Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa
File: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (raw, json)
Hash identifier: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=
Subject key identifier: 09:E0:86:C9:18:09:4E:F3:1C:2E:F7:3A:6E:A5:7F:42:9E:9E:18:25
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 0194221FAAEE9E5ED7726B2A6E63C2B7F014
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212033
IP address blocks: 193.3.45.0/24 maxlen: 32
2a10:5dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:aa:ee:9e:5e:d7:72:6b:2a:6e:63:c2:b7:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09e086c918094ef31c2ef73a6ea57f429e9e1825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:e9:9d:c5:08:8b:3b:52:42:84:97:6e:7b:
08:44:40:3e:53:6c:29:2f:06:f1:13:53:a1:60:ea:
90:0d:63:38:d4:3d:90:86:1e:e6:9e:fe:28:e6:cd:
8e:8c:23:e9:2b:65:d7:0c:5e:f7:d9:a4:d9:a1:c6:
b5:56:8c:db:93:5d:28:9d:7e:61:0b:a1:18:47:c9:
53:88:39:4c:0a:6c:68:08:82:83:48:72:22:30:90:
82:80:f5:03:b0:72:a8:0c:22:e5:04:0b:42:fa:08:
00:74:be:33:9b:6f:bd:09:f4:23:aa:d0:01:31:a1:
3f:41:b6:50:71:f7:ec:4a:1b:81:66:d6:61:b3:5a:
c7:7f:7b:16:ba:42:76:17:ed:51:40:fa:66:21:ce:
19:a5:78:83:5b:ab:0b:22:0d:65:40:cf:3d:03:9b:
6d:5c:dc:a4:09:b8:b7:51:88:55:ed:f8:4b:bd:b8:
ad:d2:13:f1:4c:40:6c:0e:84:c8:37:96:a9:c5:ba:
3b:d6:ef:ff:22:3d:72:4d:f6:78:94:76:18:3c:1b:
00:c7:8f:58:c7:f2:c8:4e:53:3c:e9:e1:ce:b1:6a:
ab:b8:3e:ba:7d:d9:05:1c:ec:06:1c:c6:28:0c:0d:
ca:1c:2b:11:22:63:fa:d8:96:f3:73:24:70:2b:10:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:86:C9:18:09:4E:F3:1C:2E:F7:3A:6E:A5:7F:42:9E:9E:18:25
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.45.0/24
IPv6:
2a10:5dc0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:87:d0:b4:83:5e:30:6e:29:9a:80:3a:fa:87:52:82:12:97:
3a:20:6f:19:ce:78:33:7c:92:cc:b3:4e:11:9f:08:97:af:51:
92:8c:0b:1c:a9:a4:8b:8b:19:96:f5:07:5a:28:ba:a3:80:d4:
a8:b1:22:ed:8b:e4:e9:eb:40:29:8d:2a:63:5b:73:5d:3f:09:
9a:e9:b6:5d:82:a5:e3:0b:95:4b:6d:22:dd:51:7b:a1:16:c2:
d7:70:6b:ff:ed:36:0a:18:5c:c2:39:f2:04:fc:11:67:be:51:
29:52:e4:26:63:a1:15:ba:86:90:4a:0d:c4:cd:d0:bd:03:3f:
78:74:2c:41:70:c2:f7:d9:2c:96:5e:d7:88:ba:82:88:19:43:
dd:c6:f8:a1:25:ee:f9:87:3d:a7:5a:f8:a6:17:01:1e:11:8c:
56:18:1a:0f:61:88:91:12:47:5a:18:5e:26:5a:34:95:e6:c8:
55:c3:b1:7e:30:55:e4:eb:85:0a:6c:3b:83:d4:6a:4a:c9:b7:
5a:fb:27:84:89:1d:16:45:1d:db:8b:96:e0:16:fc:a3:2d:52:
66:88:ef:c3:10:8a:3e:1c:b6:83:a2:53:91:3c:e7:ee:5d:6b:
79:af:ef:1d:6d:da:63:c0:2e:7b:9f:37:b2:a7:2b:e1:60:bd:
24:26:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:01 2025 by rpki-client