Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jwCok7A_wGfl9mpUgmdNDNbw65A.roa
File: jwCok7A_wGfl9mpUgmdNDNbw65A.roa (raw, json)
Hash identifier: b1h9IX54540qXNJx0zyK0w9vZHJEnexnIfWoQPdPKhs=
Subject key identifier: 8F:00:A8:93:B0:3F:C0:67:E5:F6:6A:54:82:67:4D:0C:D6:F0:EB:90
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2EDA4DE0FA840D05D02617551AEF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jwCok7A_wGfl9mpUgmdNDNbw65A.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211180
IP address blocks: 93.119.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2e:da:4d:e0:fa:84:0d:05:d0:26:17:55:1a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f00a893b03fc067e5f66a5482674d0cd6f0eb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:4b:fe:12:c0:65:f9:d8:44:b9:80:a1:1d:
3c:be:ea:5c:9c:81:2c:f1:c6:31:f0:3d:d4:8f:cc:
39:6d:2c:ea:d9:88:5a:9b:73:4a:99:ee:f4:80:c1:
2e:ed:d7:b1:5d:f9:cf:0f:92:17:1c:32:43:25:fe:
13:0c:16:03:49:31:b8:33:37:73:a3:28:fd:71:a9:
44:f0:c8:bc:8c:40:19:0d:52:b5:b5:ed:df:28:4f:
0a:e6:85:9f:0e:14:c9:a4:fe:cb:d4:48:cb:f7:2a:
44:ec:9f:08:4a:b1:18:c2:88:2c:97:fd:19:bd:68:
a0:33:df:9b:c9:a7:d8:e4:ba:98:cb:ea:d4:97:9f:
1e:4f:86:fc:b1:5e:c4:cf:2e:ef:21:f4:7c:b2:5b:
8c:e6:ff:e4:de:9a:30:cd:bd:56:fb:4e:b7:d8:68:
c1:fe:17:b6:7b:1c:45:d0:ab:fa:c4:88:8c:1a:17:
dc:50:c7:96:f2:bf:ec:66:39:22:01:4d:6c:fd:24:
51:d7:3c:fd:19:72:80:b6:08:3e:16:fd:fd:bf:13:
4a:08:d4:07:21:d4:33:5a:75:c2:b2:fa:90:7f:ac:
c0:fb:d9:ca:89:16:2a:4a:56:73:32:b3:86:d7:d1:
e1:ab:2b:ba:fc:f5:01:3e:5c:a0:2d:45:cf:f8:9f:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:A8:93:B0:3F:C0:67:E5:F6:6A:54:82:67:4D:0C:D6:F0:EB:90
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jwCok7A_wGfl9mpUgmdNDNbw65A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.104.0/24
Signature Algorithm: sha256WithRSAEncryption
44:58:1c:03:1c:78:61:6a:e6:fb:ab:44:76:96:6e:81:a8:a8:
f6:f5:09:d4:59:5f:dc:aa:b8:8e:39:76:5a:42:d0:04:95:25:
19:b2:e2:b4:37:a5:81:5b:2c:56:39:68:66:f7:f9:70:8b:06:
f0:06:8f:0d:cd:9c:d4:7a:dc:2f:c1:c9:e2:c9:f8:1e:7b:20:
1a:8c:bd:a4:1a:21:04:cd:9d:ae:a6:80:e6:17:5b:34:77:7c:
be:4e:9f:aa:d3:0a:8a:0a:f2:9b:be:bf:09:b6:47:c3:c9:e4:
6d:82:cc:86:4e:55:5e:cf:23:4b:72:15:5c:8c:b5:8c:cc:3e:
7f:c3:c4:78:a8:41:e2:c7:84:c5:b0:0e:8a:d0:a3:03:92:69:
38:1f:c8:a0:5a:f3:f0:5d:02:42:dd:c7:15:dd:73:67:32:9c:
07:d7:d6:d7:c0:2f:01:e4:29:c4:7f:56:69:56:e5:2a:3b:7b:
d6:75:a6:f1:cf:7a:da:de:2a:3c:ab:ad:ea:8a:56:8a:92:90:
26:6a:d1:6f:c4:8f:f8:37:6c:0c:96:2a:89:54:fe:4b:7f:b8:
61:dc:71:bc:80:de:15:23:6f:0d:6a:01:9c:1e:6e:e0:e3:45:
08:12:6f:ac:b1:35:a0:91:ec:3d:fb:4c:47:13:aa:21:ca:01:
07:b4:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:20 2024 by rpki-client on console-fra.rpki-client.org