Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/cp9Atvqkx7xiWEnWWwk44w5SgGA.roa
File: cp9Atvqkx7xiWEnWWwk44w5SgGA.roa (raw, json)
Hash identifier: FeNBg5AnQ70SRhXvme20PUSRFnIVk6LpXy50OW/fh3w=
Subject key identifier: 72:9F:40:B6:FA:A4:C7:BC:62:58:49:D6:5B:09:38:E3:0E:52:80:60
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 019254314867FA66F048B7CE7F10F2FBC4C2
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/cp9Atvqkx7xiWEnWWwk44w5SgGA.roa
Signing time: Thu 03 Oct 2024 21:02:48 +0000
ROA not before: Thu 03 Oct 2024 21:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 193.104.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:31:48:67:fa:66:f0:48:b7:ce:7f:10:f2:fb:c4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Oct 3 21:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=729f40b6faa4c7bc625849d65b0938e30e528060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:31:35:80:90:f2:fe:7e:12:3f:73:98:30:
b6:bc:31:fc:ee:02:2f:14:1d:24:27:4c:91:69:aa:
15:8e:94:4c:99:e5:d3:7c:77:7a:e6:94:aa:b1:ff:
a1:89:4c:71:7a:33:6b:0c:ee:0f:42:ed:d6:ac:1a:
c6:eb:81:c9:cb:4f:d5:14:ac:3a:8f:eb:26:4c:7e:
5d:52:d2:13:11:7d:11:e6:1f:c7:13:2f:a4:89:a7:
51:a2:f9:83:d3:e8:5f:79:31:28:6a:49:a9:88:bc:
b6:a8:b9:75:62:9d:8d:e8:f6:8d:2d:af:04:53:8c:
fd:14:90:32:da:cb:12:c2:9c:d9:58:94:12:1e:7b:
54:58:db:cf:a1:a6:9c:c7:5c:b3:98:ab:e3:9b:71:
95:ea:3e:df:09:4d:99:39:ef:50:ad:2b:93:23:62:
52:ca:90:15:0e:59:2f:89:60:35:0d:cf:d0:7e:ee:
50:97:f4:8e:71:90:ef:58:d8:a7:bd:7a:9b:17:5f:
70:1e:3d:2e:fc:57:67:4a:d6:af:db:ad:77:84:c2:
7b:43:b2:5e:97:d5:72:f2:50:74:3e:0c:6e:e7:11:
fb:ef:0e:ca:24:11:e8:b7:9e:28:99:89:fc:25:6a:
b9:c3:fa:91:10:16:bf:ea:ff:9f:5e:66:22:68:93:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:40:B6:FA:A4:C7:BC:62:58:49:D6:5B:09:38:E3:0E:52:80:60
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/cp9Atvqkx7xiWEnWWwk44w5SgGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.33.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fc:b5:42:46:f4:34:a8:07:2a:61:b5:da:1f:ec:c9:64:1d:
7b:30:6e:88:39:21:c5:df:81:4b:ff:4d:71:01:ef:df:de:21:
15:91:3c:31:14:21:82:d5:d7:7d:e6:d7:51:3f:39:bc:9e:74:
7f:d8:5b:c6:19:11:3f:72:45:67:47:e3:29:7e:1d:65:9c:c3:
26:22:de:f5:9a:c5:45:d4:b5:bc:07:26:52:0a:19:db:30:35:
3a:ef:3c:7a:37:65:74:fa:59:84:3d:04:c3:c3:bc:20:d7:b7:
a9:cb:4d:5c:4f:4a:53:74:40:af:e4:5a:a8:55:75:44:52:04:
be:e3:57:d6:0f:7c:45:6b:2e:7c:33:13:c1:bb:7d:c7:89:cf:
d6:98:4c:8f:20:64:a5:3a:81:c9:93:ab:ad:82:a8:de:54:4a:
d9:bf:f0:99:b3:27:9e:13:4c:8f:65:fa:73:20:ee:8b:34:9e:
d0:aa:d7:9a:f3:7f:b2:f0:97:52:e6:0d:cd:59:b5:8c:ab:9c:
e7:57:74:ac:5e:3e:29:8d:de:64:ab:67:e9:f0:58:23:b0:69:
f1:60:e2:8b:9b:7c:35:30:47:06:bf:23:a4:b8:cc:c9:3d:54:
b1:58:27:cb:61:bc:62:c0:e1:b9:ab:d5:fb:90:4e:1a:04:fc:
33:4a:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:35:40 2024 by rpki-client on console-fra.rpki-client.org