Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/CFaPyssx-3BQCRM3p87kGndrAlg.roa
File: CFaPyssx-3BQCRM3p87kGndrAlg.roa (raw, json)
Hash identifier: Ggh4L+9MO7nf4Q6fhkazr5aa0LWXiNU0p7amJ3Ks4SE=
Subject key identifier: 08:56:8F:CA:CB:31:FB:70:50:09:13:37:A7:CE:E4:1A:77:6B:02:58
Certificate issuer: /CN=c29cc9d3c496f8a92204d40a665edf538190d539
Certificate serial: 01921521F17563498EEA8C6E504E75FF79E4
Authority key identifier: C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/CFaPyssx-3BQCRM3p87kGndrAlg.roa
Signing time: Sat 21 Sep 2024 15:09:58 +0000
ROA not before: Sat 21 Sep 2024 15:09:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41652
IP address blocks: 193.93.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:15:21:f1:75:63:49:8e:ea:8c:6e:50:4e:75:ff:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29cc9d3c496f8a92204d40a665edf538190d539
Validity
Not Before: Sep 21 15:09:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08568fcacb31fb7050091337a7cee41a776b0258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:3d:17:87:0d:74:03:f5:8d:e9:2a:c6:39:
06:0e:99:0d:da:fa:52:89:4a:9d:b4:b3:8b:ca:55:
83:42:42:c0:64:5f:0f:ae:fc:7f:e1:4e:d8:e1:69:
b5:ae:8f:c5:2c:8f:51:30:d1:57:22:e8:84:66:6d:
81:2c:b7:41:3f:06:0e:df:a6:6c:1b:a7:88:eb:f7:
a3:b8:42:34:7a:51:27:40:dc:7e:13:55:9e:25:67:
ff:39:ed:ba:28:ae:30:1e:7d:77:68:f3:c3:9d:86:
39:41:b9:73:05:2b:3f:6e:56:02:d5:2f:05:13:59:
14:38:b7:fd:b9:a7:ef:f4:52:83:5a:04:4d:83:58:
10:62:15:53:66:6c:a8:d3:1e:17:5a:fc:63:eb:29:
5a:fd:73:ae:15:9b:86:3f:56:d0:a4:32:98:73:08:
ca:bc:5f:bd:92:50:dc:30:53:63:a2:88:1c:c9:74:
64:01:51:b7:10:6f:30:c6:37:34:96:6e:40:81:5d:
45:33:dd:d3:dc:17:69:48:0e:83:ac:59:05:96:59:
2d:f1:36:f7:33:d5:22:71:7f:e6:7d:de:f3:bd:03:
29:d3:46:ab:80:f2:81:b6:dc:a6:81:30:f0:00:11:
55:ed:08:7d:59:ee:33:6f:1b:3e:2e:db:7b:46:8c:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:8F:CA:CB:31:FB:70:50:09:13:37:A7:CE:E4:1A:77:6B:02:58
X509v3 Authority Key Identifier:
keyid:C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/CFaPyssx-3BQCRM3p87kGndrAlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d3:7f:58:3a:c7:5f:d8:82:94:a3:9d:4e:fb:9c:36:0c:e1:
58:64:48:9a:9e:98:0f:ec:7c:43:ae:d5:38:06:34:e8:d0:2a:
07:88:df:56:17:39:06:c4:67:7d:6a:c4:5a:36:39:d6:db:24:
18:f2:6e:2e:f4:59:eb:ea:ed:5e:74:0e:7b:dc:17:b2:eb:7a:
ad:53:f7:f2:40:79:ea:e5:7e:39:01:f5:d3:1d:b1:29:36:f8:
3b:ec:13:5a:f0:84:5d:e2:3e:11:90:01:04:1e:04:01:e5:a6:
92:d5:e1:fc:ce:3b:69:55:68:7f:83:3d:9b:9f:67:bc:c4:0f:
2d:91:81:c9:02:dc:34:07:9c:bd:06:be:cf:56:af:df:6e:09:
da:9b:66:b5:98:54:00:18:47:bc:5a:1a:ec:c3:cb:04:76:8b:
36:59:15:b8:ab:19:ef:00:85:00:30:2c:5e:74:70:e4:ed:b7:
b2:e3:33:d6:d7:31:ad:a3:08:7b:71:44:b4:b4:5b:b1:e7:ec:
7f:c6:96:0f:78:9e:7f:63:a8:85:3a:a1:25:fb:af:c2:cc:a9:
33:20:23:07:c1:e5:a1:07:d1:2f:08:3b:de:79:2f:a4:66:29:
59:8b:7c:ed:ff:38:38:3c:ce:f2:9d:c6:28:1b:31:42:58:d7:
76:5c:9d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:50:22 2024 by rpki-client on console-ams.rpki-client.org