Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/93Ktg8yKVqsIjano4A8tsuL-nxc.roa
File: 93Ktg8yKVqsIjano4A8tsuL-nxc.roa (raw, json)
Hash identifier: cvIPHetNQLp86ngwOFfLSVDDlr0Bzh9K1/VkRiIcUGQ=
Subject key identifier: F7:72:AD:83:CC:8A:56:AB:08:8D:A9:E8:E0:0F:2D:B2:E2:FE:9F:17
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018F72AF27705D8E64ECAB2879BE7BD48C8A
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/93Ktg8yKVqsIjano4A8tsuL-nxc.roa
Signing time: Mon 13 May 2024 16:00:32 +0000
ROA not before: Mon 13 May 2024 16:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60542
IP address blocks: 45.139.8.0/23 maxlen: 23
45.139.8.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
91.243.119.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:af:27:70:5d:8e:64:ec:ab:28:79:be:7b:d4:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: May 13 16:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f772ad83cc8a56ab088da9e8e00f2db2e2fe9f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:3e:2a:69:9f:f4:ab:06:95:6f:72:66:56:
b1:8f:96:c7:40:7e:2f:3c:2e:89:71:f6:af:e4:ea:
98:95:55:76:0b:0e:ed:c1:9e:be:29:93:99:ae:94:
02:76:f4:74:ec:08:00:86:c1:b5:2c:ec:08:59:f1:
25:dc:89:0e:b9:ae:f6:82:10:c8:1a:f4:9d:10:aa:
e3:82:4a:fd:e3:48:43:4e:34:7c:ab:dd:31:e8:fc:
3b:cd:09:f2:c7:a1:9e:ee:33:5b:27:92:f7:9a:29:
4d:0a:7b:28:7b:ac:ee:56:6e:cf:d1:cd:3c:6c:b7:
21:8b:4b:9f:a3:04:73:ef:99:fb:ad:f3:b0:37:1c:
2d:bf:c8:91:f1:39:07:11:68:8e:ca:14:61:b7:c5:
9f:73:c7:17:0c:35:bf:06:be:a0:7d:10:4b:86:b4:
30:44:a1:1b:6c:e3:46:9a:c8:32:02:88:cc:1e:d9:
29:b0:25:09:26:ff:3a:32:bd:c6:4d:86:7d:49:3a:
94:ec:76:7a:28:b7:dd:60:c0:07:5a:ca:25:ed:73:
ae:a3:13:03:95:2f:af:29:6e:8a:ac:26:c9:ff:8d:
41:0e:dd:73:92:4f:c7:21:e3:29:10:66:49:fa:4a:
0b:e0:5e:c9:4a:02:1f:1b:e7:0b:44:2c:7d:50:c2:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:72:AD:83:CC:8A:56:AB:08:8D:A9:E8:E0:0F:2D:B2:E2:FE:9F:17
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/93Ktg8yKVqsIjano4A8tsuL-nxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/23
91.243.119.0/24
194.180.209.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6f:ff:84:e9:08:37:bd:66:04:2f:be:ee:60:50:18:27:29:
99:7f:73:fb:a3:b0:3f:27:3c:42:ef:77:a4:5d:dc:f7:9b:86:
78:28:b4:21:80:88:12:72:89:fa:87:7f:41:41:c2:72:7c:fc:
0b:94:f4:b8:0b:c8:51:a6:f0:30:b4:bf:d6:29:bf:3d:be:13:
be:75:26:11:3f:d0:31:e1:2a:da:0b:1a:a6:d5:1c:fe:74:d5:
b3:a3:f0:7c:ad:b4:d2:38:08:2b:20:c7:11:b6:a6:ff:07:2c:
c7:75:0a:a9:99:67:e3:d0:1e:6d:c3:4d:c5:6f:5c:d9:ee:77:
0d:70:21:17:5b:98:7f:02:b6:3c:76:a0:fc:74:1b:b2:89:b7:
c1:7b:25:9c:19:41:fb:66:e8:5e:28:b5:94:a3:66:9a:56:5e:
ef:31:06:b5:64:a9:76:fc:a2:1b:8c:7d:3e:99:e1:da:70:57:
c2:f2:0d:00:b4:56:5c:82:5d:da:b6:61:ce:a8:4f:57:db:56:
87:6d:fc:29:09:05:00:17:1f:82:7f:71:ba:e8:38:89:1b:82:
ab:2f:82:f4:39:e5:90:da:82:cf:26:f3:ab:f5:69:8d:65:f7:
cd:f0:00:a6:ed:a8:20:d4:53:96:8b:d1:3f:4b:b3:f2:44:9e:
f2:8a:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:45 2024 by rpki-client on console-ams.rpki-client.org