Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/93AC_YG_FUsM0NWpmTy5xN29Iu8.roa
File: 93AC_YG_FUsM0NWpmTy5xN29Iu8.roa (raw, json)
Hash identifier: Sh92gzer6lx+FTATUw2pdLOsOgVqQxlwfFWHocsNNfI=
Subject key identifier: F7:70:02:FD:81:BF:15:4B:0C:D0:D5:A9:99:3C:B9:C4:DD:BD:22:EF
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019170029372509D1B052C57283CE9DCE714
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/93AC_YG_FUsM0NWpmTy5xN29Iu8.roa
Signing time: Tue 20 Aug 2024 13:38:22 +0000
ROA not before: Tue 20 Aug 2024 13:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212516
IP address blocks: 185.184.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:02:93:72:50:9d:1b:05:2c:57:28:3c:e9:dc:e7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Aug 20 13:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f77002fd81bf154b0cd0d5a9993cb9c4ddbd22ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:85:b6:a9:25:58:09:43:da:6d:11:23:8a:
d6:ff:37:70:21:49:8b:a4:91:1f:e0:94:a9:bc:25:
f0:e3:8d:12:f2:cf:2e:a4:bb:84:1d:d4:bc:df:9d:
27:57:18:6b:a1:bc:82:ea:89:33:24:60:75:fd:e3:
a2:2f:0e:d2:e8:fe:ca:f9:bf:8e:35:e4:fc:8b:3e:
3e:0c:85:0c:4b:9c:79:31:96:f4:da:ea:74:58:34:
e5:83:c5:05:9e:a1:6d:0d:83:21:bf:9c:14:cc:e7:
ef:df:8a:9c:4d:2e:05:f5:35:3c:42:1e:21:d0:64:
89:c3:74:af:a2:48:b1:61:af:5c:fc:30:57:61:39:
41:11:df:4a:ba:9f:85:ac:1a:2e:bb:d5:4b:e9:86:
66:73:09:9c:45:a8:7b:bb:38:00:79:5e:47:c7:68:
a7:dc:8f:5d:cf:00:f9:70:ea:62:8e:44:11:05:c3:
0e:e6:c2:e5:41:88:82:db:40:c1:47:b5:bd:85:ee:
81:34:87:c7:ba:09:f4:38:dc:77:a0:8f:da:bd:24:
be:65:0d:f8:67:c2:65:8c:e1:1c:cc:a1:a5:93:70:
43:90:92:50:44:08:5a:4f:23:9b:0b:1c:63:f9:aa:
40:5c:38:4a:fb:79:68:54:97:13:d2:ba:fb:53:f6:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:02:FD:81:BF:15:4B:0C:D0:D5:A9:99:3C:B9:C4:DD:BD:22:EF
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/93AC_YG_FUsM0NWpmTy5xN29Iu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.221.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6d:7a:48:46:14:5b:52:1a:00:c1:77:ca:2e:42:21:da:ae:
19:ef:2d:dd:6b:04:bf:11:31:2a:22:08:18:43:71:90:35:55:
27:c3:a1:84:86:01:c5:22:f7:73:a9:2e:d2:e7:e6:f9:0a:e3:
f9:6f:a2:ba:14:85:7e:8b:3f:75:85:ea:69:cb:e4:98:06:98:
e9:1d:5e:29:3f:8d:82:91:4a:c2:c6:45:34:ad:3a:60:18:90:
24:cd:a1:2b:fe:04:ae:96:73:13:97:45:62:bc:17:5b:32:9e:
f4:13:fb:c8:11:71:30:31:b2:b0:45:e4:78:1b:36:fb:c1:c0:
9e:05:cb:28:29:ba:05:30:12:6c:d4:34:66:d9:b4:4a:4d:8c:
51:dd:00:9b:37:00:e0:0d:66:d0:df:79:70:36:3c:11:6d:ce:
e8:91:bc:54:24:99:c2:e6:ed:ba:3c:59:72:e6:4e:44:4a:89:
50:80:12:91:16:86:51:7c:cd:53:78:6f:a2:a4:ad:26:08:06:
99:36:7e:5f:ea:28:12:40:c0:61:5a:ea:96:85:33:68:a3:50:
95:7b:c1:03:f8:fe:4a:6b:01:75:04:57:06:b6:40:85:2f:51:
7f:00:d7:de:29:19:48:32:b2:12:0e:ee:b6:3d:71:62:30:ef:
6c:f1:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:29:03 2024 by rpki-client on console-fra.rpki-client.org