Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Kw1RwabpEYcwkcO_lk7fj8C0Mwc.roa
File: Kw1RwabpEYcwkcO_lk7fj8C0Mwc.roa (raw, json)
Hash identifier: 4HIhBqQtI+YAP9eCMl3pmfN6bdUJIyNnyEn0GdFzBPc=
Subject key identifier: 2B:0D:51:C1:A6:E9:11:87:30:91:C3:BF:96:4E:DF:8F:C0:B4:33:07
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955A07B936D6E4985D3BFBC2441F19
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Kw1RwabpEYcwkcO_lk7fj8C0Mwc.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57392
IP address blocks: 93.113.24.0/24 maxlen: 24
93.114.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5a:07:b9:36:d6:e4:98:5d:3b:fb:c2:44:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b0d51c1a6e911873091c3bf964edf8fc0b43307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:70:2f:62:70:57:50:c6:f3:6f:3a:d5:8f:
7a:86:ee:ff:7d:ac:f2:ea:b5:02:1f:1a:f2:5e:09:
03:b0:41:da:b3:7b:52:c3:76:75:74:fd:51:4d:d5:
93:31:46:67:cb:2d:39:51:1b:c3:ed:9c:1c:c2:a6:
d3:df:8d:2b:b9:30:8e:15:29:5d:97:74:a4:e1:9c:
0c:6f:b4:2b:38:a9:a9:e6:f1:3b:4c:74:5e:b1:d8:
9b:d8:b3:f3:37:a8:49:c8:d1:33:ac:38:f3:d6:3e:
83:ae:f7:e9:bc:7c:ff:13:3f:26:9d:ec:34:22:89:
d7:2f:10:4f:f9:7f:fc:87:a8:fc:e4:ec:15:91:5a:
79:c2:a6:8d:1f:6a:53:a9:b6:c4:2c:f0:dc:16:34:
b6:df:54:85:0b:63:65:fb:1b:1b:fd:ed:01:d0:06:
eb:38:8e:0c:f5:50:cb:c3:9c:d6:46:31:cc:ef:c3:
b0:5d:2f:87:60:90:c3:19:32:a6:cc:59:d0:b0:d1:
02:91:67:2d:2d:47:2a:09:d9:fc:4d:c4:4c:62:16:
7d:79:d9:07:33:15:74:ae:03:07:11:3a:07:f8:80:
32:b1:61:ac:c8:40:dc:bc:e5:4f:b9:20:78:7b:cf:
da:a2:bb:c7:3b:dc:bf:2f:ca:e0:6a:18:2a:75:f3:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0D:51:C1:A6:E9:11:87:30:91:C3:BF:96:4E:DF:8F:C0:B4:33:07
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Kw1RwabpEYcwkcO_lk7fj8C0Mwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.24.0/24
93.114.50.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2a:36:77:55:2a:1e:41:3f:ff:4c:66:66:d6:f5:e6:43:ca:
9a:93:90:49:8e:9c:3b:9f:ec:e6:ab:4f:92:92:a0:eb:55:56:
a7:9f:01:1c:de:66:5d:eb:22:54:d4:f9:8b:f1:6d:08:85:c7:
bb:b6:18:db:bc:de:22:c8:a1:bf:3f:4f:c5:68:c2:18:6f:19:
3a:d2:97:4e:da:3d:04:22:bf:a3:b3:99:85:76:27:b6:ff:6b:
b8:0d:eb:04:48:95:78:57:18:c8:b7:22:6d:1d:0a:5b:e7:5e:
7d:93:6d:f2:cf:ff:c2:b1:32:e6:2e:9c:0e:cf:5c:78:54:c0:
13:ae:54:b1:14:56:9e:c0:a8:b1:19:2a:73:7a:37:76:6d:14:
ca:37:d8:b0:0f:e0:8b:21:4a:94:bc:9d:ed:70:ae:88:e3:38:
94:bf:f3:97:b8:b0:bc:bc:a3:43:5e:c9:cb:e9:18:33:15:27:
73:02:ce:ef:f3:06:72:98:c6:f0:f9:3e:65:23:7e:24:ec:e2:
1b:4a:2f:bb:16:a1:4b:06:66:f5:b8:54:48:64:0a:22:d3:24:
1d:65:f7:90:f2:29:73:eb:9f:90:64:62:ab:c8:75:b6:14:13:
b0:fc:bb:72:db:1e:79:05:f6:0d:13:f3:c1:2b:4f:04:16:1c:
3e:5c:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:08:44 2024 by rpki-client on console-fra.rpki-client.org