Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/35f_ExqWlgA30aXvA3fAcJ_qtDA.roa
File: 35f_ExqWlgA30aXvA3fAcJ_qtDA.roa (raw, json)
Hash identifier: c0Ivmu64VDJsn1Z/81ir/mTbfoBN5OW8ckBxfhzSoQ8=
Subject key identifier: DF:97:FF:13:1A:96:96:00:37:D1:A5:EF:03:77:C0:70:9F:EA:B4:30
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 018CC56E4264962D8FD128AECD4A5F8C597E
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/35f_ExqWlgA30aXvA3fAcJ_qtDA.roa
Signing time: Mon 01 Jan 2024 14:29:46 +0000
ROA not before: Mon 01 Jan 2024 14:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133499
IP address blocks: 92.118.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:42:64:96:2d:8f:d1:28:ae:cd:4a:5f:8c:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df97ff131a96960037d1a5ef0377c0709feab430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:d7:6a:72:0a:ad:c1:44:c0:c2:53:55:24:
5b:c5:74:19:aa:12:bb:f7:93:d3:24:98:c5:6f:06:
a2:ef:22:45:e9:2b:17:34:37:5a:db:04:25:f1:97:
e0:b6:47:05:6c:98:2f:4c:eb:35:63:85:16:db:a7:
26:56:0b:89:aa:e3:8f:7c:c6:5c:c4:16:da:cf:b3:
a6:94:98:e1:5e:03:27:21:9c:de:90:fb:32:22:39:
19:99:45:6c:1d:68:b3:8f:e2:92:81:6a:25:74:16:
ed:c9:ec:83:b9:ea:00:b6:72:a6:8f:e3:e3:cf:4e:
89:bc:8d:ce:52:8c:32:bd:4c:6c:7b:ce:37:a5:44:
63:59:61:6c:2a:9e:b8:06:28:4c:4e:48:f6:e5:d3:
89:d5:16:6b:8a:25:97:a9:0d:8e:87:ed:f2:8c:3a:
00:8b:aa:5e:28:eb:45:16:54:19:bf:90:74:e2:bf:
e2:71:fe:34:8c:d2:42:1b:3f:bb:0a:e5:ff:c8:9b:
31:02:65:88:4f:02:82:3d:e7:ee:52:e4:62:72:80:
19:9b:ad:17:d6:85:2e:50:83:6c:ca:ae:c9:69:d4:
9e:8b:b8:cf:26:15:e7:08:2e:05:b7:35:79:57:2f:
7b:21:e9:6f:c1:e6:46:70:de:79:09:a2:1b:2b:2c:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:FF:13:1A:96:96:00:37:D1:A5:EF:03:77:C0:70:9F:EA:B4:30
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/35f_ExqWlgA30aXvA3fAcJ_qtDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5c:82:6c:96:17:6a:a2:22:22:36:c3:19:7d:f2:c0:c6:98:
a0:49:8f:cb:62:cf:a1:4b:57:5e:c3:90:86:e9:b2:81:e7:3b:
c2:16:7b:50:fd:26:38:ab:3b:a8:e0:a7:1a:45:eb:ee:4a:93:
71:52:6b:d3:4a:c3:28:e8:c4:85:c2:ab:d8:51:86:f3:c1:12:
34:3d:c0:8c:7e:a9:41:27:de:bc:27:7f:14:3d:92:c4:c8:d8:
ac:5b:cd:e6:47:89:1d:b6:86:49:fa:93:bf:f6:34:b3:14:c4:
10:f1:18:e4:e9:b3:c2:20:4a:0c:4e:43:07:fd:29:fc:b8:0e:
93:59:9e:c9:4c:2d:e7:c7:99:7c:de:4f:59:03:19:04:67:87:
27:29:50:a3:b0:51:4a:64:7b:cf:13:27:ae:b3:41:68:8e:35:
cd:59:7b:49:75:09:69:57:f1:90:cf:99:85:b1:27:b0:b0:4b:
95:5c:36:3b:c3:e9:6c:83:df:0e:9f:a1:92:25:21:da:10:31:
84:8e:46:83:13:55:5f:12:33:7a:52:43:d5:c8:6a:2a:ab:9c:
6c:5c:1b:04:2a:45:c6:ac:30:47:fb:80:0e:33:6f:d7:d1:42:
2b:f5:4e:8e:71:15:5a:20:02:15:10:74:33:68:b7:f2:67:ab:
c1:5f:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:36:17 2024 by rpki-client on console-ams.rpki-client.org