Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/iHDhsW_1MQd_qChDRAIQz9eT98E.roa
File: iHDhsW_1MQd_qChDRAIQz9eT98E.roa (raw, json)
Hash identifier: WzOsEk6ZXXbYn1AlXwzvoprYXHyNBNFm0nbuU64AI7o=
Subject key identifier: 88:70:E1:B1:6F:F5:31:07:7F:A8:28:43:44:02:10:CF:D7:93:F7:C1
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 018CC492295B40A55F89A09A75EB128143D8
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/iHDhsW_1MQd_qChDRAIQz9eT98E.roa
Signing time: Mon 01 Jan 2024 10:29:22 +0000
ROA not before: Mon 01 Jan 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44999
IP address blocks: 93.188.120.0/21 maxlen: 24
176.62.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:29:5b:40:a5:5f:89:a0:9a:75:eb:12:81:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Jan 1 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8870e1b16ff531077fa82843440210cfd793f7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:d5:15:8f:e7:2c:de:24:f1:47:b7:a8:eb:
4b:26:49:56:58:07:ff:db:6c:d5:77:b2:a8:26:0d:
fb:1c:09:b9:3b:a5:f9:83:32:b6:b4:fb:a7:bb:ed:
b4:55:ef:54:e0:24:b5:8f:f6:af:f7:26:16:f1:c3:
0e:11:01:78:38:63:3b:91:40:c8:76:c1:5c:04:a0:
bf:6d:f3:c7:6a:34:44:f4:65:57:a9:10:48:cc:48:
2e:2e:90:7f:9f:ad:8d:99:74:41:85:97:0a:cd:3e:
0b:33:93:47:72:a2:7e:4c:1e:99:40:00:ee:64:e0:
34:e6:f4:ec:fe:50:62:c9:dd:56:52:27:4a:14:68:
9b:53:09:d8:36:0a:24:5f:3b:c3:e6:76:5f:a4:e5:
56:16:52:6a:eb:a0:e4:a9:17:08:99:9e:4f:16:ec:
04:a7:99:e9:39:56:70:e8:82:06:7e:08:85:d5:38:
74:75:be:33:e4:2f:0b:78:40:21:30:e7:ba:f7:10:
33:85:5b:f9:90:d5:69:70:96:b3:00:96:29:f1:4f:
16:e2:ff:49:ad:fc:51:9f:1c:92:c9:c7:31:27:80:
35:4d:39:95:0e:ca:96:32:a7:3b:40:5b:4f:11:a4:
43:60:64:62:ab:e6:68:a9:a1:be:0c:13:16:fd:9a:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:E1:B1:6F:F5:31:07:7F:A8:28:43:44:02:10:CF:D7:93:F7:C1
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/iHDhsW_1MQd_qChDRAIQz9eT98E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.120.0/21
176.62.216.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:d7:b2:83:fb:38:a9:6f:b6:7e:56:5d:69:9c:44:bc:23:36:
ce:96:b5:74:8e:eb:06:30:a8:ae:ea:c8:ed:56:bc:cc:a7:b5:
eb:8a:4b:bd:df:7b:3d:4f:40:b3:d8:c0:66:25:15:25:bf:31:
ad:62:29:b8:31:72:ce:e2:dd:2b:9c:46:5d:80:a3:26:49:02:
f9:9b:06:c7:80:a3:44:4e:5e:1a:9d:b4:05:19:22:97:0a:c8:
b8:97:60:bc:e6:ca:74:b1:9f:39:b5:80:da:78:99:61:dd:f8:
dd:91:71:12:36:cf:c8:c8:b4:cd:2f:2e:2e:45:c2:97:41:19:
5b:36:8d:96:29:10:35:03:52:d8:94:f9:31:29:04:48:48:71:
b0:20:fb:46:15:4d:93:f6:d2:5f:f9:1b:c0:b8:8b:c0:b7:18:
9a:c3:71:f8:bb:53:15:ec:ca:01:67:39:28:91:7d:a4:c9:49:
96:a0:e4:c7:85:52:06:6f:4e:b1:56:dd:7d:53:9f:40:2a:24:
b0:00:0e:a2:79:d9:2b:97:08:3c:bd:13:e9:c3:a0:6b:8a:9e:
f5:f5:7a:35:6c:06:35:b5:54:37:f5:be:df:5a:a3:e2:fd:cd:
f2:b7:e3:fe:a9:19:68:b1:7b:bf:5f:77:06:e7:01:99:77:3d:
ab:a0:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:05 2024 by rpki-client on console-fra.rpki-client.org