Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/j9y8MKLGrJfKV4CCBJlgigd9idk.roa
File: j9y8MKLGrJfKV4CCBJlgigd9idk.roa (raw, json)
Hash identifier: Xyq4ldg0ef0W5BM7gnpMDagajdFsWkPyFfWbQf+exkA=
Subject key identifier: 8F:DC:BC:30:A2:C6:AC:97:CA:57:80:82:04:99:60:8A:07:7D:89:D9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018E7B9C4FBD075CE4C4A6D7A6691C99A86D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/j9y8MKLGrJfKV4CCBJlgigd9idk.roa
Signing time: Tue 26 Mar 2024 16:33:45 +0000
ROA not before: Tue 26 Mar 2024 16:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215222
IP address blocks: 93.170.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:9c:4f:bd:07:5c:e4:c4:a6:d7:a6:69:1c:99:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 26 16:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fdcbc30a2c6ac97ca5780820499608a077d89d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:d3:d5:a6:07:e6:ed:25:43:5d:87:58:ee:
93:e8:2d:f0:28:db:fb:55:a0:60:24:46:95:5d:14:
4a:3a:c5:24:72:16:85:fd:6d:9c:64:b3:6f:a6:7c:
bf:34:8a:85:93:3e:a3:b9:34:fe:b2:5a:6f:eb:cf:
78:78:ce:4b:ff:96:0f:7d:c7:61:53:97:f5:ac:e1:
ae:dd:ce:d2:62:e5:9f:ca:4a:88:8b:c7:05:99:25:
9b:bb:71:bc:af:77:ee:b2:bc:e6:69:61:d3:fc:4f:
13:ff:71:62:7d:e1:50:86:f5:9f:76:8d:f9:6e:6e:
82:fc:d5:5a:c7:74:b4:91:06:68:a2:dc:73:7e:57:
2b:9f:a7:aa:65:4a:4d:bd:af:d5:26:23:60:9a:83:
ef:2e:69:23:e3:8f:6a:e4:bb:e0:39:d6:9b:52:75:
58:c7:3f:ba:a9:3f:60:54:25:3c:5f:a5:ec:bb:76:
36:7a:f8:98:9f:06:c6:56:a2:3f:12:e4:3b:3c:51:
05:01:61:42:8a:9b:aa:1b:f5:c3:be:f4:9f:9e:4d:
73:72:c2:eb:77:c5:a9:58:cc:85:47:cf:ee:c7:6e:
ca:98:1d:ee:3f:64:d5:3e:d2:e5:28:e9:43:56:fc:
21:82:34:f5:6e:ac:ec:79:73:02:ea:5b:68:cf:d7:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:BC:30:A2:C6:AC:97:CA:57:80:82:04:99:60:8A:07:7D:89:D9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/j9y8MKLGrJfKV4CCBJlgigd9idk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.11.0/24
Signature Algorithm: sha256WithRSAEncryption
60:83:37:42:b6:aa:b5:c2:2b:3d:45:88:39:bb:76:b8:87:c0:
8f:52:8c:7f:42:34:dd:86:cb:3c:0d:61:2b:06:3f:e3:50:64:
39:91:c6:cb:0c:b8:03:59:42:ba:02:7b:76:c8:d2:00:dc:89:
17:46:71:b8:2a:d3:5f:60:5f:5c:d0:42:f1:84:0f:8e:8a:af:
6d:01:5a:1d:47:4e:09:e0:24:e8:09:a3:e5:e8:d0:77:45:34:
1d:07:99:36:2b:20:13:dd:4d:8f:3b:c8:8b:b5:ad:c3:f1:ae:
ea:b1:2b:2e:47:e3:8f:55:33:5a:62:2f:3c:16:6e:e2:a8:34:
6a:c9:05:d0:58:43:22:88:9c:02:14:08:64:94:73:22:76:57:
1c:2b:82:e4:f8:80:88:3b:4f:fd:b7:d0:6b:ae:24:b4:f1:8a:
8e:ac:41:a9:16:c3:c6:db:55:c0:76:00:9d:bb:74:c8:40:a8:
32:07:9e:c2:1d:fe:08:dc:5d:28:54:74:20:80:0f:70:42:8f:
48:71:55:55:98:38:1e:db:9a:46:93:22:51:ff:7f:5d:9f:6a:
c6:15:fa:0f:0b:b5:a0:72:08:3f:37:eb:92:de:ce:26:cb:92:
85:99:06:dc:e7:b8:97:19:3d:96:a0:84:d1:c2:a6:1e:b2:4c:
03:59:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 11:09:57 2024 by rpki-client on console-ams.rpki-client.org