Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Exjpf4gA6XoGHT1JkVDeDwHXy3s.roa
File: Exjpf4gA6XoGHT1JkVDeDwHXy3s.roa (raw, json)
Hash identifier: LLcO8rD5U00yZ4t/jzDemqSMmmS27a6rZJFkYQdUZ5k=
Subject key identifier: 13:18:E9:7F:88:00:E9:7A:06:1D:3D:49:91:50:DE:0F:01:D7:CB:7B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018DAC5D25E85A682219FA9450AA44F3B09F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Exjpf4gA6XoGHT1JkVDeDwHXy3s.roa
Signing time: Thu 15 Feb 2024 10:43:22 +0000
ROA not before: Thu 15 Feb 2024 10:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215498
IP address blocks: 93.92.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:5d:25:e8:5a:68:22:19:fa:94:50:aa:44:f3:b0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 15 10:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1318e97f8800e97a061d3d499150de0f01d7cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:2e:2d:ef:88:7b:1d:95:8e:fd:af:d5:0e:
48:6a:09:80:c5:1a:73:cc:0d:0d:69:b1:ce:68:6c:
59:b9:06:34:91:a0:80:fe:fc:05:0a:9c:5b:be:5c:
8b:ca:ed:a3:a9:a7:1b:d0:52:f8:27:6d:2d:cb:e3:
71:50:97:09:83:f9:e8:9a:68:62:09:5b:29:ea:9d:
6a:da:46:0f:87:e9:65:45:cb:3e:75:41:59:75:91:
c9:62:32:66:2f:4f:db:bf:5c:9a:09:f9:30:de:23:
e2:9d:da:7c:eb:7e:bd:5a:d8:8c:94:80:29:02:49:
1b:91:57:46:97:f0:b8:d9:a1:03:59:b8:db:83:30:
de:d4:cb:6d:ce:c8:f8:20:42:d1:d3:06:ca:29:f4:
1e:6c:46:46:05:c2:d8:69:cb:bc:1e:95:b2:67:d4:
4b:30:be:5b:6e:91:f5:ee:ce:2a:1d:a9:d6:10:38:
52:b0:32:b5:b7:c4:15:8d:0c:33:ac:61:4a:82:e4:
38:5e:bc:04:50:16:d2:fc:14:6d:20:7b:e7:4b:ae:
fd:1e:ad:39:3e:da:48:84:cb:b9:be:e2:e3:11:7c:
f8:ba:47:cf:55:f9:e5:5e:91:0c:59:27:2b:44:06:
58:f8:da:76:08:1a:ca:73:a0:5c:62:13:a0:f3:d0:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:E9:7F:88:00:E9:7A:06:1D:3D:49:91:50:DE:0F:01:D7:CB:7B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Exjpf4gA6XoGHT1JkVDeDwHXy3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.114.0/24
Signature Algorithm: sha256WithRSAEncryption
30:03:69:f2:a0:04:cf:60:8a:82:fe:92:90:d8:17:c4:ce:4e:
29:57:ef:59:85:2e:f4:ad:e1:41:3e:96:9f:5a:e7:af:b0:76:
06:f9:01:fc:b4:1d:60:db:42:12:20:f3:9e:e6:ab:fd:70:c2:
41:65:f5:fb:d4:f9:57:2d:d8:b4:d6:9d:63:00:54:c0:16:36:
2a:7d:9c:80:86:16:f8:40:46:21:08:12:89:ca:6d:d9:4c:50:
da:8f:f5:bb:0a:f4:36:28:a3:77:e6:4f:af:1e:66:81:1d:4a:
d7:03:70:53:32:dd:12:9c:f7:3a:21:cf:ef:a1:34:aa:d5:01:
f6:b1:73:80:12:d3:fb:d7:d8:58:35:ec:57:02:5c:fa:ee:2a:
32:fa:3c:3a:0b:9d:7b:94:48:0b:d5:df:33:f8:a3:13:5e:d5:
dd:b4:af:a4:cd:fc:84:02:15:4d:13:a2:6f:8e:84:a4:73:d0:
13:c0:7d:02:4d:aa:49:c3:3b:71:1f:1c:67:ea:d5:dd:15:57:
76:de:31:b2:24:2d:06:c6:70:7b:36:0d:94:43:dc:0d:ae:84:
62:2c:b2:cd:0e:79:88:7d:46:02:7f:49:5a:c2:d2:93:3c:00:
2d:c1:a8:f5:21:0a:b5:0a:7c:fb:f0:3e:e0:e0:c2:86:14:56:
85:58:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:50:14 2024 by rpki-client on console-fra.rpki-client.org