Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/17lnUkGOaiNYr8MZ-FKTGsj_nwc.roa
File: 17lnUkGOaiNYr8MZ-FKTGsj_nwc.roa (raw, json)
Hash identifier: 6fmd1WIeTVU15KRnayhNrHXXCrIJDGbwXQ+Bc6AfN9k=
Subject key identifier: D7:B9:67:52:41:8E:6A:23:58:AF:C3:19:F8:52:93:1A:C8:FF:9F:07
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 018CC726D5DAD180FF3E4E8F00AB80EF11F5
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/17lnUkGOaiNYr8MZ-FKTGsj_nwc.roa
Signing time: Mon 01 Jan 2024 22:31:00 +0000
ROA not before: Mon 01 Jan 2024 22:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62201
IP address blocks: 93.159.183.0/24 maxlen: 24
93.159.188.0/24 maxlen: 24
93.159.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d5:da:d1:80:ff:3e:4e:8f:00:ab:80:ef:11:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 22:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7b96752418e6a2358afc319f852931ac8ff9f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:2e:16:23:24:77:04:b4:a4:b9:80:c5:0e:
fb:74:67:e4:7f:ca:f8:46:d2:47:35:42:3f:44:1a:
45:ed:d1:52:6f:fe:ae:79:1b:18:a5:5c:e0:00:fd:
cd:6a:a7:0c:ca:b1:0b:31:af:c1:57:b1:41:2a:ea:
9d:35:d6:df:eb:6d:0e:d8:48:8d:ed:7c:a0:99:b0:
61:23:70:af:50:2f:f9:c7:3a:dd:7d:90:0b:72:19:
f3:fd:61:e3:7b:56:cf:1a:b2:79:48:e8:75:5e:58:
1d:fe:dc:cc:5d:46:0d:b2:ce:c1:9f:2e:2e:36:97:
4e:ef:d5:46:0d:3d:7e:f5:e4:0c:69:12:f8:86:d6:
05:a2:d1:88:3d:f8:2d:4c:61:fd:0b:f1:81:97:57:
32:bc:12:51:88:c7:84:e5:81:7d:31:26:74:b8:2b:
d8:14:49:a0:1d:c0:50:7e:e8:46:c4:db:86:10:c8:
5f:fa:38:fa:a5:96:80:87:39:2d:3c:6e:45:fd:c5:
8c:52:83:1e:4f:d0:bf:88:9b:11:5b:d6:05:96:17:
2c:d4:87:15:09:9a:27:f2:9c:96:d5:c7:4e:51:29:
da:5a:19:04:0d:32:ef:3a:97:8a:48:28:cd:8a:df:
79:15:bd:b7:36:0d:07:0f:d8:c5:45:f5:5e:8f:52:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B9:67:52:41:8E:6A:23:58:AF:C3:19:F8:52:93:1A:C8:FF:9F:07
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/17lnUkGOaiNYr8MZ-FKTGsj_nwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.183.0/24
93.159.188.0/23
Signature Algorithm: sha256WithRSAEncryption
92:9b:b7:c7:16:cd:af:be:e2:7a:4b:f2:01:04:bd:9a:58:db:
d1:dd:56:06:21:a0:c4:73:8d:2e:39:57:f8:12:ca:00:f4:6c:
fa:40:65:87:68:c3:16:74:3d:5e:31:8f:d7:42:d8:6f:7a:5d:
19:65:62:61:25:2c:b6:c4:b8:56:43:0c:de:06:4c:4a:d8:4b:
e2:76:65:ed:cf:9e:0d:a3:f6:cc:80:7a:50:f4:84:b3:03:04:
59:d9:56:60:aa:1d:f3:b1:58:e3:86:82:ca:4f:2e:c5:93:85:
9c:84:d5:48:66:16:b1:cd:23:18:34:19:7f:37:65:59:a0:bf:
99:ba:2e:6c:8b:dc:0a:8b:c4:26:0a:73:b3:e0:5a:9b:40:20:
e6:93:44:a5:1b:61:a5:d3:0f:0b:80:cb:06:15:20:8d:f5:9a:
58:db:fd:01:66:7d:6b:c5:f4:ba:9a:a4:d8:3c:87:6e:82:1e:
9c:9e:04:95:df:36:ef:28:56:21:f1:35:41:de:36:4f:2b:b6:
e5:fa:ea:f2:94:00:7a:54:ec:7e:a6:69:c3:eb:80:c7:a6:66:
81:50:71:b8:bc:3b:37:85:22:c8:e3:ca:56:f4:12:a5:aa:e6:
24:93:69:1d:62:a3:ca:1f:1c:d4:5c:23:ed:35:6e:72:f3:51:
46:13:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:04:36 2024 by rpki-client on console-ams.rpki-client.org