Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/X9pVM54M0qJ2FeE74Z2B7De4cXg.roa
File: X9pVM54M0qJ2FeE74Z2B7De4cXg.roa (raw, json)
Hash identifier: K8wYuIvCqhOrI96l/vVV+98yMJf8Z84tY/oi9SFi0cg=
Subject key identifier: 5F:DA:55:33:9E:0C:D2:A2:76:15:E1:3B:E1:9D:81:EC:37:B8:71:78
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 018CC6B8D193AD7E99428DC632E37CF330E5
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/X9pVM54M0qJ2FeE74Z2B7De4cXg.roa
Signing time: Mon 01 Jan 2024 20:30:50 +0000
ROA not before: Mon 01 Jan 2024 20:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61006
IP address blocks: 93.188.88.0/21 maxlen: 21
2a01:9b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d1:93:ad:7e:99:42:8d:c6:32:e3:7c:f3:30:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Jan 1 20:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fda55339e0cd2a27615e13be19d81ec37b87178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:47:ee:9c:9b:20:f3:10:84:c5:a1:17:82:
73:c9:a3:08:d3:7a:78:69:b8:fe:70:2d:79:51:ff:
59:9d:56:dd:e3:6f:d3:89:e8:b3:29:5f:5d:30:01:
20:5f:02:02:af:2d:47:7f:f3:e2:b5:1f:c0:27:38:
d8:e7:ff:9a:54:21:15:43:cc:aa:8d:ce:ff:e9:f6:
42:ff:d2:99:cb:ba:f2:e4:4d:3e:1f:00:82:52:a2:
15:d3:da:33:f8:94:fc:b1:eb:07:3f:4d:36:4a:22:
17:b0:d9:b5:53:c0:d7:0a:e9:e0:aa:45:36:cc:0f:
0d:3a:0f:4d:2a:6f:06:05:07:72:5a:cb:4b:6c:81:
d9:05:ac:7d:0e:2c:f6:7f:9d:e3:c5:08:1b:09:86:
ab:ab:97:dd:27:b5:38:96:6e:af:b1:9f:36:df:0c:
16:1a:38:fa:7f:c7:76:f6:0f:45:33:83:c0:1c:f5:
e6:3f:74:cb:e1:0c:ea:1e:18:55:d9:bf:44:a7:e2:
c3:e2:83:8c:20:e0:e5:5a:60:83:7c:70:45:d2:8b:
71:c3:e8:40:0d:3f:aa:d8:d0:01:81:7f:86:7d:3b:
54:a8:a2:08:3f:bf:8a:34:a2:3c:cd:22:bf:8f:07:
38:70:15:87:6e:d6:43:8e:0d:c6:73:33:22:7c:8f:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:55:33:9E:0C:D2:A2:76:15:E1:3B:E1:9D:81:EC:37:B8:71:78
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/X9pVM54M0qJ2FeE74Z2B7De4cXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.88.0/21
IPv6:
2a01:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:74:b9:42:5b:d3:ec:67:bc:31:b8:44:6a:41:40:87:d3:e7:
89:2a:47:76:4b:20:e9:85:ae:d2:4e:be:ae:43:50:c6:1e:ee:
08:5f:78:61:62:3c:5f:10:51:f7:be:5c:c6:6e:70:bf:a1:43:
c8:62:ad:2f:2d:fd:9c:f8:7b:6f:ea:5c:7b:02:48:a7:e6:06:
cf:7d:00:7d:c5:7f:b8:93:fe:72:dc:ed:aa:41:c6:2e:b6:72:
5e:65:7b:16:85:11:34:45:53:7d:70:97:86:40:b2:a8:76:98:
80:a3:9d:8b:f3:08:70:4a:0f:a7:b4:b1:eb:fb:ef:c1:04:ed:
f2:ee:9b:2b:a0:1e:c0:ed:37:bf:18:fe:e3:a1:12:95:53:02:
79:8c:0d:3f:94:ef:0a:e8:05:87:52:73:b1:1f:b8:2a:70:b0:
3b:0c:ab:ac:dd:82:62:20:51:22:b9:c7:9a:12:15:7e:0a:08:
a2:65:cc:2e:59:c1:0d:e2:ac:b1:c6:f4:61:aa:ca:e2:cc:8f:
84:72:8d:8d:49:bc:35:86:3f:c9:4a:dd:32:5e:98:cf:94:75:
af:c9:35:aa:6f:51:9a:17:97:28:af:04:74:ed:98:f8:b5:75:
cd:3d:1e:e8:3f:af:83:0e:eb:c4:93:6b:f2:df:66:38:3e:89:
96:49:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:00:17 2024 by rpki-client on console-fra.rpki-client.org