Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/KZq3wXxb5oWJX9XIXKoHMOiSrus.roa
File: KZq3wXxb5oWJX9XIXKoHMOiSrus.roa (raw, json)
Hash identifier: +/gQ5d0Ea0QWRZrbu1giGtnHU9e4ofMCVcowI8FhIog=
Subject key identifier: 29:9A:B7:C1:7C:5B:E6:85:89:5F:D5:C8:5C:AA:07:30:E8:92:AE:EB
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019299BB39E2E465B9303DA3398F6843BB51
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/KZq3wXxb5oWJX9XIXKoHMOiSrus.roa
Signing time: Thu 17 Oct 2024 09:07:17 +0000
ROA not before: Thu 17 Oct 2024 09:07:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206854
IP address blocks: 93.126.16.0/24 maxlen: 24
93.126.30.0/24 maxlen: 24
93.126.52.0/24 maxlen: 24
93.126.53.0/24 maxlen: 24
93.126.55.0/24 maxlen: 24
193.178.201.0/24 maxlen: 24
193.178.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:bb:39:e2:e4:65:b9:30:3d:a3:39:8f:68:43:bb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Oct 17 09:07:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=299ab7c17c5be685895fd5c85caa0730e892aeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:10:d7:1c:ca:8d:b9:8a:32:63:7e:38:3c:
4b:28:06:9d:5e:dd:20:01:68:92:02:ea:cb:88:b1:
3d:3c:07:69:ac:a7:e5:52:ef:b5:79:69:91:1a:74:
63:00:5a:8d:00:5f:08:70:0a:3f:a6:65:bd:e2:76:
6f:2b:90:c2:5b:ad:46:e9:61:02:48:8c:0a:c0:17:
1f:ef:10:fb:26:f3:42:02:a0:55:20:37:11:15:e4:
22:5a:79:e8:2b:3e:d0:08:fe:d7:12:f2:27:4c:6b:
4e:07:5f:59:bc:3c:70:4a:41:66:dd:17:cd:53:6b:
5a:69:ba:a6:2a:be:94:48:06:75:e8:ef:29:2f:19:
0a:1f:b7:f2:32:d6:b3:6a:6b:e2:65:0b:23:a5:8a:
60:f0:ef:f9:1d:88:11:7a:96:83:24:17:f3:3d:8f:
0d:9a:c9:52:55:34:86:35:68:4f:1e:4c:04:d7:58:
84:f9:07:b8:1d:a5:60:d8:03:84:15:4a:21:67:c5:
7b:d3:51:06:3e:cb:9d:05:8c:1a:ee:21:77:4f:95:
81:eb:80:bf:57:fa:0e:92:8f:e0:13:65:78:9e:71:
43:6e:3c:95:7d:99:92:19:96:c0:99:24:b4:fc:7e:
00:63:34:66:64:fe:9f:66:fd:8d:7d:86:40:20:67:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:B7:C1:7C:5B:E6:85:89:5F:D5:C8:5C:AA:07:30:E8:92:AE:EB
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/KZq3wXxb5oWJX9XIXKoHMOiSrus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.16.0/24
93.126.30.0/24
93.126.52.0/23
93.126.55.0/24
193.178.201.0-193.178.202.255
Signature Algorithm: sha256WithRSAEncryption
62:31:49:be:d5:4d:c0:37:4c:cb:32:d0:86:af:f6:b7:6e:e1:
99:53:e3:fc:ec:5d:d8:14:00:c4:cd:91:32:41:15:f8:0c:94:
0a:0b:a0:33:1b:59:29:6a:fd:4d:c3:f9:15:b9:cc:bd:ac:17:
ce:0e:24:1d:08:ae:48:d1:3b:3f:e9:f9:b5:ce:7c:39:a8:36:
87:e9:6f:d2:fd:7d:0b:b6:64:05:78:fd:c4:88:c4:d5:d2:bd:
8e:c3:7e:a8:f8:5d:cb:34:7b:ed:eb:e1:d9:30:6e:64:92:94:
e4:8a:93:c6:1d:a2:7e:18:4a:5b:ea:19:5a:ad:d9:09:81:45:
57:1e:78:4d:8c:1c:c9:01:6e:fd:be:5c:d3:06:d9:fe:49:ca:
ef:bd:5d:da:73:d2:4f:c0:8a:f4:7d:5f:38:8a:03:84:76:19:
c8:b7:9e:3f:ba:d6:fe:26:9b:7a:4b:75:2a:3f:16:1e:00:8b:
eb:76:55:74:17:7f:77:f1:48:f0:a8:51:1b:0b:33:aa:72:8c:
73:0b:68:da:96:f1:03:3e:fb:44:c8:88:8d:64:4c:f5:db:26:
5c:a0:7d:09:e9:60:4e:7b:35:55:8b:dd:36:fb:47:cc:50:64:
8f:08:ea:20:f8:7a:16:01:5f:db:81:b3:0e:1e:16:fb:a2:ab:
69:68:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:42 2024 by rpki-client on console-fra.rpki-client.org