Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/U9SWAYjr3MYqomuIc1OZe59XdkI.roa
File: U9SWAYjr3MYqomuIc1OZe59XdkI.roa (raw, json)
Hash identifier: Qzu00M4MK5vfGPRH9uYuFqeiYQ7EFUUuu4wSZ5GFcUE=
Subject key identifier: 53:D4:96:01:88:EB:DC:C6:2A:A2:6B:88:73:53:99:7B:9F:57:76:42
Certificate issuer: /CN=f34ae9ff58c936bb4b621bd13fa87c576dd873fb
Certificate serial: 019423D73704090064577160057C7C4FC1AB
Authority key identifier: F3:4A:E9:FF:58:C9:36:BB:4B:62:1B:D1:3F:A8:7C:57:6D:D8:73:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80rp_1jJNrtLYhvRP6h8V23Yc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/U9SWAYjr3MYqomuIc1OZe59XdkI.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47663
IP address blocks: 93.187.240.0/22 maxlen: 22
93.187.240.0/24 maxlen: 24
93.187.244.0/24 maxlen: 24
93.187.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/80rp_1jJNrtLYhvRP6h8V23Yc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/80rp_1jJNrtLYhvRP6h8V23Yc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/80rp_1jJNrtLYhvRP6h8V23Yc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jan 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:37:04:09:00:64:57:71:60:05:7c:7c:4f:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f34ae9ff58c936bb4b621bd13fa87c576dd873fb
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d4960188ebdcc62aa26b887353997b9f577642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:e7:ac:64:8a:51:77:78:98:26:f1:a3:79:
57:f9:14:44:f3:97:97:56:d3:c6:ea:6b:39:cf:12:
38:d9:01:97:87:b3:b9:94:57:0a:77:af:78:94:a0:
5d:31:4c:c0:91:4d:52:35:58:8a:41:83:5c:48:50:
dd:0f:ca:45:59:8d:1e:ff:34:00:a4:bb:68:a6:08:
ad:62:83:3c:b1:7f:74:16:3a:0c:f0:89:69:f4:fe:
79:69:a9:46:ca:e4:60:6d:0d:91:7a:32:18:17:e9:
fd:51:72:c5:da:a2:9a:d6:3b:36:21:1d:33:96:ee:
ce:16:d4:fe:f7:7e:4c:f1:c7:f9:8b:e5:de:f5:62:
b2:19:5d:9f:31:73:26:2c:58:e5:20:3e:aa:c5:7c:
ae:ca:c0:5a:5a:1a:d8:9f:5c:02:66:82:8c:01:5e:
32:4c:19:12:af:0d:15:b5:b1:38:87:e0:b4:f5:15:
ff:7e:a4:a6:8a:50:bd:57:13:23:24:4c:65:7c:c9:
5b:a4:5c:11:13:4c:4d:de:16:a8:68:59:2e:36:fa:
25:82:ec:eb:c4:b7:f5:ee:c8:4c:ae:8d:9e:6c:cd:
45:2d:6f:d0:7b:42:a6:db:99:b0:8d:ca:b3:98:2e:
93:92:f6:bb:39:32:95:02:5c:9e:8b:a6:b0:8f:b4:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D4:96:01:88:EB:DC:C6:2A:A2:6B:88:73:53:99:7B:9F:57:76:42
X509v3 Authority Key Identifier:
keyid:F3:4A:E9:FF:58:C9:36:BB:4B:62:1B:D1:3F:A8:7C:57:6D:D8:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80rp_1jJNrtLYhvRP6h8V23Yc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/U9SWAYjr3MYqomuIc1OZe59XdkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/79d860-09ec-47bc-92f4-2a6a06060b09/1/80rp_1jJNrtLYhvRP6h8V23Yc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.240.0-93.187.244.255
93.187.247.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4b:77:13:78:25:f2:a8:68:8b:87:63:9b:12:4d:5a:55:17:
d7:fa:7d:2d:d2:f1:20:b5:c2:9e:05:02:e1:e3:df:83:2f:1a:
37:00:82:5b:e5:bb:d8:ea:d8:a7:7d:f8:f9:71:70:ff:e9:3e:
d4:ac:d5:21:13:26:40:fb:85:5c:21:28:15:1d:3d:11:d2:e3:
77:6f:a8:26:86:3a:a7:48:97:dc:fe:16:d8:c4:98:11:6a:bb:
af:3b:e6:96:d2:43:e8:93:26:1a:18:bf:70:fa:87:91:ce:5e:
2c:65:e5:93:45:38:c5:20:b9:b6:1f:de:40:34:33:26:b1:bf:
cc:5d:d2:7c:26:24:f0:b5:93:05:9f:a7:e9:26:16:1a:80:1a:
07:5a:15:28:f3:f5:e5:06:aa:47:4d:7f:27:98:8d:2b:31:89:
ba:9a:84:3f:87:9a:e4:12:2c:49:97:24:fc:36:0e:50:89:b8:
05:a1:10:e6:f7:c7:34:38:08:cd:20:51:46:56:0e:88:28:a9:
62:28:b6:99:8f:37:50:ea:fa:61:83:5e:81:7c:c9:58:bd:df:
6a:a4:84:be:e9:4e:5c:ac:04:73:a9:85:38:03:60:be:1b:7c:
32:83:ff:c0:e1:07:b6:b3:4a:70:14:1e:a4:f5:97:6d:ec:f6:
05:bc:4f:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 14 16:59:21 2025 by rpki-client on console-ams.rpki-client.org