Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/mynRyqM6BkhzjdfNXvL7Gd-mr70.roa
File: mynRyqM6BkhzjdfNXvL7Gd-mr70.roa (raw, json)
Hash identifier: AwSiYzSr+KWSwDLmsL7h+/Qnt/qlZxPSn3qCxGUvlKQ=
Subject key identifier: 9B:29:D1:CA:A3:3A:06:48:73:8D:D7:CD:5E:F2:FB:19:DF:A6:AF:BD
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018CC6499B889EB7015EE2AFE8A559936F57
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/mynRyqM6BkhzjdfNXvL7Gd-mr70.roa
Signing time: Mon 01 Jan 2024 18:29:21 +0000
ROA not before: Mon 01 Jan 2024 18:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210019
IP address blocks: 93.105.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 22:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9b:88:9e:b7:01:5e:e2:af:e8:a5:59:93:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 18:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b29d1caa33a0648738dd7cd5ef2fb19dfa6afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:68:f0:ce:e4:56:45:be:79:0f:38:a9:ee:
e5:33:3f:6b:20:32:22:86:dc:d0:5f:81:99:19:61:
72:71:c8:5e:63:98:7a:fd:db:05:55:1b:8c:66:b4:
d4:0c:e4:f6:35:69:b9:0d:ae:56:74:0a:80:c5:f4:
48:0c:9d:a4:50:62:6f:e4:c8:11:c6:74:c5:6f:db:
46:bb:4f:93:7f:e1:d3:7c:4c:97:06:9f:fa:02:1d:
9c:9a:be:26:2d:e6:90:a1:27:5b:b2:2b:d3:c9:24:
b3:68:52:f1:9d:8c:3b:72:e9:9b:df:37:0a:6d:54:
a9:ed:9a:ff:4a:2d:e2:c1:1b:e4:fd:fd:1e:ed:30:
de:52:1c:b7:65:fc:5e:62:02:a4:5f:37:9a:08:f3:
46:bc:d7:63:31:b9:88:f6:29:aa:59:8b:2c:71:f0:
81:7d:44:6d:cd:20:d3:54:d6:78:33:f7:c5:6d:e5:
49:25:7d:88:fd:51:17:90:14:1b:1d:d7:4f:14:cc:
16:9f:54:56:a6:5a:a0:61:4b:c9:19:7c:49:14:14:
8f:0a:3a:32:03:c9:e4:56:40:88:c7:27:59:a8:42:
e1:5a:72:fe:87:65:be:da:4d:d4:a3:77:08:4e:0f:
ba:b2:cd:83:d7:90:8f:7b:6f:44:06:84:36:0f:40:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:29:D1:CA:A3:3A:06:48:73:8D:D7:CD:5E:F2:FB:19:DF:A6:AF:BD
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/mynRyqM6BkhzjdfNXvL7Gd-mr70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d0:86:65:2e:8c:b3:a0:c8:55:ef:a2:69:ea:3c:69:97:a0:
1d:67:c7:50:aa:80:4c:6a:46:e6:9c:ae:38:40:bb:37:1b:11:
35:8d:cf:77:d4:2c:59:04:46:96:f3:76:5f:01:1e:90:ed:43:
0c:9d:ee:4c:29:92:d3:66:0d:80:50:f0:6b:64:a3:e4:b7:74:
3a:0e:ae:74:5d:ea:16:bf:a7:f2:10:03:07:28:e8:d0:bb:47:
17:f1:fd:1f:22:0c:08:1b:e6:73:f9:d9:5c:4b:10:cb:c6:97:
8b:ba:6b:10:4f:49:45:b0:4d:a5:1f:d6:83:fe:41:a9:6a:09:
85:04:2b:e5:94:a2:00:d6:c4:4c:fb:9b:69:e2:a8:00:62:20:
1f:f2:0f:b5:47:b2:68:34:0b:01:8d:45:7b:61:00:e9:09:48:
84:ea:16:7d:3c:a8:92:6b:36:47:dc:1b:38:da:cd:4c:2e:74:
b4:2c:5a:fc:3e:e8:77:52:56:37:4c:04:d7:a6:3d:be:15:6a:
91:eb:c1:f5:a5:9d:ac:da:de:73:ab:e6:a5:be:b6:b7:62:aa:
35:7f:19:af:6b:e6:9d:49:cd:05:35:4a:92:d1:5e:6a:b7:03:
71:63:95:b6:45:6b:c5:6b:53:9b:2c:5a:26:d0:2b:4b:fe:0c:
08:24:d2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:33:57 2024 by rpki-client on console-fra.rpki-client.org