Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/e93hEgftjhNc4IxOt_YPJKYVLm4.roa
File: e93hEgftjhNc4IxOt_YPJKYVLm4.roa (raw, json)
Hash identifier: D+tmOnkMi/fC0hisvMihZ+UtGVW/sAUJPjAU8lSk4G8=
Subject key identifier: 7B:DD:E1:12:07:ED:8E:13:5C:E0:8C:4E:B7:F6:0F:24:A6:15:2E:6E
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 018CC794996F7E419F6FCE0EF5D4B1D3BB87
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/e93hEgftjhNc4IxOt_YPJKYVLm4.roa
Signing time: Tue 02 Jan 2024 00:30:53 +0000
ROA not before: Tue 02 Jan 2024 00:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205201
IP address blocks: 194.28.130.0/24 maxlen: 24
188.120.122.0/23 maxlen: 23
188.120.123.0/24 maxlen: 24
188.120.121.0/24 maxlen: 24
188.120.122.0/24 maxlen: 24
188.120.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:99:6f:7e:41:9f:6f:ce:0e:f5:d4:b1:d3:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jan 2 00:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bdde11207ed8e135ce08c4eb7f60f24a6152e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:d4:d5:91:9f:63:43:46:97:eb:49:f3:78:
7f:f3:3e:f8:6e:c9:a7:aa:35:aa:ab:03:cd:52:d2:
e9:15:1e:50:f6:5f:b0:ee:bf:6d:9b:f4:fb:61:fa:
b8:4d:eb:61:37:fb:dd:5b:40:94:18:16:04:8e:31:
12:38:26:27:c7:19:58:46:61:65:33:8e:4e:72:da:
46:a6:bd:7f:a3:83:97:a1:5a:96:10:71:16:49:05:
d7:1e:95:0e:cd:1c:05:85:8e:12:99:6b:5c:5a:34:
61:77:0b:6a:83:17:7a:28:a3:33:6f:52:6d:02:b9:
ee:83:b5:3c:bf:70:30:9b:b4:2c:98:fa:2a:2c:0e:
09:65:50:68:d5:4f:66:54:48:5e:88:0b:3e:11:8e:
1a:f5:a3:ae:d8:e4:34:48:83:98:ff:a4:32:de:4f:
48:8d:27:b1:7f:d0:2f:c7:a2:a7:3c:66:42:9e:df:
c5:21:4c:37:13:ce:2f:81:6d:6a:90:bc:b4:43:1a:
82:ba:89:92:71:11:99:41:43:a5:e6:8e:53:a2:7a:
d6:f4:74:b4:67:1c:e7:a2:a2:25:ae:b7:40:c3:36:
55:c0:09:42:05:c7:fc:e9:6f:af:79:93:3b:68:81:
4e:43:34:6d:40:21:92:eb:d9:51:ba:e8:97:35:5e:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:E1:12:07:ED:8E:13:5C:E0:8C:4E:B7:F6:0F:24:A6:15:2E:6E
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/e93hEgftjhNc4IxOt_YPJKYVLm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.120.121.0-188.120.123.255
188.120.126.0/24
194.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b9:6f:c9:5d:62:5c:6b:86:84:4b:4a:ab:ce:72:f5:28:98:
b4:32:fe:d4:f8:36:d8:c5:6f:a3:d0:8b:04:31:95:2a:a4:5e:
86:f9:65:4d:f8:cf:eb:b8:28:ee:a3:20:8c:7e:03:a5:32:30:
c3:09:d0:d1:13:4b:31:c5:c4:08:c3:bf:26:48:94:99:e7:53:
8b:29:8a:bd:d2:ca:08:5c:2c:63:e0:a4:76:ab:42:b2:1e:cb:
05:c6:11:47:b0:d9:bf:3d:a8:97:f5:ae:e4:6d:63:cc:f2:73:
b8:19:eb:cf:1f:0e:bd:a0:55:e9:cd:b6:93:29:48:53:98:2a:
0f:10:8e:cf:c5:48:37:2a:2b:2b:d4:ca:58:cd:b1:10:6c:0a:
e8:ef:4e:73:98:ff:a9:a4:36:06:a6:47:42:c0:7f:d2:8f:42:
75:cd:aa:ee:35:aa:75:9a:89:37:15:a7:69:40:eb:0d:2b:53:
a1:bc:98:38:f2:d4:45:7d:6e:46:40:e5:8e:95:2e:0d:bc:07:
f5:86:51:1c:9d:9d:e8:17:08:e5:94:ab:62:32:83:72:03:29:
d5:2c:08:5c:2a:66:97:98:68:4f:d8:1b:3e:2b:a6:ad:8c:21:
19:d3:81:7c:a9:de:66:1e:d1:2f:6b:7c:84:33:26:9b:a3:a3:
2a:bd:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 04:40:41 2024 by rpki-client on console-fra.rpki-client.org