Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CP_j1gjVVyrFvV-KVXbQHixHS4A.roa
File: CP_j1gjVVyrFvV-KVXbQHixHS4A.roa (raw, json)
Hash identifier: 9UoEvNqRC5z8YSyQdqd330QwTnqLKz9+51KbeFrGoBg=
Subject key identifier: 08:FF:E3:D6:08:D5:57:2A:C5:BD:5F:8A:55:76:D0:1E:2C:47:4B:80
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DEFBEC499AA3A0C4070DA08F7FE43
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CP_j1gjVVyrFvV-KVXbQHixHS4A.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200823
IP address blocks: 62.89.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ef:be:c4:99:aa:3a:0c:40:70:da:08:f7:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08ffe3d608d5572ac5bd5f8a5576d01e2c474b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:a3:41:27:98:45:46:d0:a1:61:7f:e7:b8:
ba:b4:98:5d:bf:9a:67:ba:30:c2:da:b4:b3:ba:17:
ac:49:37:51:55:e2:58:b4:7c:19:27:c0:92:66:6d:
ca:29:72:dd:f2:16:b1:40:4f:20:7b:68:6f:19:69:
9f:06:42:a7:dd:2d:35:95:96:5e:ee:1f:cf:be:f9:
00:b1:c2:f1:d2:b4:04:83:ff:96:c5:50:f7:f7:83:
69:de:1b:36:56:d9:d5:10:36:3b:02:2c:f2:fb:f4:
36:e8:39:5b:00:5b:35:dc:a6:a1:41:7f:3b:e9:18:
eb:3e:c9:0a:41:09:2e:e0:c8:fd:1f:9e:e6:a1:83:
51:42:20:e6:4c:f2:51:31:53:bb:1a:61:3e:d9:28:
bd:e5:49:f9:38:7c:83:08:ba:98:a3:5d:c1:14:26:
87:b0:3a:b4:63:bb:6f:ae:85:0e:60:f2:09:b1:ab:
df:c9:af:a8:d6:db:69:47:b1:6f:c2:48:05:8b:47:
6d:30:78:62:87:ee:37:b6:b1:a4:e5:36:4d:92:fc:
0a:dc:b2:4b:f9:41:eb:25:55:e5:e5:7d:fe:8e:fb:
08:e3:bd:89:81:d4:a5:f2:f3:bb:1a:f1:7c:92:75:
2e:c1:37:8f:d4:37:2d:66:a6:d8:bd:e6:2f:ed:cb:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FF:E3:D6:08:D5:57:2A:C5:BD:5F:8A:55:76:D0:1E:2C:47:4B:80
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CP_j1gjVVyrFvV-KVXbQHixHS4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cc:96:0d:11:22:3d:85:c1:e8:fb:4e:ae:6e:7a:e4:9f:3a:
24:07:5a:39:98:37:83:9f:97:95:4f:26:e5:7c:a2:0a:aa:af:
71:2b:cc:d6:4b:99:fa:14:7b:89:db:9b:91:0e:1b:b9:96:42:
33:04:aa:69:64:24:5e:7a:96:98:15:d8:32:58:37:e0:19:62:
3b:66:81:47:48:56:0e:a2:12:a5:db:4a:94:6d:93:da:89:fe:
58:74:c6:bd:0f:6b:c8:a9:9f:a8:39:83:7d:e8:a3:b8:f3:7d:
65:a0:dd:8b:58:91:55:5a:a6:1b:5d:5d:e8:7f:e9:e9:0f:59:
ca:14:98:ed:ec:b1:74:17:59:93:53:bd:bd:0c:46:b1:57:af:
50:4c:c3:7c:41:e4:e7:65:b3:85:f8:12:44:6d:9e:11:be:9a:
29:16:ea:6e:b5:f6:20:76:ae:7a:46:68:27:19:91:46:fd:67:
bf:da:e6:49:ea:67:f1:b6:fb:b2:cf:6c:73:9b:e7:aa:12:53:
8b:e6:3b:d5:a6:92:04:81:29:b2:b3:37:86:b7:4d:b8:34:6b:
ca:e3:0e:91:76:d1:37:a1:ca:25:44:94:91:72:7a:a3:6c:0e:
c8:44:13:07:2d:aa:5e:53:cb:a2:63:41:97:8c:2e:a5:c5:c3:
bb:71:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:38:05 2024 by rpki-client on console-fra.rpki-client.org