Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/emFBVx0phcG38zCcOLQAbSlKycU.roa
File: emFBVx0phcG38zCcOLQAbSlKycU.roa (raw, json)
Hash identifier: yPTvCbQDmSLh9G/WE6Ya90/rIvI2A5k4xXacEyqoQ/Q=
Subject key identifier: 7A:61:41:57:1D:29:85:C1:B7:F3:30:9C:38:B4:00:6D:29:4A:C9:C5
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018CC725A33D69140D68BE91C2E6021D5A76
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/emFBVx0phcG38zCcOLQAbSlKycU.roa
Signing time: Mon 01 Jan 2024 22:29:41 +0000
ROA not before: Mon 01 Jan 2024 22:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 94.137.76.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:a3:3d:69:14:0d:68:be:91:c2:e6:02:1d:5a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 1 22:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a6141571d2985c1b7f3309c38b4006d294ac9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:4c:16:62:57:bc:f2:85:20:0b:fa:08:35:
11:98:9e:08:98:98:46:d6:9b:a7:f3:91:4a:94:b1:
24:de:87:79:fa:96:2a:08:9c:4c:15:50:a0:db:50:
98:9b:70:6c:e0:e1:49:42:a3:0a:e8:d7:ab:4b:a0:
98:8f:fb:eb:3b:ab:22:99:8f:89:e5:f6:e7:8f:55:
5a:18:8f:93:7a:62:d6:d1:1a:43:f2:da:b3:e4:14:
6a:03:b6:5f:2b:13:3f:7e:0c:53:0b:d0:d7:82:6b:
56:a8:55:0c:29:b6:2b:30:15:29:9d:a1:f9:74:fd:
e0:df:9c:80:68:65:25:2c:61:3c:34:20:54:a8:2f:
50:13:30:45:3e:49:57:03:e1:60:90:dc:5c:4b:be:
17:99:91:d1:88:7d:80:1f:fc:fd:db:c6:87:42:72:
5d:df:88:03:4e:1f:bd:5b:30:3d:90:d1:7b:45:c7:
fa:ac:1a:1f:9c:a0:09:6a:a6:65:f1:e6:af:21:63:
fc:27:a7:dd:08:8c:ea:20:c8:c1:12:5a:7b:02:10:
15:6c:7f:c9:46:5c:47:4e:ed:e5:b8:4f:3d:5c:cf:
87:c9:63:93:b2:be:0f:cb:b7:fb:dd:52:17:86:0c:
00:55:57:42:5d:4f:d9:66:9a:f8:e2:9a:08:21:68:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:41:57:1D:29:85:C1:B7:F3:30:9C:38:B4:00:6D:29:4A:C9:C5
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/emFBVx0phcG38zCcOLQAbSlKycU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.76.0/24
94.137.92.0/24
94.137.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d2:47:90:8b:b7:d4:4c:6f:c5:1f:84:93:37:48:88:07:d8:
c5:39:48:dc:04:72:bf:16:d9:f8:55:ec:f0:1c:cf:16:94:37:
d9:c2:ca:bd:8b:f1:7e:a9:39:d2:c1:64:e7:47:0a:2b:d3:06:
d1:5e:52:69:0d:6c:5d:50:8b:5d:bd:bf:53:6a:a5:05:1f:8c:
57:69:f4:3e:51:55:0a:f0:87:f6:9d:70:4f:32:fb:a2:3e:75:
e9:e4:c5:d4:38:e8:25:ed:f6:c0:a6:03:30:c4:c8:4f:42:c6:
79:10:2a:bc:4a:1e:0f:ef:cd:7c:e8:b3:9c:eb:ee:b0:eb:db:
e1:3c:03:40:17:61:c4:97:22:1a:4d:c8:2e:c4:51:87:80:f2:
96:94:76:a7:34:75:de:9d:a7:d5:d9:b1:ee:6b:1c:a8:ad:d1:
ad:b4:d0:40:de:aa:5e:52:b7:09:41:c0:04:a7:c8:1a:99:e2:
75:d5:be:ba:99:17:44:94:34:c9:1a:03:9c:8c:e7:86:82:e8:
e8:f8:6d:f4:00:07:ae:dd:cb:a3:36:5f:28:b9:9c:13:eb:ff:
36:1e:e4:c6:98:9a:26:d2:d2:47:f0:da:d6:1b:7f:92:9c:42:
73:92:f1:64:76:40:2f:e4:87:29:5f:00:2a:2e:5c:7f:88:52:
f1:94:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:57:07 2024 by rpki-client on console-fra.rpki-client.org