Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FdZrQ9hvXrjWaHSrTOcqSkbmh7w.roa
File: FdZrQ9hvXrjWaHSrTOcqSkbmh7w.roa (raw, json)
Hash identifier: C4wmyvnjJocC0toGl7h4Kn/P+u/Gd0vBmN0GDaAgSA0=
Subject key identifier: 15:D6:6B:43:D8:6F:5E:B8:D6:68:74:AB:4C:E7:2A:4A:46:E6:87:BC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2DD95A2528CF183A1BCE42F67C29
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FdZrQ9hvXrjWaHSrTOcqSkbmh7w.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209433
IP address blocks: 93.115.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2d:d9:5a:25:28:cf:18:3a:1b:ce:42:f6:7c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15d66b43d86f5eb8d66874ab4ce72a4a46e687bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:0c:20:8e:10:5e:0c:ea:ed:53:d5:cd:27:
93:ee:10:1a:c7:b3:c7:ab:df:8f:71:6a:91:da:a0:
1f:7b:3d:f4:47:c9:28:3d:5a:07:c0:e8:3b:f2:ef:
c9:af:eb:4c:c1:27:00:86:03:0f:fc:87:e0:aa:ba:
de:2f:b0:c7:bd:6f:0f:02:d7:26:c7:cc:7d:57:4b:
07:41:16:08:fc:03:7e:f2:76:a3:72:80:3f:01:40:
e5:fe:6f:f7:7b:7b:55:9f:ac:1b:ee:3a:94:6c:8e:
2c:77:fe:67:e2:69:80:72:fb:3d:18:a7:b7:83:11:
e4:35:cc:44:0c:6a:0c:1d:94:8d:8b:bd:7b:bf:b1:
1e:45:74:ab:c5:1c:93:f3:48:83:5b:b5:8e:7a:c6:
36:d4:49:1e:ec:81:28:31:72:8b:75:ed:bb:be:4c:
3a:7c:bd:df:46:93:66:2d:f4:4b:9c:80:2f:73:6b:
1b:c5:18:5c:58:e2:cf:c7:af:b1:2d:8f:d6:83:bd:
a7:c6:13:57:09:36:f0:b5:3b:ad:67:3e:a8:62:6f:
91:a8:ff:b1:36:28:28:5d:c8:77:36:6c:b6:34:29:
ad:ee:a8:0a:01:15:9f:ea:7a:a0:43:92:8a:49:30:
9e:85:3c:d1:d1:b3:20:f9:9d:54:ea:19:10:7b:38:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:6B:43:D8:6F:5E:B8:D6:68:74:AB:4C:E7:2A:4A:46:E6:87:BC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FdZrQ9hvXrjWaHSrTOcqSkbmh7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.100.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4f:98:70:ab:44:43:81:29:d1:81:78:68:c0:a9:1c:90:69:
6b:fb:2d:99:80:0c:3f:9b:ec:17:f3:f8:a7:8d:eb:04:b9:d5:
43:ba:1d:58:93:cf:14:61:db:74:ba:17:1d:1e:ca:81:7b:a7:
e9:f6:b0:8d:68:26:58:04:d7:c1:73:29:50:a8:91:a5:3e:7c:
88:e2:e4:0b:d5:84:6e:12:b3:80:6e:0a:71:3a:0c:7d:61:a5:
86:19:46:01:9a:61:c6:94:22:37:68:02:ad:b5:19:06:6a:62:
c6:d5:3a:6d:a2:8d:7d:e2:2e:8e:fc:16:f3:ed:1c:02:b3:79:
0c:ef:2c:a3:1b:3f:8b:3d:a1:08:20:26:ff:b3:1f:93:1e:3a:
c9:0d:ce:52:8a:0c:b6:d5:9b:09:58:3e:b2:c8:38:c9:6f:f3:
ea:91:df:a8:b1:b7:d8:89:5f:e1:3d:82:de:41:55:24:90:58:
dc:31:78:74:5b:3b:01:45:66:dc:be:51:92:41:06:c0:91:52:
05:31:13:63:f1:b7:a0:f4:1a:bf:e3:ce:d7:ee:e2:94:fb:eb:
44:e3:45:a5:88:b5:8c:e4:3b:27:8b:a9:39:88:d4:2a:58:3a:
54:0e:e7:21:68:a4:10:25:3d:b8:5e:46:2f:9c:20:2e:ec:f7:
46:8b:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:39 2024 by rpki-client on console-ams.rpki-client.org