Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0CnWUvoS7HTahBXZ9lzbnFvk2BQ.roa
File: 0CnWUvoS7HTahBXZ9lzbnFvk2BQ.roa (raw, json)
Hash identifier: DJirKyrlbX9uZ4EIIRZ9VlNW6pskr1lKWD0/o+dBNkg=
Subject key identifier: D0:29:D6:52:FA:12:EC:74:DA:84:15:D9:F6:5C:DB:9C:5B:E4:D8:14
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018E611EFFB2F881A8168A341E8D3E889F0C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0CnWUvoS7HTahBXZ9lzbnFvk2BQ.roa
Signing time: Thu 21 Mar 2024 13:06:45 +0000
ROA not before: Thu 21 Mar 2024 13:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213182
IP address blocks: 93.170.12.0/24 maxlen: 24
93.170.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:1e:ff:b2:f8:81:a8:16:8a:34:1e:8d:3e:88:9f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 21 13:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d029d652fa12ec74da8415d9f65cdb9c5be4d814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:e8:2a:87:d1:c4:fa:3c:e1:5d:7f:db:36:
a0:91:26:6e:0d:ae:a0:63:cf:3d:20:c9:9d:d7:7f:
44:62:bc:75:fd:d4:ca:f2:75:81:a4:31:68:1a:f9:
1b:42:ba:4f:f8:12:69:0c:65:7c:99:57:2e:93:e5:
f0:39:69:b2:fe:3b:27:4c:52:7c:41:f2:16:73:bb:
76:20:f4:36:28:13:19:0a:d5:47:74:09:44:8c:98:
6c:53:8f:0c:2a:92:22:3a:1b:90:44:9f:0e:d3:48:
b3:fc:88:aa:03:98:1d:fc:f8:fe:fe:f6:bb:67:45:
ae:1a:d4:eb:03:18:55:64:ce:d6:dc:6e:24:f9:fc:
dc:14:83:77:b3:9d:ef:6f:12:4b:05:2c:77:7d:b9:
50:43:07:f1:3d:8f:98:d4:c0:f5:72:aa:24:cd:af:
71:0b:68:1a:72:9c:27:9e:c5:6f:e4:72:bc:98:69:
43:c2:d4:75:c8:8a:75:12:30:3b:fd:a1:b9:ff:23:
20:63:60:10:e5:34:1b:f7:09:c2:f5:65:94:77:e3:
2c:a8:b9:65:fa:58:e5:75:81:fe:a3:cb:39:d3:8f:
b9:dc:02:12:53:b3:52:8d:7a:ec:a2:8c:a1:5f:2a:
cc:8e:40:d8:30:0b:5f:b6:b8:50:82:c0:3c:1c:83:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:D6:52:FA:12:EC:74:DA:84:15:D9:F6:5C:DB:9C:5B:E4:D8:14
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0CnWUvoS7HTahBXZ9lzbnFvk2BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.12.0/24
93.170.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:29:c6:90:2b:88:dc:57:2e:74:d4:46:b8:db:04:bf:69:52:
71:cf:b1:36:0a:be:9b:8b:ef:20:86:f0:dc:cc:59:95:ba:07:
42:da:af:cf:d2:dc:26:93:b5:85:69:99:67:9b:1a:98:12:d8:
59:a9:e1:99:a8:34:61:1a:7d:a1:d8:96:ca:cc:aa:b8:d9:38:
1d:65:2c:cc:4b:25:b5:eb:1c:a3:63:ff:ee:f7:a9:f6:d8:63:
73:42:b6:73:14:d3:bb:5c:32:d1:87:28:c9:79:c9:80:ab:21:
de:a9:1b:a8:f3:82:71:85:00:b1:51:ae:11:a2:ac:b1:8d:d5:
29:8a:cd:92:ab:55:75:27:9e:db:4a:a2:3a:07:2b:a2:3b:6a:
2b:37:7c:ae:15:03:0b:60:62:b6:51:d9:6c:f1:02:39:a2:dd:
11:e2:a3:18:aa:31:4b:12:ff:d2:48:26:b8:8c:09:ad:04:e6:
51:65:fa:68:c7:3a:c4:89:30:5c:75:a3:f8:5e:80:d0:2f:21:
69:31:7b:91:e5:01:41:f3:16:3a:e7:45:54:59:b7:f2:d7:15:
1e:c5:0b:47:ef:b8:a0:84:72:57:68:16:c7:42:fd:9e:82:fe:
3e:62:8f:85:44:8a:70:3b:fc:26:d0:1a:c6:e4:7a:b3:12:da:
bb:78:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:08 2024 by rpki-client on console-fra.rpki-client.org