Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/r6KVKHwG7ZmmDdN6EMlWydalHCI.roa
File: r6KVKHwG7ZmmDdN6EMlWydalHCI.roa (raw, json)
Hash identifier: UQ/Ntt5n7b/D0x6E+3XPTTOLtzEIrhQQ+7PSQWqquUg=
Subject key identifier: AF:A2:95:28:7C:06:ED:99:A6:0D:D3:7A:10:C9:56:C9:D6:A5:1C:22
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 018CC94D828DBFA7886F10D9386960D9BED7
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/r6KVKHwG7ZmmDdN6EMlWydalHCI.roa
Signing time: Tue 02 Jan 2024 08:32:29 +0000
ROA not before: Tue 02 Jan 2024 08:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31463
IP address blocks: 93.177.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:82:8d:bf:a7:88:6f:10:d9:38:69:60:d9:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jan 2 08:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afa295287c06ed99a60dd37a10c956c9d6a51c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:0b:5a:cc:7c:08:95:58:f4:e1:f9:21:54:
66:05:da:49:e6:60:ee:e7:90:64:f7:4b:a7:ef:ba:
4b:aa:55:18:0f:62:d8:48:b3:27:c0:0f:19:4c:cf:
25:b8:09:bf:52:cf:ae:78:78:d8:3e:d2:fa:ad:ba:
c1:bd:b2:a2:b0:ea:55:b7:6b:2b:13:49:6c:1e:94:
a8:f1:89:1a:7e:2b:94:07:71:52:98:c8:7d:e7:05:
68:b7:56:2e:a9:32:b9:62:25:29:4d:99:c1:4c:0e:
50:47:76:b4:5b:68:c4:ef:17:ab:d0:dc:42:ef:12:
89:5e:41:ef:6c:21:3f:2c:75:e7:3d:65:23:c2:b1:
60:19:18:ce:4e:7c:43:66:ee:74:19:b6:b5:66:10:
89:7f:a8:64:ba:c6:08:06:8b:41:96:27:ba:bb:2e:
e5:f1:7b:83:83:1f:97:db:10:4b:60:bc:0e:62:2e:
90:4c:fb:a6:44:2c:41:5a:b8:8d:62:b9:2e:55:a0:
33:6a:1e:db:e4:2e:07:1b:48:11:de:a2:ec:37:b9:
b9:5f:39:d8:13:df:7a:d1:37:b2:1c:9a:b5:93:9a:
2a:ab:2a:b2:cd:3a:d4:06:d7:a6:2b:7d:26:6f:ee:
4c:53:71:66:94:f3:0a:d0:24:06:a7:0e:b6:a4:86:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:95:28:7C:06:ED:99:A6:0D:D3:7A:10:C9:56:C9:D6:A5:1C:22
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/r6KVKHwG7ZmmDdN6EMlWydalHCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.127.0/24
Signature Algorithm: sha256WithRSAEncryption
48:09:41:11:2e:18:f6:e7:29:af:e5:a3:8f:32:b0:16:57:c2:
a4:88:67:39:94:fd:f6:99:0f:89:b6:42:20:1d:b6:2b:69:9d:
03:11:48:4b:7d:3e:a1:0d:ee:82:d1:73:2d:94:eb:20:a8:ec:
87:af:0b:71:0e:69:e0:7d:68:2e:a1:0a:c9:6d:07:a9:e1:4c:
68:f8:33:ba:d0:c5:52:da:28:a3:1b:1a:78:c1:87:ce:26:1a:
5b:d3:d9:70:46:0e:dd:e9:08:db:97:6d:0c:0b:37:81:2b:63:
8d:2d:a5:23:bb:21:79:f1:88:ff:72:5f:aa:8f:25:c9:2a:2f:
db:ea:4d:b2:47:4d:6e:4b:e7:48:64:f6:ca:7e:2b:01:9b:1c:
08:a3:2c:e8:ea:3f:15:de:3b:70:0f:1c:d2:20:3b:e9:03:aa:
08:21:8c:41:79:a0:b5:5b:40:76:e4:01:24:0e:a9:58:db:eb:
6c:7b:b3:87:55:56:e6:2c:ed:97:8d:3e:0e:c4:7a:14:b6:67:
3e:92:85:20:6a:87:36:c8:94:de:95:8d:ec:50:d0:5b:d9:94:
2f:d3:a8:ea:49:13:ae:f2:24:3d:18:27:9b:d1:35:d3:5b:11:
ed:c2:2e:29:12:0b:1f:22:1b:68:f8:a8:b6:27:6f:81:27:ca:
56:ca:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:57:00 2024 by rpki-client on console-ams.rpki-client.org