Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/xZ26ns_1kDHZ6uBhgP0Ykgwyrgk.roa
File: xZ26ns_1kDHZ6uBhgP0Ykgwyrgk.roa (raw, json)
Hash identifier: aHHB4PS4ysoKd3giF6e1vK4TqqMZY3nj5Sf4M+UA81k=
Subject key identifier: C5:9D:BA:9E:CF:F5:90:31:D9:EA:E0:61:80:FD:18:92:0C:32:AE:09
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 018F771266F00AAD4C10165572934A41E078
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/xZ26ns_1kDHZ6uBhgP0Ykgwyrgk.roa
Signing time: Tue 14 May 2024 12:27:25 +0000
ROA not before: Tue 14 May 2024 12:27:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48813
IP address blocks: 93.115.102.0/24 maxlen: 24
93.115.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:12:66:f0:0a:ad:4c:10:16:55:72:93:4a:41:e0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: May 14 12:27:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c59dba9ecff59031d9eae06180fd18920c32ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:f0:44:b4:fb:9f:e0:1b:c9:2e:52:7b:89:
56:46:9d:4b:5f:8b:73:c0:43:96:16:74:a7:4e:68:
0c:ef:50:35:a7:8f:96:43:0b:15:c6:cc:7e:2f:1c:
4d:b9:f7:af:bb:54:98:1d:86:94:04:96:7e:c3:69:
71:1e:dc:b9:2f:14:da:4f:8d:32:b5:b0:bb:5c:e5:
21:f2:aa:ef:2a:5b:d5:4a:6b:96:09:3c:04:5d:b6:
8e:30:ea:9e:8d:0c:a5:66:10:dc:94:7e:95:8b:7d:
5c:a5:22:0a:77:59:d2:ea:6e:ba:6d:52:cb:a2:3c:
5e:ee:e0:11:14:8e:3d:12:c5:2d:06:db:a9:3f:a7:
7a:20:67:ae:ea:5e:72:5c:3b:86:7e:7f:4b:0a:07:
b6:77:21:31:4a:c6:5d:95:da:d0:c9:68:29:13:3b:
d1:a4:1c:f2:f1:f9:85:b7:3b:0e:63:ba:d7:a1:3a:
f4:7d:dc:78:10:42:61:ed:d1:73:68:bd:de:b6:10:
0a:d0:91:c7:2a:59:06:cc:e5:0e:9f:dc:15:8a:14:
88:0a:cd:c5:19:f4:18:80:49:97:cb:b1:f6:cf:a5:
07:d2:8b:06:1c:7c:32:82:9f:a5:5e:f4:01:6f:f9:
f0:e6:bd:81:06:de:26:18:fc:ce:91:6e:d7:97:67:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:BA:9E:CF:F5:90:31:D9:EA:E0:61:80:FD:18:92:0C:32:AE:09
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/xZ26ns_1kDHZ6uBhgP0Ykgwyrgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.102.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:04:d5:6a:0f:75:0e:00:34:da:88:d7:57:0d:b3:7a:70:9f:
50:75:cb:ac:e9:bd:99:dc:95:26:83:48:db:a5:f4:28:10:90:
82:af:43:17:92:f2:ed:24:36:89:02:6b:2b:ae:ca:77:0b:cd:
3a:ac:c0:f5:44:41:a2:25:30:7f:1e:23:f9:07:a1:03:41:c9:
a6:80:43:ef:26:66:59:c8:da:37:db:98:61:a8:af:ce:57:a0:
41:7c:e4:d6:69:b4:e9:c1:43:2e:af:71:08:32:18:94:02:30:
8b:0b:6a:23:24:df:6d:26:9d:05:2b:c0:65:67:e1:f1:b5:3e:
7d:5a:c4:be:cf:c6:6b:14:5e:1f:f4:9e:90:1e:05:f4:96:69:
bb:2b:5a:3e:51:5a:fc:1a:74:32:bd:f2:48:c5:4c:91:4d:74:
d5:35:e6:6f:dd:12:9a:fa:43:eb:47:6c:52:cc:83:be:5c:13:
33:52:a7:b7:bc:66:6d:bd:e7:eb:ac:f8:a7:f0:b3:24:53:be:
c2:36:01:12:1e:03:59:da:65:ce:4a:dc:d5:9d:1f:8c:64:42:
45:3f:66:37:8a:84:53:3b:19:33:f4:08:1f:e7:72:25:27:ab:
bf:ea:77:56:06:59:d9:50:ce:26:44:bb:ac:dd:96:52:de:fe:
05:89:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:04:10 2024 by rpki-client on console-ams.rpki-client.org