Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/1-ZlWZ10oU-nAJiNe71TL2TydRq0.roa
File: 1-ZlWZ10oU-nAJiNe71TL2TydRq0.roa (raw, json)
Hash identifier: mEGxqh/lrC9OaIe6ryxx7etxlUpvS45ug0cH7rFLd4c=
Subject key identifier: F9:99:56:67:5D:28:53:E9:C0:26:23:5E:EF:54:CB:D9:3C:9D:46:AD
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 018CC9BC48D409A77B38663960F597734A03
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/1-ZlWZ10oU-nAJiNe71TL2TydRq0.roa
Signing time: Tue 02 Jan 2024 10:33:28 +0000
ROA not before: Tue 02 Jan 2024 10:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 93.183.100.0/22 maxlen: 24
93.183.120.0/22 maxlen: 24
176.123.184.0/22 maxlen: 24
176.106.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:48:d4:09:a7:7b:38:66:39:60:f5:97:73:4a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f99956675d2853e9c026235eef54cbd93c9d46ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:90:22:b0:ed:7d:bd:52:e8:8f:7c:61:cc:
e9:9f:0c:d3:98:7d:6b:8b:b2:a4:ac:f9:98:0b:4e:
10:98:7d:6c:d8:bb:f5:18:dc:b5:fb:f4:e4:90:8d:
ee:92:fe:00:23:c0:3d:8a:c5:e7:8e:9a:ee:90:12:
e8:8b:1f:4c:c0:8b:ff:9b:d9:f7:b8:91:1c:0d:40:
98:fb:be:2b:27:2a:d3:68:2a:55:50:53:11:ad:2a:
83:37:39:82:9f:b1:89:8e:59:db:77:41:58:cd:1c:
7e:17:6f:40:ec:91:49:53:c8:00:2c:a0:03:fc:37:
09:71:f2:09:a8:30:b8:0d:aa:50:ec:4a:86:7b:7e:
cc:f2:23:72:8e:c6:d9:44:93:2b:ce:1a:5b:a7:6f:
bb:39:0f:4f:e2:a9:31:ed:e0:d2:1f:0f:ec:ab:d9:
2b:3d:12:81:4d:40:41:67:a6:f4:d9:f2:1f:1d:8d:
c2:a5:bf:9e:e7:85:e1:ad:29:d0:93:87:f6:e8:98:
80:74:4d:4b:4f:32:e3:10:e4:d1:ed:c5:62:c3:44:
5d:73:ce:74:c4:af:1f:07:23:7f:7c:09:fc:1c:d6:
27:73:a1:bc:1f:1d:b0:da:8d:b8:f8:39:1b:dc:e5:
ce:3a:b3:5b:02:9b:22:fe:fc:c2:c9:58:f8:4e:fe:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:99:56:67:5D:28:53:E9:C0:26:23:5E:EF:54:CB:D9:3C:9D:46:AD
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/1-ZlWZ10oU-nAJiNe71TL2TydRq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.100.0/22
93.183.120.0/22
176.106.136.0/21
176.123.184.0/22
Signature Algorithm: sha256WithRSAEncryption
84:fc:d5:ac:c1:64:07:25:26:33:0c:fe:d5:66:ab:d7:3a:88:
54:5f:8c:35:f7:83:cf:e1:3b:e7:24:77:88:5c:e6:00:d5:2a:
2f:09:4a:ee:04:23:60:ac:2f:71:36:06:83:8a:c9:16:18:87:
9a:1d:30:a4:79:f6:76:47:49:80:cf:04:89:28:f8:03:46:b6:
ca:d4:62:9f:11:c6:97:73:54:eb:34:3d:c8:9a:9a:87:c4:9c:
dc:d9:d1:5e:1f:07:ff:5b:45:d8:d4:74:0c:31:1b:fa:a9:04:
19:4f:69:78:82:b6:4f:65:21:a2:ef:cb:94:63:b1:2e:3f:8c:
cc:b2:db:b5:47:63:15:2f:80:04:34:ae:da:40:84:8c:b7:3f:
c4:e6:c0:1f:eb:43:d8:c3:99:d7:a6:57:f3:a5:e1:16:c4:10:
e5:3f:51:16:0d:1d:1c:6e:ba:e5:7d:ba:14:60:68:7a:a5:4f:
d6:88:cb:a6:9a:b7:4e:8b:b6:c9:9c:55:fe:01:89:46:c0:40:
04:24:4b:64:35:ff:3e:c7:bd:c9:76:07:25:63:59:ad:a3:10:
5f:ee:ee:ce:c3:b4:e3:db:12:38:b5:79:e2:eb:8f:f6:0c:83:
fa:ad:3d:a1:23:26:d6:70:cb:7e:9e:2e:e2:f0:f6:61:5e:6f:
3e:40:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:46:11 2024 by rpki-client on console-ams.rpki-client.org