Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/k94io_FtUbMo2NSp-RxBt85QId8.roa
File: k94io_FtUbMo2NSp-RxBt85QId8.roa (raw, json)
Hash identifier: ZqjrS/bO0A3Njaa0d3rolvnyU8yYvNos+hQcgXxq2ZI=
Subject key identifier: 93:DE:22:A3:F1:6D:51:B3:28:D8:D4:A9:F9:1C:41:B7:CE:50:21:DF
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 01921DFBB89143632AEE3A7B613465429003
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/k94io_FtUbMo2NSp-RxBt85QId8.roa
Signing time: Mon 23 Sep 2024 08:24:48 +0000
ROA not before: Mon 23 Sep 2024 08:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214356
IP address blocks: 94.159.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:fb:b8:91:43:63:2a:ee:3a:7b:61:34:65:42:90:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Sep 23 08:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93de22a3f16d51b328d8d4a9f91c41b7ce5021df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:55:1b:30:b6:1d:65:06:30:e4:62:e7:04:
0b:89:a0:60:e0:d7:7a:8a:4a:41:a2:25:84:01:c1:
1a:c1:50:1d:73:f5:f5:ce:75:1d:67:d8:fd:d5:82:
d7:75:2f:99:d5:8e:f7:a1:ca:4b:4d:5c:2d:58:7b:
e6:13:f7:99:aa:b9:72:30:09:60:65:93:48:60:e1:
28:40:f4:10:14:3b:f1:04:6a:1d:45:ed:30:62:bd:
ca:ed:b9:b3:c9:a1:59:1a:46:60:43:96:f8:1e:1b:
68:3c:7f:86:1f:85:b3:14:fd:3d:ee:b9:c7:32:3d:
c2:99:a7:a1:4f:8d:0e:d7:f9:41:95:78:25:e8:50:
dd:2b:e3:d2:2a:6a:20:42:3c:bd:67:c0:3d:0a:3d:
71:52:05:b0:69:5c:84:eb:56:d1:01:c7:a7:4b:78:
53:86:76:b6:7e:14:0c:ab:37:cf:16:58:36:1c:c1:
c7:ba:bf:e3:ef:24:4e:07:37:54:dc:5c:3a:f1:ee:
95:6b:5d:1f:c7:d7:95:91:e2:a5:9f:13:02:fe:3a:
86:90:34:1f:f6:a5:86:f2:09:75:8d:83:c5:39:0a:
07:6a:7c:bf:b7:19:e9:6b:b7:5e:d0:7a:3c:52:c0:
8a:15:51:1b:38:a7:15:4a:41:70:b8:cb:12:07:d7:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:22:A3:F1:6D:51:B3:28:D8:D4:A9:F9:1C:41:B7:CE:50:21:DF
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/k94io_FtUbMo2NSp-RxBt85QId8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.81.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fb:dc:ec:c2:25:54:fa:81:da:9c:f3:f9:ca:dd:4b:30:10:
3e:af:0a:1a:2a:a6:21:76:ee:16:51:f6:fc:3a:3b:74:80:79:
95:2f:1e:69:d6:8b:a9:7b:fc:77:dc:5d:a0:15:94:0e:44:4b:
22:0a:bb:74:1d:af:78:75:83:ed:23:2a:29:fb:33:a9:7b:07:
c4:bd:eb:8c:40:01:48:6d:2d:4f:b6:5c:41:65:e0:fd:5f:0c:
72:65:6d:ae:af:71:7e:dd:ae:e2:7d:2b:3a:c8:72:01:67:47:
23:e6:89:51:92:32:99:1e:e4:5c:7d:3b:f5:9a:d8:08:ee:56:
f3:a5:56:40:cd:f0:db:50:f0:ce:48:35:55:2b:f2:a0:44:d6:
04:99:f8:5a:96:06:0d:dd:63:71:c5:47:24:0f:f9:51:d3:64:
d6:49:0b:7c:b3:2e:66:a0:f1:00:03:fe:f7:1f:4c:b6:44:22:
af:0a:45:88:2e:66:10:fd:7b:4d:33:8c:ad:be:2d:a7:95:96:
53:ca:0d:f3:85:d3:06:1d:8d:54:05:16:79:54:0d:21:e5:66:
16:aa:9d:7e:03:b2:75:70:b0:23:a3:b5:f5:03:1f:f3:7c:aa:
69:c0:86:31:1d:f7:38:6e:d6:e0:7a:c2:34:0c:5d:3c:54:4e:
62:f5:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:48 2024 by rpki-client on console-ams.rpki-client.org