Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/CdURPk9WxCdw4UEOXEN4G0VQloE.roa
File: CdURPk9WxCdw4UEOXEN4G0VQloE.roa (raw, json)
Hash identifier: AIpzhbOIk1liBQK3Xi5Lz6aCqsW3x+3rbdvOtXdQS6A=
Subject key identifier: 09:D5:11:3E:4F:56:C4:27:70:E1:41:0E:5C:43:78:1B:45:50:96:81
Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial: 018CC7936F0F4E447E60A8EE3FECDBB16571
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/CdURPk9WxCdw4UEOXEN4G0VQloE.roa
Signing time: Tue 02 Jan 2024 00:29:37 +0000
ROA not before: Tue 02 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28889
IP address blocks: 193.187.254.0/24 maxlen: 24
193.46.102.0/23 maxlen: 23
193.46.101.0/24 maxlen: 24
193.46.100.0/22 maxlen: 22
193.187.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:6f:0f:4e:44:7e:60:a8:ee:3f:ec:db:b1:65:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
Validity
Not Before: Jan 2 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09d5113e4f56c42770e1410e5c43781b45509681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:fe:e8:60:d1:6a:54:82:2c:c4:71:25:42:
1c:f5:c2:b3:af:50:ab:a5:05:07:a2:1f:34:bf:57:
03:7d:b1:14:06:2b:0a:76:d5:97:6f:0a:3f:de:92:
54:4a:32:6a:54:28:c7:9f:37:dd:8c:0a:e9:9b:f2:
bd:58:2d:d7:32:a1:ea:0b:b8:9b:78:d7:62:b0:8a:
15:49:e3:d9:2e:6a:9e:3d:e3:e5:0b:45:d8:6b:b2:
14:77:93:54:14:65:c9:33:ae:b9:16:67:23:a3:d9:
0c:4d:f9:31:80:39:a1:32:1b:d2:03:37:2d:a5:ac:
a1:d8:8a:e9:81:85:44:43:52:04:c5:99:79:0c:75:
e8:1e:5a:ce:25:5f:9a:f7:7c:2a:ae:f1:6e:9b:75:
1b:25:e6:63:7a:84:46:6f:84:14:13:96:fa:bf:11:
38:bb:83:0e:7a:88:7f:90:1b:9a:31:fc:26:17:dc:
d1:20:d7:9d:1a:57:ab:80:46:72:f5:66:ae:6a:42:
1f:62:c7:ea:6f:d3:14:ca:8c:bf:b7:1d:02:11:e3:
fd:6a:99:f5:7d:28:8b:aa:c0:9a:91:2c:92:19:0c:
f3:1b:c5:10:b4:46:e3:42:bc:cd:c7:3e:0f:1d:01:
d4:f8:61:7d:cf:ee:f0:c7:fc:ab:d4:a5:a9:5a:c9:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:11:3E:4F:56:C4:27:70:E1:41:0E:5C:43:78:1B:45:50:96:81
X509v3 Authority Key Identifier:
keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/CdURPk9WxCdw4UEOXEN4G0VQloE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.100.0/22
193.187.252.0-193.187.254.255
Signature Algorithm: sha256WithRSAEncryption
84:e2:7b:c8:e7:18:9d:f1:c6:81:27:f6:84:b8:86:a4:be:81:
2a:e4:a5:d2:10:cb:85:5b:d5:9e:a0:d9:57:b1:b7:ee:4e:7e:
58:f8:c1:6b:b8:88:c0:52:d9:02:80:5c:2a:e4:80:c2:91:a0:
10:fe:cb:37:ae:2a:d7:10:b7:26:38:f0:89:f0:26:29:0a:49:
1e:af:47:c7:36:de:52:72:ed:25:40:a2:3c:b4:2c:9e:19:7a:
68:ae:4d:fd:67:a0:1f:d5:af:9d:70:bc:a1:b9:00:a8:ed:1c:
16:35:2f:c6:dc:ad:f6:38:c8:85:89:57:79:dd:c9:21:73:c8:
0a:55:04:ff:5a:cf:6a:46:30:2d:a4:2d:7b:41:25:12:ac:4a:
09:a5:87:be:0f:6f:02:3b:36:71:fc:fd:b3:a8:d4:e2:78:15:
7c:d4:4e:0f:70:0c:7c:a1:11:fb:29:bf:30:2c:e4:d9:50:65:
e1:f8:62:67:84:8d:bd:40:15:cb:59:11:1e:f1:3d:56:44:dd:
63:66:ce:c4:aa:f4:27:1a:db:cc:42:a2:b9:27:2d:1d:d8:00:
7a:55:41:90:01:85:da:a1:17:e5:9e:fa:fc:5b:d0:20:dc:43:
82:01:2d:02:ad:d4:72:bd:19:a0:2b:83:3a:e2:09:ea:1e:9c:
c6:7c:31:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 11:37:21 2024 by rpki-client on console-fra.rpki-client.org