Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w4QH0gctvQKWXTe4CEBoiwD6ZSE.roa
File: w4QH0gctvQKWXTe4CEBoiwD6ZSE.roa (raw, json)
Hash identifier: kgGr5dUe48fydaNnM24JQxHcj/JUvOb/R0k3RVBDXAk=
Subject key identifier: C3:84:07:D2:07:2D:BD:02:96:5D:37:B8:08:40:68:8B:00:FA:65:21
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193164291226F6C082215C6A8D685F3F114
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w4QH0gctvQKWXTe4CEBoiwD6ZSE.roa
Signing time: Sun 10 Nov 2024 13:28:01 +0000
ROA not before: Sun 10 Nov 2024 13:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395793
IP address blocks: 93.115.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:16:42:91:22:6f:6c:08:22:15:c6:a8:d6:85:f3:f1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 10 13:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c38407d2072dbd02965d37b80840688b00fa6521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:79:da:00:d3:f2:ca:cb:66:98:a7:ef:72:
c5:66:4a:38:fb:9d:43:aa:98:35:d2:5c:bf:47:93:
1d:5e:fb:4e:d5:8f:5d:f0:10:41:5d:31:b7:0f:ea:
18:1a:10:a1:c3:c6:30:29:f1:c9:2d:0c:1d:97:79:
02:c5:5c:00:f4:ee:3c:d5:03:ee:db:62:c1:d5:f2:
66:94:9e:80:64:e1:11:43:f6:2b:97:68:e2:bc:93:
8b:61:ce:49:3b:d0:7b:82:84:b1:e4:ba:08:6b:8e:
34:4b:18:9d:d5:0c:20:b0:c2:7e:ac:7a:0d:37:14:
bd:31:b8:c7:42:24:17:77:26:b0:79:bc:47:0f:4b:
7e:41:3e:cd:06:e8:f5:00:d8:61:27:a8:05:ab:7f:
02:5e:40:60:88:c3:9d:73:aa:24:33:70:28:5a:54:
ee:b7:01:6d:bb:5b:2e:49:54:36:57:e3:63:0e:fd:
89:8c:a9:2b:63:6a:ac:bb:ba:78:53:3c:1b:29:42:
5f:d3:0b:7c:7c:b6:51:48:24:26:50:14:e1:c2:d4:
d8:5f:10:64:6e:a5:9f:08:bd:64:85:ff:24:41:0a:
e5:ea:51:62:79:a2:41:1d:9d:06:40:4d:85:1b:52:
5a:4b:66:a0:5a:02:84:8c:d5:1a:6c:74:10:47:a7:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:07:D2:07:2D:BD:02:96:5D:37:B8:08:40:68:8B:00:FA:65:21
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w4QH0gctvQKWXTe4CEBoiwD6ZSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:90:8e:ef:ad:15:78:a6:d8:73:e9:8e:4c:88:bf:f8:89:7d:
e3:78:72:02:ab:ed:0d:ec:c7:59:26:e6:a4:66:b1:21:80:79:
e9:10:a2:86:f0:87:c7:94:34:4b:38:89:18:51:67:80:81:56:
5b:31:af:f2:b6:02:d6:fa:f7:07:80:70:f3:eb:ac:7a:cc:c6:
44:33:6c:db:2a:b3:bc:59:1a:e7:09:d3:14:f0:7e:bf:a4:1a:
58:a5:95:a9:c7:8a:e4:04:cb:8b:4d:d5:93:28:29:50:b9:4b:
71:12:e6:e2:ea:a0:c2:7a:5c:20:b9:36:3f:c4:be:f3:eb:b5:
c6:c7:ef:9e:3b:17:f2:2d:cf:c3:c7:5e:ad:cb:23:4a:48:2c:
f1:32:4d:6d:84:f7:ed:bb:4a:33:52:b1:2d:55:f8:13:fa:7d:
44:9b:4a:95:07:26:92:b6:f1:ea:12:85:78:20:38:8a:3a:dc:
af:78:7e:29:ee:8e:0a:75:8c:88:8b:e4:47:a9:47:fa:31:9f:
d6:d9:06:08:b0:f0:3a:65:22:7d:83:4d:aa:67:6c:ac:7c:f5:
2a:2c:a1:33:46:f5:7e:6f:0a:09:4d:bd:d5:96:ea:11:7c:ce:
0c:27:81:c2:e1:05:cc:86:06:36:60:7a:e5:0c:9c:27:77:70:
f0:9c:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:16 2024 by rpki-client on console-ams.rpki-client.org