Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/27ABcBAkADVeU36Svr1eV4ZwJhA.roa
File: 27ABcBAkADVeU36Svr1eV4ZwJhA.roa (raw, json)
Hash identifier: 00GU1oZsrjMNm5PoiUYbYyaHLSxiy9sKWWGcU14UAH0=
Subject key identifier: DB:B0:01:70:10:24:00:35:5E:53:7E:92:BE:BD:5E:57:86:70:26:10
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A0A5B87778562CED5B7A8043B9B88
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/27ABcBAkADVeU36Svr1eV4ZwJhA.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50438
IP address blocks: 93.170.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0a:5b:87:77:85:62:ce:d5:b7:a8:04:3b:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbb00170102400355e537e92bebd5e5786702610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:8f:13:3f:9a:b6:60:db:ae:d3:59:47:64:
bf:12:0f:d1:24:c7:55:78:e0:c2:87:36:ab:55:de:
ab:2d:f9:0d:2c:c7:8b:91:47:1e:af:8a:51:df:e3:
8e:5e:a3:00:8b:a9:c7:62:3a:3a:50:f5:9e:6a:ad:
77:68:22:34:31:93:ae:61:41:29:23:1e:06:1d:b5:
2b:e1:61:56:61:50:ba:3e:3e:1f:92:f3:7e:b8:e4:
22:ae:4b:e8:96:fa:8b:31:2d:4a:bc:a5:43:28:f7:
12:a9:26:df:86:b3:ba:51:f5:96:3d:2b:34:85:ae:
9b:e7:68:85:1c:a8:91:42:99:11:e4:46:45:a6:a5:
d9:0b:75:bc:76:0c:e0:66:ad:1f:b8:bb:66:41:73:
d0:f0:4b:40:4a:cd:a5:d1:d3:d3:26:97:7d:c7:3f:
bd:e1:d1:12:2d:79:f5:f2:46:97:90:5b:d1:72:26:
a9:04:da:a7:d0:4f:e6:2e:a0:4a:a6:94:fc:b0:20:
1a:6c:ec:1f:64:83:6a:43:a0:20:4b:40:3f:7b:d4:
c2:bb:e4:38:62:cb:b6:43:82:a8:a7:a3:a0:33:a5:
db:b1:e6:33:c9:95:93:ee:c1:8a:bd:5d:85:38:89:
7b:32:92:87:e1:1e:fa:bd:70:7c:b5:a5:99:e2:b7:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:01:70:10:24:00:35:5E:53:7E:92:BE:BD:5E:57:86:70:26:10
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/27ABcBAkADVeU36Svr1eV4ZwJhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:e8:10:6e:33:f9:30:32:42:75:a9:65:57:47:ab:91:3c:cc:
c7:dd:a8:dc:e5:55:c8:70:51:d5:54:7e:6b:5e:91:dc:d3:7d:
6e:92:a7:0c:7f:5f:b0:25:60:02:50:30:a5:23:34:6d:09:c0:
aa:9c:e7:d5:55:88:4a:6f:72:53:c8:ed:2c:f4:69:5e:1f:6c:
d9:a5:03:85:d8:71:4b:e5:3c:59:b7:40:4e:be:5c:76:db:16:
cf:94:1a:44:87:f9:ca:42:d6:69:f0:1d:35:4e:60:87:3e:81:
0b:0f:be:70:d5:34:cd:e9:8a:ad:9c:2d:a6:d1:bc:ee:50:bd:
60:e6:13:d7:87:e5:ce:9d:6e:69:57:4e:d0:4b:21:3c:1d:fe:
82:21:cc:20:80:0d:e5:e0:15:11:c9:38:96:5e:13:eb:62:9c:
a9:2c:5f:4d:ee:b0:66:ab:13:42:11:18:ff:2f:7f:45:fd:eb:
e8:1f:69:32:f9:ff:04:38:2c:a1:0a:53:57:c7:59:a5:c1:83:
bf:0f:c2:ad:32:a1:1c:37:5c:53:5a:92:0a:33:d0:91:13:78:
c8:e8:39:e9:87:a3:e7:53:c1:48:b2:68:81:61:57:92:45:16:
d6:bd:73:71:ee:dd:a1:2e:e3:1e:30:f1:d6:f9:c9:f3:37:02:
34:42:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:10 2024 by rpki-client on console-fra.rpki-client.org