Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CSCVpnD9UZcOY9dh51GQDiQtUDY.roa
File: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (raw, json)
Hash identifier: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=
Subject key identifier: 09:20:95:A6:70:FD:51:97:0E:63:D7:61:E7:51:90:0E:24:2D:50:36
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0195277040120FEF14BF51E50FE4376698A5
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CSCVpnD9UZcOY9dh51GQDiQtUDY.roa
Signing time: Fri 21 Feb 2025 07:37:02 +0000
ROA not before: Fri 21 Feb 2025 07:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 94.103.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:70:40:12:0f:ef:14:bf:51:e5:0f:e4:37:66:98:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 21 07:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092095a670fd51970e63d761e751900e242d5036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:74:87:8b:88:3e:af:58:28:a3:67:a4:49:
cc:24:51:3a:b1:35:5d:5b:d2:c3:c1:53:a3:61:56:
10:1d:4c:bd:11:41:be:3d:13:9c:80:7a:c3:17:a1:
de:cf:2d:9b:32:0c:64:13:f3:de:c6:6e:7d:f4:c5:
d9:34:41:e5:ae:27:08:b7:5a:14:34:9f:83:a3:99:
19:a2:84:c1:2c:ca:24:5d:f0:13:c5:89:2f:6d:66:
45:97:93:d9:5b:0e:82:6e:d2:04:21:71:d0:49:f9:
04:47:75:29:46:54:93:86:a8:04:c9:c6:4e:6a:54:
02:d7:cf:17:a4:88:1b:f6:eb:80:bb:0c:87:de:59:
77:e0:3d:d9:3d:26:72:5d:7f:a3:97:df:69:dc:06:
ff:77:27:27:84:4d:24:54:33:93:50:88:61:45:2f:
df:4b:8c:82:e9:a2:e1:c7:46:53:a1:10:c7:55:67:
ba:93:ce:71:4d:bd:c1:36:8e:0f:ce:72:e2:7b:57:
ce:e9:f2:71:c8:10:b6:23:d9:2f:5a:3b:9f:99:11:
95:5f:70:82:e8:67:59:87:d1:1f:23:45:e1:9a:8c:
2a:7f:49:f2:b6:a5:93:43:84:b6:02:dc:16:e6:00:
57:a2:7e:e9:e2:59:b9:09:94:5e:c7:73:26:b8:ec:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:95:A6:70:FD:51:97:0E:63:D7:61:E7:51:90:0E:24:2D:50:36
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CSCVpnD9UZcOY9dh51GQDiQtUDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.60.0/22
Signature Algorithm: sha256WithRSAEncryption
17:5b:37:d1:35:ee:10:1b:88:79:d5:cf:b4:1a:f9:27:31:24:
b2:ec:13:56:e4:67:9d:9d:d3:c9:02:0b:43:ca:f0:e9:53:97:
cc:87:7b:6b:e8:b7:43:44:be:c0:9a:08:96:11:31:13:84:48:
ef:2d:61:16:58:ae:4a:ac:dd:35:b3:fd:f3:b9:18:fd:7a:0d:
19:73:8a:c4:38:45:49:1f:ff:b6:db:98:80:23:b2:cd:26:ad:
ff:0c:69:92:64:ce:44:02:5a:54:d1:42:df:24:a0:3d:f5:85:
4f:b1:b3:9b:93:97:cb:cc:55:5d:ac:04:3e:28:0b:2c:82:73:
8c:aa:33:f9:b5:28:b0:4e:bc:aa:20:85:ad:36:f9:af:32:16:
97:91:1c:6d:0b:05:eb:d7:94:38:cb:07:e9:6a:6c:ad:09:2d:
86:ee:e7:fb:64:ea:d6:f3:e3:a5:c5:25:9f:20:ee:99:c2:2c:
ee:f3:7c:73:33:4f:2c:62:a6:9c:01:66:a5:77:c7:f2:71:bc:
88:9e:a3:bb:db:36:ac:d8:fe:fd:d6:49:97:51:d0:3b:3a:df:
32:62:02:a9:28:70:37:f0:77:44:07:b4:4f:8c:40:49:a9:e0:
9c:d2:67:c4:fc:b1:aa:f2:37:2e:0c:47:b8:c8:0e:55:58:99:
69:de:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:21 2025 by rpki-client