Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/7cJEoaG2jFNHp3YKScMXz4ulbHM.roa
File: 7cJEoaG2jFNHp3YKScMXz4ulbHM.roa (raw, json)
Hash identifier: e1RZqA1JgLnHQih10dXd3xHe5FgWGFHXj/WFYlhw21k=
Subject key identifier: ED:C2:44:A1:A1:B6:8C:53:47:A7:76:0A:49:C3:17:CF:8B:A5:6C:73
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 018CC6B8E16228D9349862ADC97FA7F46B3F
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/7cJEoaG2jFNHp3YKScMXz4ulbHM.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8953
IP address blocks: 93.113.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e1:62:28:d9:34:98:62:ad:c9:7f:a7:f4:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edc244a1a1b68c5347a7760a49c317cf8ba56c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:c0:02:38:56:ae:2b:a6:11:db:4f:a6:35:
84:9f:22:bd:a0:f7:f9:59:72:08:8c:d3:83:67:d9:
56:25:81:f7:35:98:3b:4d:56:cd:ac:fd:03:1a:eb:
87:e3:ff:00:05:48:c8:38:1c:6c:f3:9c:5d:b0:b4:
8b:11:e7:33:01:4a:a7:9a:e1:a6:78:dc:2e:e6:1c:
0c:ee:4c:c4:4d:9c:24:ae:c5:72:5f:3d:30:6b:b9:
77:07:8e:5d:96:2c:65:08:f8:dc:58:f6:30:94:8e:
65:2d:6c:c9:d3:5e:70:87:58:f2:95:49:97:1f:b6:
60:6b:aa:4a:70:29:2b:0f:1c:a5:69:ac:2a:32:99:
f0:25:28:d1:bb:9a:c7:16:81:9c:cb:09:70:37:0c:
94:dd:a9:bf:88:28:60:bd:ed:f9:d3:34:d4:0d:22:
d8:d6:12:00:3c:e8:83:0c:61:0f:bd:42:9d:1e:8c:
87:e1:49:c1:7a:e8:6a:8a:ca:e7:2b:9f:05:54:1b:
8b:9f:b6:b3:4c:40:33:17:5b:f2:56:ac:59:19:84:
8f:c9:f1:b6:24:b2:c6:51:bc:e5:75:d9:83:5a:31:
77:4d:e0:40:0a:34:aa:3a:ca:7a:7c:af:70:e3:39:
5c:da:ce:6f:9b:e7:84:ba:9b:b0:16:95:ba:dd:25:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:44:A1:A1:B6:8C:53:47:A7:76:0A:49:C3:17:CF:8B:A5:6C:73
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/7cJEoaG2jFNHp3YKScMXz4ulbHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.240.0/24
Signature Algorithm: sha256WithRSAEncryption
68:04:42:92:de:ac:83:8a:1e:c2:c9:b4:03:6f:91:0d:d1:b3:
f5:3e:46:ae:4d:9b:de:46:80:90:8b:af:3d:15:ad:85:c4:3a:
c4:df:98:8d:b2:86:1a:97:3c:65:5a:34:ef:6e:37:a7:e1:47:
d8:15:87:14:9c:f9:d0:eb:87:bf:ab:6a:bf:8a:67:e4:9a:6a:
32:a2:9a:4c:92:84:36:28:30:e1:f2:db:5c:00:f5:34:45:df:
8d:60:4c:6b:a6:4f:5b:8c:72:cc:00:63:f4:64:ad:c0:a5:af:
b8:c2:cd:15:d6:97:55:f0:3e:a3:8b:03:8b:ed:93:55:2e:93:
36:41:e0:86:7e:f6:7d:37:a0:f9:80:77:fb:62:0f:73:7c:0b:
30:4b:55:f3:a8:de:31:63:84:fa:3a:73:87:44:50:2d:78:d7:
05:7f:df:c6:1c:f5:71:89:87:aa:be:c3:c6:78:90:73:75:93:
b0:4e:ec:2e:13:51:76:22:f5:ff:c9:1d:df:0d:c6:91:e0:bc:
dc:6e:1e:81:1b:0e:57:8b:67:4f:e0:ad:01:89:ab:76:34:6c:
b8:d5:0b:bd:27:04:cd:54:cb:e6:96:6f:2a:4c:a7:3f:e8:62:
d9:e9:db:c4:61:97:b9:2a:1a:1d:4f:79:6e:6c:d8:d3:a4:77:
04:43:35:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuOFiKNk0mGKtyX+n9Gs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2
NDJmNTAwHhcNMjQwMTAxMjAzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGMyNDRhMWExYjY4YzUzNDdhNzc2MGE0OWMzMTdjZjhiYTU2YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnnAAjhWriumEdtPpjWEnyK9oPf5
WXIIjNODZ9lWJYH3NZg7TVbNrP0DGuuH4/8ABUjIOBxs85xdsLSLEeczAUqnmuGm
eNwu5hwM7kzETZwkrsVyXz0wa7l3B45dlixlCPjcWPYwlI5lLWzJ015wh1jylUmX
H7Zga6pKcCkrDxylaawqMpnwJSjRu5rHFoGcywlwNwyU3am/iChgve350zTUDSLY
1hIAPOiDDGEPvUKdHoyH4UnBeuhqisrnK58FVBuLn7azTEAzF1vyVqxZGYSPyfG2
JLLGUbzlddmDWjF3TeBACjSqOsp6fK9w4zlc2s5vm+eEupuwFpW63SWAnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3CRKGhtoxTR6d2CknDF8+LpWxzMB8GA1UdIwQY
MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt
MTEyZTExM2JiN2I3LzEvN2NKRW9hRzJqRk5IcDNZS1NjTVh6NHVsYkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3
LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXHwMA0G
CSqGSIb3DQEBCwUAA4IBAQBoBEKS3qyDih7CybQDb5EN0bP1PkauTZveRoCQi689
Fa2FxDrE35iNsoYalzxlWjTvbjen4UfYFYcUnPnQ64e/q2q/imfkmmoyoppMkoQ2
KDDh8ttcAPU0Rd+NYExrpk9bjHLMAGP0ZK3Apa+4ws0V1pdV8D6jiwOL7ZNVLpM2
QeCGfvZ9N6D5gHf7Yg9zfAswS1XzqN4xY4T6OnOHRFAteNcFf9/GHPVxiYeqvsPG
eJBzdZOwTuwuE1F2IvX/yR3fDcaR4Lzcbh6BGw5Xi2dP4K0Biat2NGy41Qu9JwTN
VMvmlm8qTKc/6GLZ6dvEYZe5KhodT3lubNjTpHcEQzXp
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:33 2024 by rpki-client on console-fra.rpki-client.org