Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2epQ9EWXxaK7_EsdU76R-hZcH8I.roa
File: 2epQ9EWXxaK7_EsdU76R-hZcH8I.roa (raw, json)
Hash identifier: 0qWeMF2Y65RIaz9eb7IREBULTYRmIc+kr4psuI98MYw=
Subject key identifier: D9:EA:50:F4:45:97:C5:A2:BB:FC:4B:1D:53:BE:91:FA:16:5C:1F:C2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC79522EA8BB29A12C4708B7EFD351374
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2epQ9EWXxaK7_EsdU76R-hZcH8I.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55286
IP address blocks: 93.92.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:22:ea:8b:b2:9a:12:c4:70:8b:7e:fd:35:13:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9ea50f44597c5a2bbfc4b1d53be91fa165c1fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:4c:d1:51:5a:69:af:44:a9:a6:ec:e0:26:
8a:32:36:a9:e7:9b:d0:07:1c:e3:66:be:91:e0:d7:
d9:d0:b9:58:d4:d7:b8:1f:62:cf:99:08:ad:05:a3:
f9:13:bd:a8:b3:74:fa:32:ab:d2:3f:09:55:5a:08:
ca:99:5d:1c:a6:ff:53:e1:75:ad:22:ea:5b:84:18:
5c:c6:f4:8e:9b:a2:f2:af:e0:e0:77:d7:d9:80:c3:
74:a7:c4:41:bb:34:51:5d:52:26:ce:00:5a:b7:1b:
f9:67:96:c6:27:d2:d1:4e:6d:d4:28:2b:bc:37:2d:
f4:64:9e:e1:8d:c1:b7:40:e4:86:17:9e:1d:aa:71:
8a:95:d7:b0:73:94:92:61:04:3e:db:09:65:2f:aa:
aa:f2:fd:81:4a:11:c8:42:03:19:c8:6f:97:a8:3a:
3a:1f:37:76:57:ed:da:d0:69:e9:cb:bf:b0:18:ab:
2f:7c:f8:9e:32:fa:d9:e8:16:bb:68:1a:46:f4:68:
ae:c0:77:d5:18:f4:8f:73:16:d4:d8:46:51:07:5a:
82:70:e3:b2:2c:63:de:cf:30:11:86:94:2e:4d:43:
c3:5b:2a:a9:93:25:c1:68:7a:2b:24:6a:46:9d:ae:
63:ca:9d:03:f8:58:d2:cc:38:e3:04:45:90:87:1b:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:50:F4:45:97:C5:A2:BB:FC:4B:1D:53:BE:91:FA:16:5C:1F:C2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2epQ9EWXxaK7_EsdU76R-hZcH8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:11:75:c7:6d:64:ab:b0:86:c3:79:fa:f2:18:d2:cf:25:36:
b9:a1:05:1d:85:0f:16:07:34:7f:8c:83:fe:87:ac:0b:0e:b0:
51:44:06:6e:2d:53:6a:5e:4a:df:a7:9a:14:73:fd:c4:1b:19:
1a:1d:59:1f:e5:1d:13:c8:71:bb:d1:81:28:2e:49:58:cc:ca:
00:9c:0c:19:e8:b4:92:59:2e:cb:84:30:ea:18:6f:35:f5:05:
7d:54:2f:68:bf:45:f7:9a:f8:f6:6a:ac:2a:ad:47:57:3f:2e:
13:36:b3:1f:9e:dc:20:2a:3e:69:76:bb:35:5d:27:c2:35:c8:
8e:1b:fb:e1:45:32:bf:f6:8c:4a:22:92:a9:1e:0d:e7:21:7a:
36:e8:b3:05:76:c6:22:69:48:50:65:3a:f0:47:53:e3:e0:85:
cf:87:be:c1:1a:50:f2:38:fe:dc:82:87:09:80:b1:34:31:46:
cb:ea:44:39:7e:4c:56:10:fc:50:b8:ae:6e:78:43:44:56:ce:
be:9b:31:78:d5:1d:a7:7c:d5:8e:b9:54:a5:6a:63:61:5a:0f:
c5:88:59:0d:7d:85:2f:92:73:e0:07:6e:25:32:04:1b:6b:c8:
85:8d:db:30:af:90:82:e4:4b:e3:48:30:3f:d0:9e:9b:2a:c7:
5c:59:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:56:16 2024 by rpki-client on console-ams.rpki-client.org