Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/h0Qr7Y2QoKuc_EQTcM8mmkEoxwg.roa
File: h0Qr7Y2QoKuc_EQTcM8mmkEoxwg.roa (raw, json)
Hash identifier: bdlpnxAxVKv1DBcWEfkBPfnPFY5LBx1HFAyoZb5SWKQ=
Subject key identifier: 87:44:2B:ED:8D:90:A0:AB:9C:FC:44:13:70:CF:26:9A:41:28:C7:08
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01918DCEC1248C835072AA3E6D4C7917A076
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/h0Qr7Y2QoKuc_EQTcM8mmkEoxwg.roa
Signing time: Mon 26 Aug 2024 08:30:22 +0000
ROA not before: Mon 26 Aug 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215703
IP address blocks: 93.113.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:ce:c1:24:8c:83:50:72:aa:3e:6d:4c:79:17:a0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 26 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87442bed8d90a0ab9cfc441370cf269a4128c708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:84:22:83:11:bc:10:d5:6b:2e:05:66:76:
08:3b:6e:62:13:55:b3:9f:d4:eb:b7:63:5d:7a:3c:
b5:4b:61:60:68:e1:47:0e:cd:15:b2:b0:08:fb:cc:
be:3f:ba:bb:4e:7e:ab:84:b3:40:ba:96:0b:87:24:
53:49:70:20:a0:2b:15:ad:b7:62:08:60:4d:4f:82:
d5:4b:51:4a:d7:db:2f:a9:41:73:2e:e4:7b:e9:86:
1a:40:6a:6f:a5:ef:c0:f0:bb:78:db:01:fa:b7:a3:
ff:43:f7:07:00:ab:c2:54:2a:ef:c8:a9:ca:9d:9a:
20:8b:1c:95:a0:98:64:b9:09:bd:9f:2f:32:d3:aa:
aa:ec:7e:24:ea:6a:5f:fd:63:c1:5f:59:ca:4a:d2:
b3:3e:93:14:e2:6f:d7:fd:a7:43:a4:83:bc:56:ac:
e4:1d:f9:d0:2f:2d:34:cb:52:cd:da:6f:31:3e:57:
a2:59:bd:67:75:9a:f0:89:4b:44:2e:36:2b:07:0f:
e4:f5:43:68:b4:56:48:35:70:76:3b:1e:e3:ba:89:
af:54:6d:e7:56:cb:51:82:49:84:ed:8f:c2:6b:a2:
e1:a3:38:ec:b0:da:b4:b9:01:ea:14:a4:84:6f:83:
48:7b:d2:4c:d3:aa:47:4b:4d:a9:cd:48:ff:2b:ee:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:2B:ED:8D:90:A0:AB:9C:FC:44:13:70:CF:26:9A:41:28:C7:08
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/h0Qr7Y2QoKuc_EQTcM8mmkEoxwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.180.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2d:25:1a:8f:65:22:3e:99:91:ea:ba:53:07:86:1b:a4:ce:
53:be:2f:46:8a:a8:a6:72:c5:29:b9:f1:ee:bc:7f:11:bf:63:
2b:ea:8a:c5:9c:f2:d7:98:aa:d7:4d:9a:1f:23:63:4d:09:02:
e5:56:cf:b1:ba:48:01:61:88:43:76:c0:e2:30:1a:65:36:09:
72:30:7c:26:64:19:d7:e3:91:8d:50:c5:91:24:b3:d5:15:ac:
75:18:e5:cc:3f:72:a1:b8:f0:15:9d:df:0c:2c:d5:93:5d:24:
20:06:f7:ba:8d:c4:18:d3:89:1f:c8:7f:e7:e4:f8:e5:d6:3b:
0d:28:54:6a:58:92:c8:99:f8:01:65:c8:70:3f:fd:3e:79:99:
d9:52:26:72:1e:37:ff:eb:0c:e4:af:f2:c0:65:77:66:31:20:
99:3e:38:f6:88:c6:54:6e:09:e2:1e:15:8e:4d:6c:4e:4f:f2:
66:5d:22:d5:1f:a9:5d:b4:ba:58:cc:ab:b7:29:0d:21:26:9f:
6a:09:60:da:57:27:2c:b5:3a:13:ff:ed:5a:d3:47:63:bd:29:
8e:c3:54:ea:87:bf:5a:22:f2:b5:9d:a5:b5:08:22:a4:70:d0:
fd:78:93:11:6f:c7:75:b7:58:c0:13:0f:cf:f9:c1:85:c5:cb:
c1:a7:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:43:54 2024 by rpki-client on console-fra.rpki-client.org