Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CEQlB6tNediUiBBOeJ8JAiaJOAI.roa
File: CEQlB6tNediUiBBOeJ8JAiaJOAI.roa (raw, json)
Hash identifier: yIHgox/P8ohhmE2XOy2vXy+dPQFK3WAwVa25Mgo1XA8=
Subject key identifier: 08:44:25:07:AB:4D:79:D8:94:88:10:4E:78:9F:09:02:26:89:38:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01913B9326FF713685E64062040C4274A1C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CEQlB6tNediUiBBOeJ8JAiaJOAI.roa
Signing time: Sat 10 Aug 2024 09:16:25 +0000
ROA not before: Sat 10 Aug 2024 09:16:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204755
IP address blocks: 93.123.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:3b:93:26:ff:71:36:85:e6:40:62:04:0c:42:74:a1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 10 09:16:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08442507ab4d79d89488104e789f090226893802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:a1:20:26:78:7e:1d:2e:22:92:1a:fb:4a:
fe:1d:ef:dd:37:0a:ed:f7:45:b7:c5:7d:d2:9e:88:
c3:95:e2:3d:f5:d5:b6:f8:37:d3:45:ef:98:42:cf:
6d:6a:33:df:a9:ed:b7:ce:9d:31:c9:74:18:32:3e:
ad:da:ee:c8:ef:12:f9:2d:18:c1:36:a3:df:ec:fb:
23:f5:82:e8:d4:e4:a8:56:3c:57:8c:c1:4c:f0:22:
44:b7:03:29:f8:32:93:4b:fe:5f:19:63:49:85:40:
9c:89:8a:63:42:37:34:bb:c7:ff:a0:db:24:5d:d3:
09:50:03:71:37:3c:f7:70:04:99:dc:53:fa:bc:91:
85:e1:b3:8b:27:a4:73:16:87:f5:be:f3:f0:78:bd:
88:d2:fb:1c:fb:e5:53:a0:a3:66:36:2c:e9:8b:2e:
dd:83:78:c6:4c:4f:06:d5:64:76:a3:3d:94:35:84:
da:d9:43:4a:7e:ec:f3:37:3b:d8:99:3e:82:77:89:
da:cc:21:76:8b:08:44:43:7f:4a:e2:10:fc:c9:7e:
2f:72:c8:92:dc:15:57:75:31:6c:41:c8:90:fd:38:
47:98:10:8d:5c:cc:b8:4f:9a:24:f8:7e:71:24:03:
7a:a8:fa:57:ea:03:2d:c0:b9:92:4e:a3:04:48:97:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:44:25:07:AB:4D:79:D8:94:88:10:4E:78:9F:09:02:26:89:38:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CEQlB6tNediUiBBOeJ8JAiaJOAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8a:d7:4a:a3:b0:1e:a6:2b:55:ce:d2:b7:ba:04:50:82:a2:
8b:dd:8a:b0:06:db:d9:fe:18:b0:32:79:b0:9d:f4:9e:da:c1:
5d:9d:5c:d5:25:43:87:6c:7f:5c:c0:d5:37:86:73:73:34:f3:
35:a4:0f:3d:98:fc:62:92:52:32:55:ad:d9:c0:1a:ba:12:62:
58:db:81:64:7d:ae:58:8e:c7:15:e2:a5:40:6f:87:fb:94:dc:
24:cc:5d:01:d8:05:a4:60:b2:cc:49:1e:f1:3b:1a:9c:41:1b:
a3:e1:57:c3:ae:f1:29:0e:d4:92:d1:a3:8c:fb:04:d8:bf:45:
72:5b:ab:e9:30:95:6b:20:ce:cc:bf:82:86:e8:76:26:e4:1f:
b1:88:9c:30:00:12:1b:1d:20:1f:78:39:8a:42:d6:62:0b:b7:
ee:31:d9:ae:88:43:58:5d:40:e1:6f:3e:4f:7b:21:84:16:ef:
d3:37:f0:8b:65:e1:31:a1:19:3c:10:fb:eb:2e:4c:75:aa:98:
fd:0e:aa:f0:e9:8c:f4:d1:86:41:a2:fa:f9:3b:c6:7f:cb:23:
69:36:62:45:12:81:f8:53:24:23:35:e8:21:e9:ac:22:a0:57:
0a:de:e4:aa:cf:3c:fc:46:e0:71:8a:4f:5c:89:99:bd:e0:d4:
c7:9b:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:15 2024 by rpki-client on console-ams.rpki-client.org