Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/CQcSmsbasRrqtIm9hGYbVGdXB-U.roa
File: CQcSmsbasRrqtIm9hGYbVGdXB-U.roa (raw, json)
Hash identifier: FC1/g9bPSRuS+2q+PCte4hOc3bHwwYUMhTNiAk72AYs=
Subject key identifier: 09:07:12:9A:C6:DA:B1:1A:EA:B4:89:BD:84:66:1B:54:67:57:07:E5
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019169A23115FE8850212EFD4BCA1D9E4F2C
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/CQcSmsbasRrqtIm9hGYbVGdXB-U.roa
Signing time: Mon 19 Aug 2024 07:55:22 +0000
ROA not before: Mon 19 Aug 2024 07:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 93.152.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:a2:31:15:fe:88:50:21:2e:fd:4b:ca:1d:9e:4f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Aug 19 07:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0907129ac6dab11aeab489bd84661b54675707e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:a0:ca:31:af:a0:6a:55:5e:fe:b6:06:df:
0f:53:56:cd:b0:0d:96:89:b6:93:5f:42:61:26:2a:
78:46:af:9c:86:40:ac:46:33:2a:c0:ae:33:1d:80:
0e:05:58:a8:65:f1:00:d9:f8:3d:5e:12:79:e9:50:
e1:35:93:6f:0e:ee:e8:d4:03:33:b7:77:f9:19:25:
64:c8:a1:20:79:a3:5f:e2:3c:36:9f:a2:0c:38:63:
ba:e4:61:a3:e6:44:b7:d8:5a:5a:65:f6:83:bc:dd:
e8:ce:93:37:0a:e9:be:ad:e2:78:0f:e5:f7:f0:81:
34:00:3d:6f:6a:e5:d1:3d:74:60:c9:92:c0:ca:9a:
1e:76:a9:48:c9:ee:68:60:9a:b4:f2:f8:95:43:de:
16:13:59:47:48:1c:5c:d2:75:e2:a2:5e:c8:95:11:
fc:3e:e0:a7:67:d2:55:33:87:4a:bc:f8:f4:d6:ef:
69:31:ae:c6:de:2e:e0:33:a8:06:28:27:35:3a:53:
d5:85:ea:f9:6f:73:37:a0:c7:2e:9f:94:58:8d:96:
a0:b7:fe:4a:4f:29:d9:08:fd:0a:77:01:3c:54:3a:
b4:2c:28:5b:db:76:41:36:6e:49:5b:c5:00:91:39:
d2:e2:58:cf:97:0e:41:ed:88:c9:81:17:46:ad:a7:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:12:9A:C6:DA:B1:1A:EA:B4:89:BD:84:66:1B:54:67:57:07:E5
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/CQcSmsbasRrqtIm9hGYbVGdXB-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.234.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cc:25:b1:f5:aa:10:fd:23:cf:c9:af:db:4f:09:fc:51:9a:
89:8a:c9:e5:fb:52:21:3c:55:89:87:d1:5a:cb:39:a6:18:b6:
7e:aa:3b:dc:b6:e2:56:22:6f:90:fc:38:7b:0e:25:13:2f:56:
b5:75:2e:71:65:ee:bb:95:dd:f2:33:f4:31:02:80:fc:9a:11:
c4:77:0d:8a:4f:26:1f:25:66:0c:26:15:75:dd:45:77:48:36:
65:95:9f:f5:7b:13:2a:46:a4:86:44:de:36:1b:8f:2f:d7:81:
96:be:1b:fb:a4:d3:10:be:9d:96:36:80:70:bd:cc:7b:1c:5b:
9f:d4:3c:0e:50:20:9f:f7:08:63:a1:cd:2d:2d:cd:23:26:d4:
ec:74:93:3b:fe:bd:2a:e8:7a:0f:26:dc:29:50:23:79:62:1a:
b3:6e:27:eb:4d:31:19:44:3d:2c:a8:eb:4a:52:68:07:ad:cb:
63:26:31:b9:8a:37:87:48:93:a7:50:fa:98:3f:e8:c4:8c:bc:
7b:62:29:92:17:f0:45:64:7b:a4:45:98:00:3c:df:78:f6:92:
93:23:65:91:f6:72:42:61:28:8c:5d:b3:e0:b8:ec:f8:5b:98:
58:7c:6b:03:74:58:d7:74:22:9d:da:79:c4:51:5e:2d:e0:3f:
d5:a2:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:29 2024 by rpki-client on console-fra.rpki-client.org