Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/9wyPoXbYBRydhs9Ff4ii_7M7cSo.roa
File: 9wyPoXbYBRydhs9Ff4ii_7M7cSo.roa (raw, json)
Hash identifier: zHcpd4rQY3sfRjfO0FxaAycXVICh6hMBl/gup5ZmJlM=
Subject key identifier: F7:0C:8F:A1:76:D8:05:1C:9D:86:CF:45:7F:88:A2:FF:B3:3B:71:2A
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018CC4249E8FCF70B6C1C6FE8A3FABB41CF3
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/9wyPoXbYBRydhs9Ff4ii_7M7cSo.roa
Signing time: Mon 01 Jan 2024 08:29:43 +0000
ROA not before: Mon 01 Jan 2024 08:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 93.127.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9e:8f:cf:70:b6:c1:c6:fe:8a:3f:ab:b4:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 08:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f70c8fa176d8051c9d86cf457f88a2ffb33b712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:22:0d:dd:3e:52:93:85:95:10:bb:c2:ab:
3a:cc:d0:df:1e:99:3f:6d:14:c8:cc:97:ee:54:ae:
4f:56:a6:53:e7:86:97:c5:cd:ab:3a:73:b6:54:7e:
dd:23:91:71:8c:2a:6d:37:b7:26:20:c2:0a:56:98:
c4:51:0f:c0:73:64:61:24:e2:f7:6f:79:03:40:16:
cb:57:d8:4a:0b:0f:51:07:87:20:6c:d7:17:5a:15:
18:fa:6e:fd:b3:dd:44:89:1d:81:5d:bc:f3:b8:c3:
fc:b4:ac:63:f8:ab:e2:d8:8c:dc:18:2b:3d:0d:f4:
38:b0:fa:67:54:6c:73:1e:f1:c3:8b:09:c4:b2:3d:
15:b6:57:d5:3a:d9:97:86:5d:64:c0:8a:70:4c:31:
cc:22:39:d2:d7:15:a8:f6:ba:5f:82:99:80:d1:eb:
ae:64:55:ca:22:e3:79:d3:f4:64:4e:da:39:12:72:
1c:06:3c:6f:be:3c:59:10:d5:9f:90:a0:d5:3a:ef:
7c:c9:f0:82:cb:d2:ff:5c:59:b8:0f:f8:ee:67:eb:
b6:c5:74:e7:2a:ba:fd:ff:f8:73:8a:2b:27:db:a7:
6b:e2:77:65:2f:87:71:ba:aa:ab:85:12:26:e8:3c:
4f:14:a9:8b:de:8f:cb:2f:ab:ac:72:fa:bc:0f:a1:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:8F:A1:76:D8:05:1C:9D:86:CF:45:7F:88:A2:FF:B3:3B:71:2A
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/9wyPoXbYBRydhs9Ff4ii_7M7cSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.170.0/23
Signature Algorithm: sha256WithRSAEncryption
17:ca:76:7f:db:25:09:2e:5a:c1:39:e2:6c:f9:32:22:83:06:
67:8a:df:d0:6b:2f:90:ee:68:e6:ca:5c:6d:fb:76:f5:32:7f:
3a:1a:d1:b6:b4:bf:5a:42:a4:ac:62:7c:ea:ad:32:20:66:34:
3d:73:1b:a3:84:56:64:57:07:d1:6c:c6:0a:b3:02:ec:27:15:
20:0f:0d:6b:62:bb:e2:4c:51:70:64:6d:ce:eb:9b:f4:7d:66:
c4:b8:57:f2:84:c1:bb:77:14:93:ab:4a:93:50:58:80:e4:8f:
2d:00:47:e1:8f:e2:1e:d0:be:2e:25:67:59:bc:71:22:08:91:
3c:51:5f:a0:c9:65:8d:69:bb:d4:48:d8:c7:e2:55:10:2b:68:
7c:ce:21:28:21:65:57:66:f1:8c:0c:75:70:6e:1c:b3:10:15:
05:0d:d9:49:9b:ad:40:b4:5f:fb:37:ce:24:cd:bd:db:f5:02:
a8:61:43:6f:9e:a3:a5:a9:4d:76:4e:60:77:1e:82:89:7f:3c:
a9:18:95:c4:a8:62:59:de:d0:ec:2c:91:16:20:6a:07:ac:49:
42:92:23:18:89:06:2b:7e:4b:56:e5:65:fe:76:0f:49:a0:da:
0b:f0:0f:3f:dd:58:01:8e:e5:7d:e8:1f:dc:0a:d1:52:79:75:
2d:87:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:49:25 2024 by rpki-client on console-fra.rpki-client.org