Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/oMFvptCllBY8X8HsKR4k4CHJ5pQ.roa
File: oMFvptCllBY8X8HsKR4k4CHJ5pQ.roa (raw, json)
Hash identifier: q7lLo2yC8WscKPMzJ2irv6Gup6OBsGYI+eLfBukWrw4=
Subject key identifier: A0:C1:6F:A6:D0:A5:94:16:3C:5F:C1:EC:29:1E:24:E0:21:C9:E6:94
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 018CC6B93F806144EACF144D26CE1A32D88A
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/oMFvptCllBY8X8HsKR4k4CHJ5pQ.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209193
IP address blocks: 93.191.114.0/24 maxlen: 24
93.191.113.0/24 maxlen: 24
2a06:a546::/31 maxlen: 31
2a06:a544::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3f:80:61:44:ea:cf:14:4d:26:ce:1a:32:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0c16fa6d0a594163c5fc1ec291e24e021c9e694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:45:c3:10:f4:e5:7e:d6:5e:ef:52:56:eb:
52:9b:89:9c:c1:fd:19:2e:6e:02:b2:26:f8:96:5a:
92:02:af:a9:02:77:ec:d9:b2:37:26:dc:2b:55:4e:
97:11:b1:7a:27:ad:de:69:df:b9:42:53:27:dc:c5:
49:85:fb:da:35:3a:1e:5a:e2:01:c3:47:d4:c1:ef:
ab:19:51:ec:1a:16:9d:1e:37:c1:60:bd:af:d8:96:
1e:bb:83:86:71:65:50:67:17:bd:eb:00:e7:c2:02:
52:9b:2d:47:5b:40:6e:4f:95:6f:ea:d2:a4:3c:46:
81:f6:c7:9e:cd:63:96:58:c5:9f:b3:6d:59:60:ff:
9b:ac:a7:20:32:c1:ba:2b:47:2d:d4:9b:72:3c:e3:
fc:5c:bc:c2:ab:df:d1:0d:b4:23:62:13:43:3b:8c:
e5:e0:88:5b:a2:01:ca:69:43:5d:8d:49:72:92:5e:
67:11:30:e7:8a:7f:73:ca:95:3a:65:b3:f6:73:1d:
cd:ab:bd:b3:26:1b:ae:88:fe:73:85:65:35:24:d4:
e6:5c:fb:40:5f:f8:9a:55:1a:f5:8e:71:2a:1d:b2:
90:e3:eb:8c:55:7e:32:12:7e:96:2d:36:a7:0f:bb:
45:72:20:6b:0e:cc:05:9d:56:43:00:34:c2:2a:c2:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:6F:A6:D0:A5:94:16:3C:5F:C1:EC:29:1E:24:E0:21:C9:E6:94
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/oMFvptCllBY8X8HsKR4k4CHJ5pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.113.0-93.191.114.255
IPv6:
2a06:a544::/30
Signature Algorithm: sha256WithRSAEncryption
34:b0:a3:1d:50:77:62:a1:6b:2f:d5:00:71:2e:33:3d:e3:58:
ca:59:98:da:72:7a:b9:b2:8d:6c:95:b3:cf:1b:99:0b:6f:9b:
46:98:05:96:21:dc:8d:7e:c1:fc:f9:ca:65:33:ea:35:37:80:
93:9c:0e:dc:70:4e:67:93:3d:bc:77:ee:87:99:9c:3b:74:08:
09:69:57:4d:44:ec:96:48:c9:2d:99:75:f2:1e:d9:af:da:13:
06:38:a1:c2:4e:65:41:91:dd:87:54:87:c7:63:25:7d:f1:5c:
f6:59:1f:8e:22:7f:97:58:20:5f:cb:2e:7e:2d:4c:13:59:fa:
89:85:a3:a1:b1:7c:f3:d9:6f:79:ff:06:81:17:1a:cc:2f:c8:
bc:03:fa:41:11:2b:6f:20:be:a7:30:72:f1:c9:ed:c5:2c:e3:
75:f7:01:33:04:08:75:d6:fd:3b:10:94:f2:a9:74:33:22:92:
ea:a4:6d:0a:87:a1:90:13:a7:97:46:73:37:05:ea:4a:2c:89:
1b:f8:55:fe:13:52:4a:91:74:30:02:f6:7e:fd:79:9b:b1:f7:
cd:df:6a:1d:c7:87:ac:8f:ff:f7:92:f1:39:69:d7:b9:8f:00:
a9:66:23:a2:62:f0:45:4d:3c:9a:a6:86:f9:bb:8e:87:72:0b:
a3:ec:43:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:04:24 2024 by rpki-client on console-ams.rpki-client.org