Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oCnf8fiK9x_zzbu0AFuXS_Ee5xY.roa
File: oCnf8fiK9x_zzbu0AFuXS_Ee5xY.roa (raw, json)
Hash identifier: LFekFX5/6y0nxfqSTukQOGXTuPx+2S0M2a5tewQk80A=
Subject key identifier: A0:29:DF:F1:F8:8A:F7:1F:F3:CD:BB:B4:00:5B:97:4B:F1:1E:E7:16
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500BC73D1B9511425967AE4F274675E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oCnf8fiK9x_zzbu0AFuXS_Ee5xY.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29551
IP address blocks: 85.93.10.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bc:73:d1:b9:51:14:25:96:7a:e4:f2:74:67:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a029dff1f88af71ff3cdbbb4005b974bf11ee716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:ea:7a:a8:1a:40:2b:63:ce:c4:f2:2b:4d:
02:08:3c:a0:1d:38:24:63:56:66:d1:78:b6:04:da:
59:72:64:e9:13:93:22:a1:16:29:6d:7c:fb:b9:1f:
52:26:c4:1d:f8:09:5d:96:12:84:a4:0f:ce:6a:2a:
9f:16:06:09:71:9b:7f:10:4a:33:cc:6c:15:f0:3c:
db:62:2f:a7:ed:ad:3b:1a:30:79:2a:6a:2b:f1:b8:
98:6e:e8:b5:dc:75:16:ab:ee:86:d2:7f:72:bf:b1:
c7:92:8d:f8:ed:79:a0:f1:90:73:18:02:c4:04:6f:
fd:9e:ca:aa:62:be:2b:65:b0:9f:48:93:62:c5:1d:
be:95:ce:0d:36:5d:79:ff:c0:63:d9:d5:93:75:48:
35:e6:75:80:a7:40:9a:14:7f:2a:bb:2c:8e:88:e2:
10:92:3f:e4:3e:a7:2c:16:07:a5:f5:ce:97:a1:f8:
09:1c:e7:36:40:f3:c9:1f:9f:15:e7:af:4c:3a:1e:
15:7f:1c:95:2c:8e:83:2b:8e:2f:32:61:ae:24:a1:
ac:91:02:e1:18:c8:23:fa:80:38:c8:d2:e0:17:9e:
c8:10:5e:57:12:50:c8:c3:b1:36:6e:af:69:82:73:
74:26:24:84:e4:4b:b6:21:55:2b:32:be:73:36:b4:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:DF:F1:F8:8A:F7:1F:F3:CD:BB:B4:00:5B:97:4B:F1:1E:E7:16
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oCnf8fiK9x_zzbu0AFuXS_Ee5xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.10.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d7:68:6e:4a:4c:fc:40:a0:27:f5:36:ab:5a:e6:52:dc:4a:
63:01:cc:83:04:3a:d2:ca:88:4c:47:97:f2:36:8f:2e:18:a3:
1f:b8:b1:e6:e9:a4:27:81:7a:4c:3f:d1:41:d9:e7:82:6a:2b:
ac:8d:8e:e8:02:5c:75:2e:af:59:aa:2d:cb:28:95:39:00:a3:
6e:1a:cb:48:29:e9:be:5c:83:5c:d2:73:59:f6:60:44:88:5e:
87:93:c4:91:9e:9c:54:b8:25:59:7d:81:09:66:69:22:9e:2b:
c3:ea:e8:b3:9c:0a:b3:89:b4:26:5c:06:97:2f:c4:a4:41:c1:
69:8e:c5:05:e8:53:70:89:50:05:65:76:a2:8b:34:ef:c1:99:
5b:b6:41:7b:e3:0b:08:34:d3:bc:53:03:98:42:a2:32:39:84:
b5:c8:22:9b:b4:fa:a2:84:7c:b3:a9:e0:a6:c9:8d:19:47:bb:
29:38:b8:b2:3d:08:d1:9b:53:20:68:64:e1:71:14:f5:00:a2:
50:68:dd:78:fa:c0:a2:3d:b1:ff:5e:a3:3d:52:6c:e5:e7:7c:
97:2a:81:6e:76:4b:2b:2b:93:bb:c1:15:41:8a:1f:d6:2c:a1:
10:14:09:50:c8:ce:83:11:de:0a:20:a5:b0:0a:75:33:63:e9:
3d:aa:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:23:38 2024 by rpki-client on console-fra.rpki-client.org