Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E2JsvsYTLxsj8rnsftS92cLgx74.roa
File: E2JsvsYTLxsj8rnsftS92cLgx74.roa (raw, json)
Hash identifier: J/ma2AXXkLr3sLzuN0z2jBm9SwVMOi7GaSu4tRVGM10=
Subject key identifier: 13:62:6C:BE:C6:13:2F:1B:23:F2:B9:EC:7E:D4:BD:D9:C2:E0:C7:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01934D69F6B159F951F309179E828775530E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E2JsvsYTLxsj8rnsftS92cLgx74.roa
Signing time: Thu 21 Nov 2024 06:30:10 +0000
ROA not before: Thu 21 Nov 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 93.123.30.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:69:f6:b1:59:f9:51:f3:09:17:9e:82:87:75:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 21 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13626cbec6132f1b23f2b9ec7ed4bdd9c2e0c7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:5c:e1:dd:ad:7b:23:35:50:c4:68:2a:9f:
eb:b9:1a:be:62:5d:d1:53:48:19:5b:a8:06:df:d0:
93:7d:ff:2c:63:cf:f1:54:a7:30:53:c3:5a:7d:0c:
32:7a:3c:69:e9:cb:4f:f8:18:7c:25:01:27:6c:8b:
28:c3:c7:57:cd:48:50:ef:ba:3b:fe:68:5a:4c:a9:
6f:07:b3:b5:3d:0d:7b:7b:a2:b6:98:a5:ff:7d:d5:
db:37:ac:25:12:84:af:5e:f6:1e:3f:c7:8d:fc:3a:
95:74:69:86:87:dc:48:72:1d:b1:af:d1:1a:5e:d4:
76:45:30:27:18:ed:76:06:1c:0f:79:b4:75:51:55:
86:ef:78:a1:a5:6f:0e:54:af:f1:58:7a:f1:74:eb:
f1:a8:60:03:16:9b:1a:87:63:85:e0:a0:ed:41:16:
9a:cd:5d:1e:8b:10:2d:ec:df:b9:4d:b7:ff:53:f2:
9b:ee:04:0b:79:98:4d:c6:36:15:58:10:8e:4b:66:
d1:32:bb:87:1b:61:3f:99:97:6e:e6:f8:47:8f:f9:
84:ed:28:da:99:93:cb:74:b3:e1:89:4d:a7:80:ab:
eb:08:74:57:8c:13:fc:a7:0f:6d:59:03:40:fc:be:
a6:22:80:13:45:86:6e:2d:d5:c3:6c:d9:98:47:aa:
ff:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:62:6C:BE:C6:13:2F:1B:23:F2:B9:EC:7E:D4:BD:D9:C2:E0:C7:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E2JsvsYTLxsj8rnsftS92cLgx74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.30.0/24
212.87.220.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9a:d1:45:79:bc:6e:61:9e:8a:23:fd:db:72:c2:b7:27:b6:
f3:ef:fe:83:0c:da:2e:ed:69:3a:14:35:da:b0:75:83:6e:a7:
4e:89:87:65:83:c7:0a:0c:83:18:3f:fb:3d:e7:7f:c0:fd:89:
bb:de:a5:ef:be:42:e2:e8:10:9b:3e:5c:94:8f:66:d5:49:f1:
02:8e:2a:be:92:27:08:d0:d9:fb:ab:3e:89:14:1f:d5:cd:6b:
f7:1c:23:6a:a6:55:62:10:da:87:f1:a1:46:98:8d:8e:ba:73:
d4:5d:f5:45:d9:3c:86:6f:b3:8c:7e:75:cd:60:7c:4a:f3:cb:
77:0c:66:75:02:61:27:1d:7c:55:97:76:57:fa:6f:d9:58:31:
e0:07:82:6c:d9:af:1d:bd:22:92:5d:2f:35:ba:e2:e1:fa:59:
24:db:be:16:c5:f6:72:82:cf:29:f1:92:cf:a9:c4:ba:1f:a4:
1a:8c:c9:dc:63:eb:02:b9:4d:e1:a9:48:41:73:58:10:0a:e9:
e6:8e:2c:de:59:80:3a:a5:70:d7:03:74:77:dd:f2:ea:e0:d7:
56:14:45:e0:6b:24:e5:51:b4:1b:78:73:36:d1:e2:1f:43:18:
75:1b:9f:7b:c4:ce:ed:a3:eb:2d:c7:51:6a:e4:60:0c:98:a3:
89:8f:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:09 2024 by rpki-client on console-fra.rpki-client.org