Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6RljBtFUy73aofQylJck4jaU-LY.roa
File: 6RljBtFUy73aofQylJck4jaU-LY.roa (raw, json)
Hash identifier: 47cAlA9DcZIiviHRgxXL4hxXiefQz+7ml0mq5OlWsqo=
Subject key identifier: E9:19:63:06:D1:54:CB:BD:DA:A1:F4:32:94:97:24:E2:36:94:F8:B6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A488F7EB28CAAE465F2A8494D1C8C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6RljBtFUy73aofQylJck4jaU-LY.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207896
IP address blocks: 93.170.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:48:8f:7e:b2:8c:aa:e4:65:f2:a8:49:4d:1c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9196306d154cbbddaa1f432949724e23694f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:1c:17:96:4e:d4:f4:5b:a7:d7:3c:e2:0c:
eb:7e:4e:c4:37:e9:cb:f0:9e:67:0e:b2:b3:28:8e:
18:3f:a3:cc:9a:80:59:0b:29:ad:17:25:a1:ed:64:
63:48:60:66:c7:65:65:82:2d:b1:1b:39:c8:4e:93:
f1:1b:89:a5:2a:b4:c0:18:c8:ad:42:ad:0c:20:f3:
ea:f5:8c:14:c8:21:6a:2c:04:79:e3:7a:34:8e:9d:
d0:39:40:40:ea:22:a6:b8:94:82:af:b7:c0:68:c8:
40:c9:34:d8:3c:60:6d:87:af:46:9f:99:64:86:c7:
5a:b2:48:cf:16:a0:70:53:40:90:ea:36:bd:0c:3c:
a5:34:64:25:dd:24:6e:87:7b:d7:92:75:30:63:bd:
3a:bc:af:44:3c:0e:8d:da:d5:fc:36:18:9c:9d:da:
8e:b1:9d:f2:01:05:da:5b:a5:d3:99:8b:a0:da:a9:
bc:fa:95:28:78:51:32:3d:62:3a:04:7c:dc:54:23:
f7:3f:9c:18:f8:ba:73:2e:00:0e:f1:8f:bd:d1:e3:
ce:d3:2b:96:13:2f:9a:3c:7c:b3:41:b6:19:bf:f1:
b9:56:b7:6e:03:06:7c:8e:0e:75:66:2f:6f:81:ef:
1e:ba:e6:79:14:ba:07:6f:71:d9:e6:9b:7d:f1:a1:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:63:06:D1:54:CB:BD:DA:A1:F4:32:94:97:24:E2:36:94:F8:B6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6RljBtFUy73aofQylJck4jaU-LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.13.0/24
Signature Algorithm: sha256WithRSAEncryption
42:94:e0:11:cf:18:f8:a8:83:c4:ed:4b:a4:13:e8:f4:60:aa:
ce:eb:7c:82:a0:01:d3:0e:de:d1:9b:09:45:c0:4e:06:04:26:
a0:bd:57:d7:d3:eb:a6:63:49:0c:83:65:a2:17:c0:42:e1:04:
ef:78:00:91:11:a6:2b:5b:d4:f4:83:ed:ce:4a:20:17:1a:4a:
28:9b:47:a0:b4:65:5d:69:99:05:37:11:60:7c:a9:e6:8b:f6:
2b:05:35:33:04:11:c6:c2:67:34:0e:aa:c6:85:86:4c:fb:cd:
2d:3e:90:59:49:3e:1a:fc:be:6f:16:0e:5f:6a:9c:a3:71:82:
9c:4c:fd:b9:73:c0:70:52:94:87:a5:58:11:d2:19:55:cd:64:
eb:78:ad:1f:b3:a7:0f:f2:70:af:72:29:2f:64:80:6e:d4:18:
69:8d:81:bd:c3:fc:f9:7d:02:1b:bd:75:e9:f9:bb:00:d8:60:
a7:25:1e:d1:f1:a4:50:30:f0:6a:65:ce:50:1a:e5:85:bd:0e:
a8:0a:30:31:68:48:3a:14:a0:ba:77:38:58:f8:a5:35:d2:24:
1e:90:fd:d2:06:53:b5:29:91:f0:62:fd:b7:4e:1d:81:dc:ad:
5c:b5:65:0c:70:7a:af:fd:7a:ad:15:fa:ed:55:25:b1:e7:e5:
36:7c:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:02 2024 by rpki-client on console-fra.rpki-client.org