Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/z3BCgrIDN9hBwc62yHiRKBw7Vgk.roa
File: z3BCgrIDN9hBwc62yHiRKBw7Vgk.roa (raw, json)
Hash identifier: dJprmZ/0Eh8w6+Ua2ZI5IqZH/IsTDKPjaExObVLr0sg=
Subject key identifier: CF:70:42:82:B2:03:37:D8:41:C1:CE:B6:C8:78:91:28:1C:3B:56:09
Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial: 018CC26D2D1F5640B27DFBD428370084D2DA
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/z3BCgrIDN9hBwc62yHiRKBw7Vgk.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215996
IP address blocks: 93.189.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2d:1f:56:40:b2:7d:fb:d4:28:37:00:84:d2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf704282b20337d841c1ceb6c87891281c3b5609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:fa:10:e3:5e:5b:ee:e1:8e:0b:68:2a:11:
44:72:13:01:9c:a3:f3:ca:97:02:c3:af:e9:16:69:
87:0f:04:8c:42:e5:0b:5f:9b:21:f9:5b:1c:58:f9:
2e:21:36:10:8a:7a:08:b2:ac:8a:51:c9:28:6c:92:
a5:05:fd:6d:19:73:21:d5:95:64:8e:00:cc:b7:1e:
29:24:bd:94:28:a1:95:5b:37:6d:72:a2:6b:c2:59:
a8:5e:cb:76:32:36:06:f9:54:8a:d3:eb:aa:c6:7e:
88:bb:56:08:a8:dc:fc:88:0d:c0:b4:fa:2b:85:aa:
97:4e:a9:fd:90:1b:26:63:fd:ba:aa:97:0b:5f:8f:
32:82:4c:b5:bd:d5:78:42:95:5c:3c:76:c8:ac:e3:
09:21:5a:28:4f:cb:98:e8:9d:bc:5e:d7:52:4a:d7:
5d:36:cc:b1:2e:ad:5b:4b:25:08:f4:16:5b:1c:73:
5b:52:7d:7d:87:c9:ff:4c:dc:76:3a:24:0c:78:da:
ab:1a:5b:44:dc:78:fc:90:6f:de:94:6c:78:0e:43:
1f:93:f5:e7:7d:a4:9a:6d:b6:12:3e:31:73:45:9a:
6d:e5:a9:47:f7:54:f0:b1:a0:91:fc:b5:89:8a:6a:
df:9d:91:0f:57:d7:d6:9a:50:6d:26:b5:72:f5:1c:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:42:82:B2:03:37:D8:41:C1:CE:B6:C8:78:91:28:1C:3B:56:09
X509v3 Authority Key Identifier:
keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/z3BCgrIDN9hBwc62yHiRKBw7Vgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.152.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2d:62:1f:d0:21:93:f5:2b:22:51:cb:1e:42:11:00:c2:fe:
1a:b7:f0:71:4a:14:9f:49:86:99:e1:d4:80:26:44:6d:8b:a9:
14:ed:6c:5e:05:42:82:68:79:b3:bd:08:73:7b:d1:1f:28:01:
59:b3:50:34:30:8a:9b:cd:c8:e6:f9:2c:e0:64:7b:dd:fa:65:
43:c9:76:10:58:18:a6:7c:f3:d3:ae:b6:5a:99:f4:95:5c:72:
56:09:a2:28:9a:8b:88:6b:a4:c5:be:14:17:54:1f:8e:2d:da:
fc:af:36:e9:90:c0:f5:96:b1:43:73:a0:da:31:97:a0:b1:57:
2e:77:8e:da:0c:fe:e8:1c:55:12:be:54:44:b2:ce:54:43:69:
ba:76:87:cb:30:8f:81:29:0b:3a:3c:96:e4:29:88:94:a7:a1:
9d:31:c4:6e:dc:29:c4:5a:bd:33:1a:0e:4f:ea:e9:84:be:38:
6a:fc:cd:03:00:12:68:15:9e:98:f6:22:60:24:df:2f:3e:07:
0f:52:7b:c2:2a:ae:71:ad:a3:54:7d:58:7b:a1:15:a4:b8:68:
91:0f:f3:1a:a6:1e:50:95:a8:67:59:59:9e:da:42:da:df:1b:
1f:90:fd:33:31:c4:cc:b4:c5:76:49:75:4c:71:18:e3:f0:63:
e2:c9:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:36 2024 by rpki-client on console-ams.rpki-client.org