Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/4liIOMaO-eUwwvhf41ochdkf4yc.roa
File: 4liIOMaO-eUwwvhf41ochdkf4yc.roa (raw, json)
Hash identifier: 8Yk5d0PRHx3ukGUupPmYAeKwSsgvupSX2HLZXSxUGRI=
Subject key identifier: E2:58:88:38:C6:8E:F9:E5:30:C2:F8:5F:E3:5A:1C:85:D9:1F:E3:27
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 018F81836B1FE09A63C0F524DD9BB41035F9
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/4liIOMaO-eUwwvhf41ochdkf4yc.roa
Signing time: Thu 16 May 2024 13:07:04 +0000
ROA not before: Thu 16 May 2024 13:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41870
IP address blocks: 93.94.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:83:6b:1f:e0:9a:63:c0:f5:24:dd:9b:b4:10:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: May 16 13:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2588838c68ef9e530c2f85fe35a1c85d91fe327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:91:6a:1a:3f:d5:34:f8:49:74:de:cb:cb:
67:2a:55:6c:fa:27:98:de:f3:ec:c0:74:79:73:f9:
13:21:73:68:4b:a3:e7:ab:62:6a:de:16:16:ce:da:
24:37:12:d0:65:ac:32:ad:21:08:25:c6:28:d8:22:
a5:f3:95:23:66:04:22:ec:bb:45:cb:1e:e2:d5:c2:
11:93:5c:36:1e:6f:38:f4:6e:45:cd:47:c9:bf:0d:
b3:c1:6e:c7:f3:ab:e6:4b:b2:8f:cf:cd:8a:49:56:
fb:2d:7a:71:71:7d:2b:dd:87:8d:d2:ef:e2:24:ec:
62:76:39:50:c2:65:03:79:4d:17:c3:2d:be:27:79:
6b:bc:33:a8:44:80:f0:98:cc:02:96:f9:1a:cd:35:
41:57:85:b7:d7:fa:d2:ba:3f:da:fd:42:dd:9c:93:
a0:c9:7a:45:fa:70:13:3f:91:d4:da:79:b9:f0:f3:
1a:49:74:a5:b9:0b:dd:e8:d9:b6:37:79:bf:8f:54:
4f:b3:87:bb:b2:38:f0:65:93:da:b8:19:68:7b:17:
aa:17:a0:8e:19:3c:1a:bf:6e:1b:bb:30:89:87:7b:
98:59:6a:5c:97:b0:24:1c:57:11:a5:04:aa:f2:c6:
8c:d1:37:59:62:68:46:25:09:57:f5:89:f7:0e:bc:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:88:38:C6:8E:F9:E5:30:C2:F8:5F:E3:5A:1C:85:D9:1F:E3:27
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/4liIOMaO-eUwwvhf41ochdkf4yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.140.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7a:33:38:22:21:db:5c:0d:18:b4:30:3a:8e:f5:d2:c1:05:
71:d8:3f:f4:f9:0d:45:92:37:39:77:10:d3:6a:a7:ff:92:46:
42:76:bd:17:ae:e9:10:f1:54:0c:35:77:39:da:09:9e:ab:22:
49:e1:b6:b2:a9:0a:c1:fc:fe:c9:d4:a2:0b:f5:51:8f:bc:2c:
35:9b:b4:11:00:ee:94:db:fe:a7:de:9b:42:75:5d:5e:b3:1f:
64:52:cf:fb:68:ec:1d:a9:b4:42:24:fa:5b:50:03:f1:9c:b4:
8e:d0:56:2a:3d:61:ce:ed:eb:c6:65:64:2d:a4:86:c5:34:43:
48:46:5c:0e:df:dd:83:eb:0b:df:3f:bc:79:ca:c3:07:b5:03:
ea:28:17:07:40:aa:d3:fc:66:fd:c0:47:a7:e6:51:d6:e1:47:
66:02:2f:dc:c1:e4:e8:d1:bc:05:80:7d:a2:5a:d3:40:e3:e2:
e1:58:01:86:42:a4:e8:95:6d:f6:dd:93:55:0d:5f:28:0b:ff:
90:95:e3:3d:c2:bb:a7:d4:ac:2c:45:17:8c:a9:2e:bd:35:7e:
ab:95:8d:88:9b:d1:db:8c:8f:80:ed:ce:ca:57:ee:85:79:34:
28:f0:40:11:33:22:32:3b:f1:5e:4c:6d:df:b2:3e:95:fb:93:
9a:97:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:03:38 2024 by rpki-client on console-fra.rpki-client.org