Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/Cafhb3Vnz7RSyF3DQCNEYFiN6wo.roa
File: Cafhb3Vnz7RSyF3DQCNEYFiN6wo.roa (raw, json)
Hash identifier: E9QuOpsJt3WWAQmPTsAaJVKm4LJn8B+KPrsU7qRdbWc=
Subject key identifier: 09:A7:E1:6F:75:67:CF:B4:52:C8:5D:C3:40:23:44:60:58:8D:EB:0A
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 018CC7273DBEBBFC5D2774CC8F2BA06ED206
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/Cafhb3Vnz7RSyF3DQCNEYFiN6wo.roa
Signing time: Mon 01 Jan 2024 22:31:26 +0000
ROA not before: Mon 01 Jan 2024 22:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203865
IP address blocks: 93.94.0.0/23 maxlen: 23
93.94.2.0/24 maxlen: 24
2a03:1e02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3d:be:bb:fc:5d:27:74:cc:8f:2b:a0:6e:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jan 1 22:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09a7e16f7567cfb452c85dc340234460588deb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:33:97:9f:ca:dd:11:79:5c:e5:04:80:26:
5c:bc:43:7f:38:36:95:c9:9e:d7:7d:8f:47:ec:3c:
aa:92:e0:0d:61:7d:b9:ec:81:a6:3b:ee:dd:23:86:
c8:a2:be:ad:9c:e9:27:bf:8f:d0:98:ff:59:ac:53:
06:28:a1:e9:44:0e:c4:18:ed:1c:06:37:e1:17:6d:
b7:72:2e:cd:b4:11:e6:f9:4d:f6:b4:cb:06:fd:50:
56:e6:61:f4:ab:45:32:0f:a0:5f:f4:5a:f7:36:e2:
64:53:0d:db:65:c1:9e:1c:39:b7:fa:d9:ee:81:7c:
8e:8c:e3:76:bc:e2:32:32:c0:cd:b9:ec:70:80:cc:
ae:c6:a3:8f:72:6a:a8:c7:d4:ba:c8:b0:75:66:6f:
a3:ec:35:51:4b:97:bc:66:a5:15:61:9b:05:f0:e6:
bf:76:cc:28:ac:0f:93:e3:5e:f8:2d:f3:de:7c:fc:
4b:a6:e2:49:15:9e:5b:2a:12:0c:12:8a:3b:b1:9c:
8d:57:18:2b:26:35:da:53:5e:5e:99:c2:48:22:6e:
5f:29:62:d0:79:ed:c6:60:03:db:07:0a:57:f0:0c:
6c:33:b5:2a:6e:98:ef:e4:c7:d2:68:67:66:a8:4e:
ef:bc:86:54:e5:c4:4d:11:41:8f:78:c6:15:b0:31:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:E1:6F:75:67:CF:B4:52:C8:5D:C3:40:23:44:60:58:8D:EB:0A
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/Cafhb3Vnz7RSyF3DQCNEYFiN6wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.0.0-93.94.2.255
IPv6:
2a03:1e02::/32
Signature Algorithm: sha256WithRSAEncryption
2d:32:2b:ae:23:fd:c1:b3:b7:b5:87:98:d4:b8:cd:2a:dc:2f:
6f:37:ed:47:0d:71:bb:31:98:7b:af:90:1c:b9:67:04:6f:7d:
a2:35:5e:be:e1:5d:24:1d:81:e7:b9:9a:74:ec:3a:75:5d:ae:
e3:b8:08:d6:ba:78:e4:82:76:85:19:2a:ac:09:9f:fb:f0:ae:
ce:af:24:09:52:e9:31:d8:5a:0a:0e:da:05:77:d7:e7:d4:5d:
a1:e7:aa:6e:c2:06:df:a6:81:3f:da:7f:29:f1:52:e5:00:a1:
ff:19:c1:43:f9:82:ce:a9:f0:47:dd:29:86:a9:18:4e:8b:63:
dd:a8:06:33:d3:7c:23:60:55:fb:04:8f:f4:f2:38:ee:fd:aa:
96:96:4e:e7:9a:ff:01:15:62:55:40:e2:cb:da:87:dc:29:d5:
35:15:52:8c:f2:22:97:3b:8d:d5:ef:5e:a7:a9:16:b7:84:ac:
5f:c4:31:4f:01:81:29:b1:a1:99:3d:1f:df:8a:3e:09:54:10:
fa:8c:08:5d:15:c1:28:95:77:13:29:7e:cd:8e:1d:cd:dc:67:
07:98:6a:cf:c3:9b:6e:60:e2:ff:3c:5d:e6:86:ce:d9:f5:03:
a5:de:1f:59:da:c6:36:94:d2:d7:f9:2d:be:31:3d:a8:5a:26:
5e:d4:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:09 2024 by rpki-client on console-fra.rpki-client.org