Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_GCj8FcMW00QrtwN0yeH6vs6sn4.roa
File: _GCj8FcMW00QrtwN0yeH6vs6sn4.roa (raw, json)
Hash identifier: VY3MKOTFksB2ZN4kfFXpp1dbJHvCkQeTruonjhkOV90=
Subject key identifier: FC:60:A3:F0:57:0C:5B:4D:10:AE:DC:0D:D3:27:87:EA:FB:3A:B2:7E
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01926B2D601B2B855AEED899688FDFF5E1E6
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_GCj8FcMW00QrtwN0yeH6vs6sn4.roa
Signing time: Tue 08 Oct 2024 08:09:48 +0000
ROA not before: Tue 08 Oct 2024 08:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 93.93.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:2d:60:1b:2b:85:5a:ee:d8:99:68:8f:df:f5:e1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Oct 8 08:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc60a3f0570c5b4d10aedc0dd32787eafb3ab27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:7f:95:73:3e:c7:c9:28:2a:73:13:92:72:
0f:f6:20:f8:01:99:fd:09:36:cf:a6:ec:f2:b4:72:
5a:51:9c:51:4b:dc:fc:ac:cf:bc:eb:2f:29:5c:af:
a1:aa:50:8c:d0:eb:1f:4e:c3:6c:d0:55:7c:71:b0:
bb:ff:d3:f7:36:b9:10:2c:34:ef:79:cc:e7:e5:f1:
ed:21:22:36:c6:e9:d5:eb:18:46:5f:b7:ad:6f:11:
b0:f4:53:e3:22:89:03:7e:72:ff:b9:c5:9e:ce:8c:
46:db:67:8e:12:b7:d9:da:a5:fa:6b:6d:b6:ad:b4:
f6:ef:9c:f9:51:d7:6a:7c:4e:51:39:82:06:d4:dd:
ab:c7:4f:6f:4d:08:96:52:9b:20:45:d4:50:51:0d:
75:e3:68:01:cc:4f:88:9d:39:f9:6a:40:57:43:a9:
aa:fd:74:13:5e:4a:58:e2:f6:14:73:cd:f6:d8:a2:
48:c2:da:af:b5:33:8d:5f:3f:8e:a5:9a:d7:26:40:
1d:f7:5f:ce:67:14:67:a7:26:2e:5c:c8:eb:53:dc:
37:b3:65:69:6e:ae:48:e0:0b:7b:de:a2:8d:14:6f:
c5:8a:6b:43:63:68:9d:c7:01:45:bb:81:4d:d5:c1:
c0:6a:7f:b6:3d:8c:44:6e:55:bf:46:cb:c2:fb:9c:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:A3:F0:57:0C:5B:4D:10:AE:DC:0D:D3:27:87:EA:FB:3A:B2:7E
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_GCj8FcMW00QrtwN0yeH6vs6sn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.96.0/22
Signature Algorithm: sha256WithRSAEncryption
93:f1:98:37:18:b9:dd:57:92:76:29:cf:61:38:b4:e7:86:7e:
f7:f6:3a:c7:44:65:a3:1c:c5:e8:80:a3:b3:33:20:3d:20:92:
ee:88:92:2d:1e:44:e2:1a:66:2f:a5:e7:d0:4a:e8:52:cd:6e:
46:5b:f7:2e:9d:17:c4:d4:45:57:dd:f3:57:24:c2:3d:a9:c1:
ee:2b:b9:40:ff:ac:d9:c5:cf:da:3a:f9:5a:a7:d6:cd:cc:68:
06:7d:29:3e:7e:0b:b6:85:0d:96:9c:5e:ee:63:03:2f:8e:59:
78:ef:78:5d:e1:24:ca:b9:d6:37:94:36:e9:13:c5:b8:3e:f1:
6c:1a:d9:a7:9a:12:a1:43:cd:b5:ea:07:24:03:f4:33:9d:3f:
a1:ed:8a:42:5b:05:ab:48:3e:56:77:b0:99:41:57:5a:6c:2d:
b5:a4:90:f2:6f:b7:04:ad:bd:d7:32:99:0f:a2:81:e8:ac:d8:
67:ca:3d:a5:b5:11:e4:ed:68:aa:5e:9b:db:69:a1:f6:5c:e4:
a2:ba:9f:28:bd:42:76:57:b0:e3:3c:cb:fd:d0:fa:94:4f:19:
03:9a:95:14:f3:80:98:ad:24:40:be:31:4a:7d:94:37:b6:d5:
c2:0b:05:a9:e1:f5:5c:4a:69:e8:a1:5d:a5:a9:92:50:26:d6:
97:1c:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:17:31 2024 by rpki-client on console-ams.rpki-client.org