Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/RktWHJI5sV5vGwnMzZb6aQhAGcc.roa
File: RktWHJI5sV5vGwnMzZb6aQhAGcc.roa (raw, json)
Hash identifier: HaDmjE2Zxvi0Rz7RSa4E7oCQFh8GuLvfDJiGGwL5y+g=
Subject key identifier: 46:4B:56:1C:92:39:B1:5E:6F:1B:09:CC:CD:96:FA:69:08:40:19:C7
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 018CC726D8BC8C411895FFD976D2BBB80253
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/RktWHJI5sV5vGwnMzZb6aQhAGcc.roa
Signing time: Mon 01 Jan 2024 22:31:00 +0000
ROA not before: Mon 01 Jan 2024 22:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205384
IP address blocks: 93.159.181.0/24 maxlen: 24
93.159.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d8:bc:8c:41:18:95:ff:d9:76:d2:bb:b8:02:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 22:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=464b561c9239b15e6f1b09cccd96fa69084019c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:f9:a9:20:fc:d8:c7:ba:af:b9:36:9c:ed:
55:e9:0f:2e:5f:95:6f:0a:09:0c:64:de:00:50:22:
c0:1b:7d:d9:8e:a4:97:01:40:ba:20:23:07:93:20:
54:33:9e:29:3f:5a:23:12:70:26:89:5d:68:8f:a7:
13:07:28:dc:d9:68:c5:8d:c4:d8:89:e4:6e:10:f0:
2c:9a:45:6f:ed:da:d8:5c:ff:20:15:0a:be:6c:2c:
53:4e:5a:b0:b4:90:0a:9d:b0:53:4c:a1:1d:43:90:
be:21:b0:8f:20:8b:9f:6c:3f:38:a2:63:87:17:13:
95:78:c2:79:55:4f:0f:13:0c:02:1a:1e:d1:16:0a:
0e:13:6a:71:7f:66:3e:22:a5:72:e9:75:4d:9b:68:
a5:d7:67:ec:3b:ed:27:7d:c7:9a:c5:06:2e:48:0c:
fe:3a:7d:7b:63:cd:81:37:b7:d3:20:85:d7:43:99:
f2:6d:a0:dd:77:dd:89:bc:f9:a3:50:b1:33:d9:f7:
31:b1:50:a5:08:f1:29:86:ac:59:44:7c:7a:10:81:
16:28:94:d3:49:61:3e:a7:ac:a0:54:48:be:ec:e1:
16:be:44:1a:0e:08:bf:c5:45:1f:2a:a0:f1:e6:3c:
1c:23:a3:d5:7c:e4:94:cd:19:c0:d3:76:8f:45:62:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:56:1C:92:39:B1:5E:6F:1B:09:CC:CD:96:FA:69:08:40:19:C7
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/RktWHJI5sV5vGwnMzZb6aQhAGcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:01:84:ea:bd:ce:a6:fc:d5:94:a3:3d:8e:74:a3:8c:df:65:
2d:77:03:c5:5c:86:75:00:19:83:e6:be:ab:9e:dd:a0:1a:7d:
4e:0f:94:db:ff:27:f3:0d:1e:3a:88:9d:c3:06:3a:bf:3c:95:
ab:63:bb:1f:49:54:f1:d8:aa:32:8e:5e:46:4e:15:06:ca:37:
e5:78:cf:6e:83:03:c6:f8:95:1a:c2:56:08:b0:5b:9e:a2:cd:
97:da:cd:4c:86:9e:1c:9d:3a:9c:cf:b7:37:77:57:ed:e0:b9:
73:f9:bd:44:64:65:ba:03:06:77:1d:b0:12:04:66:25:67:ec:
97:e4:1f:22:66:ea:4c:88:fa:a8:d4:83:fe:c9:c5:e0:3e:8d:
72:b3:12:de:91:b6:46:3d:18:e5:89:08:8f:68:a2:b6:91:67:
2c:d8:54:99:2a:60:a6:a1:40:b8:6e:e7:95:04:ba:e1:79:01:
c4:08:1a:f8:24:6f:8c:5b:af:ee:0d:ff:69:96:6e:bf:34:9e:
29:48:72:7c:1e:66:42:bb:51:5f:d5:78:91:21:e6:8f:5b:30:
fa:1f:1c:7e:57:7f:8d:55:fc:c0:c1:7a:7e:bc:6f:66:77:93:
5c:e0:19:b9:f7:8c:0f:c2:c2:a8:d4:aa:a3:8d:7a:7c:f3:c0:
e2:86:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:21:21 2024 by rpki-client on console-ams.rpki-client.org