Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/8ABoHAI4uhweHi6cnfy5SFuWroQ.roa
File: 8ABoHAI4uhweHi6cnfy5SFuWroQ.roa (raw, json)
Hash identifier: mzdcRTlWZ/R5fe36a3B8KdWQRz2vEuFL1Bdp5TOgJrM=
Subject key identifier: F0:00:68:1C:02:38:BA:1C:1E:1E:2E:9C:9D:FC:B9:48:5B:96:AE:84
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 018CC726D585782352970F31F3D58DE8CDAC
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/8ABoHAI4uhweHi6cnfy5SFuWroQ.roa
Signing time: Mon 01 Jan 2024 22:31:00 +0000
ROA not before: Mon 01 Jan 2024 22:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49785
IP address blocks: 93.159.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d5:85:78:23:52:97:0f:31:f3:d5:8d:e8:cd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 22:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f000681c0238ba1c1e1e2e9c9dfcb9485b96ae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:ae:88:85:86:1c:84:25:d0:61:39:38:0e:
11:10:b4:8a:4a:9b:b0:7f:7d:f0:2c:aa:1c:3d:1a:
08:63:83:21:1e:00:9a:21:ca:e8:d9:f6:83:1e:bc:
ba:4d:a4:ff:98:99:78:ab:97:8e:20:8b:fe:f2:1b:
69:f8:e4:76:08:47:40:d7:0f:4f:a9:6f:d1:21:90:
94:25:26:ed:69:40:ab:df:e9:b1:61:8c:e3:da:f6:
41:c2:f7:67:fa:b1:3a:81:05:04:f8:e7:d5:a7:1f:
b3:8a:2b:04:c6:f9:10:b1:5b:bc:ba:cb:31:3b:e7:
c2:2e:11:02:52:b1:60:13:ec:d3:16:ea:10:68:9d:
8f:52:aa:92:9f:86:ea:4f:14:c8:a2:fd:de:2a:36:
09:34:69:3e:b5:2f:d1:94:3c:5f:5b:b0:fa:e7:ec:
dc:f5:19:34:be:99:f0:24:c4:d3:a2:e0:87:dd:51:
40:46:bb:15:62:d5:2a:ed:4f:d6:99:9c:7f:0c:bd:
f0:da:2f:2a:66:45:64:05:aa:d5:bc:2c:06:c0:6c:
1e:c0:5e:cf:cb:b5:a3:45:d0:fc:9e:b3:1b:47:59:
fb:51:17:d7:44:ea:42:c4:2e:2a:0d:97:63:1d:32:
c3:7c:fd:0a:50:9c:8b:a7:a5:04:56:1f:43:89:7a:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:00:68:1C:02:38:BA:1C:1E:1E:2E:9C:9D:FC:B9:48:5B:96:AE:84
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/8ABoHAI4uhweHi6cnfy5SFuWroQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:a8:27:91:9e:dc:58:7c:ce:c5:0c:c5:cf:3e:97:52:cd:3f:
a8:a9:db:c3:87:a8:da:02:a4:26:73:bc:4d:cc:94:7c:a6:55:
86:bc:ae:37:28:67:e3:98:98:97:23:49:fa:6c:a8:e9:77:6c:
bf:6c:b4:0b:2d:e0:74:bf:7c:2f:04:5d:46:38:94:a5:25:8e:
84:88:65:4e:c7:66:de:92:e1:bf:cb:c6:89:fd:b2:55:12:60:
7e:e8:fd:d8:3b:d9:98:af:11:f3:6a:e1:eb:51:bb:4d:4f:bb:
11:82:b1:16:ef:b2:c1:fd:ef:e3:16:e0:d2:55:fd:ce:da:83:
c1:a2:85:13:90:7b:ea:90:36:f7:03:13:66:1f:47:83:f9:e5:
df:11:4f:f5:15:bb:a1:12:8f:26:ea:f5:c4:24:8c:b3:e6:b2:
5c:8e:70:e5:8b:e9:d8:13:6b:5c:17:5a:0f:de:ac:b9:c1:d0:
01:d1:6c:04:63:52:47:d6:6c:4e:ac:f3:53:10:f5:79:9a:c5:
4c:1a:50:74:08:6c:ed:a3:3c:66:1a:68:9a:96:c6:97:84:08:
0f:a5:1d:57:07:d6:31:5a:db:41:8b:19:9c:8f:63:ff:6f:fa:
c8:e5:4c:4e:be:6c:21:17:67:70:b9:21:35:4b:f4:c7:d6:de:
25:62:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:16:08 2024 by rpki-client on console-ams.rpki-client.org