:59:05:4a:
8e:e3:e2:32:71:aa:33:21:1d:ba:37:1a:82:37:40:
2d:4b:11:82:4a:c9:f9:da:3b:fb:08:41:4e:57:0a:
25:de:68:a2:9a:ac:a9:65:8f:54:d9:a7:e2:d0:1d:
92:b2:87:75:44:da:bb:f3:c4:27:42:e4:6b:ad:36:
6b:39:66:ed:dd:73:10:1a:88:3a:d4:7d:fa:7c:b9:
fd:1b:d9:25:ac:ce:58:7f:c9:1c:6b:94:ea:f5:2f:
f6:41:f9:ce:62:9d:6b:be:2d:a5:3a:96:44:bc:be:
47:e7:e4:be:8a:cf:77:0f:c1:df:72:3a:de:b0:87:
77:9e:a6:81:67:11:ae:19:21:59:6d:81:7a:98:17:
76:e1:c8:f8:35:e5:21:35:d9:01:ff:1f:aa:0f:5f:
32:62:e8:2d:7d:a3:1d:7c:4f:60:2e:bc:a8:91:5d:
68:86:10:f1:dc:f3:56:b1:9b:2f:d3:cd:08:7d:f6:
f1:b3:d4:9d:0c:08:bb:81:e4:97:13:79:a5:52:ac:
15:5b:ee:e3:14:a1:aa:37:8c:5e:0b:70:9f:42:0b:
78:63:c8:80:51:97:b3:77:af:cb:07:b2:fb:3d:87:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:CE:76:E1:F2:C0:AB:86:9A:2D:B7:B1:BE:EF:57:02:54:5C:DD
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/0c_OduHywKuGmi23sb7vVwJUXN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.80.0/24
Signature Algorithm: sha256WithRSAEncryption
65:58:c6:7e:f6:f1:79:7c:b6:dd:23:5c:ce:7a:59:88:71:42:
d7:3d:67:15:97:a2:c6:68:29:16:d8:c4:cf:c7:f1:a6:d2:28:
ff:56:34:65:7d:f8:8c:c1:a7:e4:7d:2c:a0:9a:28:c4:58:a3:
2f:39:4b:ed:17:33:73:44:17:1f:7a:7c:fc:8e:bf:0f:84:fd:
b3:96:ab:56:a6:f0:fa:6b:75:cb:c4:8a:a1:65:3a:75:d5:a7:
af:1c:01:74:6e:8a:82:d9:5b:b2:39:7f:f7:f2:d6:a6:3a:73:
2d:cf:43:e3:24:fa:56:55:89:75:73:52:37:2b:90:aa:82:28:
db:ea:d1:e8:7b:5e:9f:4a:19:75:a5:7f:59:8f:05:9b:2e:b1:
4f:c9:8b:d7:e4:d8:02:6e:62:af:2c:ef:bc:3f:93:2a:80:49:
c9:3b:30:76:48:02:d1:ba:91:85:63:6e:2e:28:98:da:ec:e4:
15:52:5f:1e:29:c0:4e:da:48:fd:23:49:79:a2:71:9c:e5:cc:
3c:d2:46:cd:3c:cc:d1:a3:10:72:58:ca:ef:16:b5:1c:0e:23:
0a:8d:08:29:3a:b9:73:6d:72:29:3a:6b:5b:8e:43:40:14:20:
63:e5:ad:05:d6:51:a1:98:c6:fb:a5:3f:e4:49:30:e9:25:a5:
63:80:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:56 2024 by rpki-client on console-ams.rpki-client.org