Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Ra7qkwz1wG4uJZmkdcuz1OTOxik.roa
File: Ra7qkwz1wG4uJZmkdcuz1OTOxik.roa (raw, json)
Hash identifier: 5Jj2AoYZ3Zq6qj2UMAWEgKsjim7MaNk9EVPxVxNWiDk=
Subject key identifier: 45:AE:EA:93:0C:F5:C0:6E:2E:25:99:A4:75:CB:B3:D4:E4:CE:C6:29
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 018CC649B4F9486B7EA8D788FB00F12925BF
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Ra7qkwz1wG4uJZmkdcuz1OTOxik.roa
Signing time: Mon 01 Jan 2024 18:29:28 +0000
ROA not before: Mon 01 Jan 2024 18:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35489
IP address blocks: 93.93.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:b4:f9:48:6b:7e:a8:d7:88:fb:00:f1:29:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Jan 1 18:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45aeea930cf5c06e2e2599a475cbb3d4e4cec629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:c5:99:fe:25:f9:bb:f3:9f:80:cc:45:5c:
38:ca:1f:2d:ab:54:e0:83:ad:28:27:54:53:8b:39:
ba:45:ef:3b:f4:8b:55:23:b9:c8:b7:a2:da:28:8a:
cf:13:b5:54:27:3e:25:e1:ad:ca:a6:5a:25:fe:c4:
aa:df:49:fd:bf:82:5a:cb:45:46:71:3c:a5:22:ae:
a3:75:a2:21:d8:50:5f:e4:5a:a0:36:42:68:dc:34:
39:00:69:11:73:1b:9f:00:c3:29:49:6a:71:f0:0b:
e1:7e:6e:38:0d:e5:5d:c7:24:15:35:95:42:45:3f:
74:47:40:bf:65:2b:74:05:ac:ef:ad:22:6b:9d:a7:
3e:7f:6b:5d:f0:df:a5:ef:de:57:ac:da:31:d1:d3:
18:3d:b4:44:66:39:d7:1e:2e:1a:b5:71:17:fe:cc:
68:cc:71:60:fb:1e:a8:80:f9:72:21:7e:a9:38:53:
e2:d3:9b:69:b3:a4:8e:45:c1:8d:6c:42:0d:ce:5b:
21:b8:35:c4:cf:b6:ca:c5:b0:a6:92:ad:99:86:5d:
2d:74:88:f4:7f:cf:c0:f4:94:e7:c3:22:69:9d:1f:
9f:a8:ef:6f:5f:f9:9a:5b:75:da:95:11:95:41:6f:
42:54:44:86:de:67:c1:da:ec:8f:cc:49:d4:a0:e5:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AE:EA:93:0C:F5:C0:6E:2E:25:99:A4:75:CB:B3:D4:E4:CE:C6:29
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Ra7qkwz1wG4uJZmkdcuz1OTOxik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.9.0/24
Signature Algorithm: sha256WithRSAEncryption
18:12:a7:01:54:b0:d7:ff:28:2a:2d:3b:75:77:1e:1c:8b:68:
0e:17:7f:70:f3:15:36:8f:b4:a0:15:98:31:65:d7:df:19:dc:
36:b1:4d:74:41:49:50:de:ff:3a:de:ba:fe:e9:19:d2:02:e4:
68:21:3f:53:2f:ad:52:ad:8d:04:08:90:ef:eb:12:57:72:b3:
54:a4:d8:5f:79:ea:a5:79:27:97:eb:56:62:61:5a:a5:b1:25:
67:16:4d:59:7b:8e:8d:30:a8:ef:5c:ef:15:08:b0:25:07:fb:
2a:32:d2:e9:5f:85:60:38:a1:25:c2:a8:6e:d3:05:c1:4d:a3:
a7:4b:97:2f:79:7a:0a:41:a5:93:24:b1:0e:2c:9b:3c:fb:a5:
95:07:d7:75:88:ce:5b:ad:d9:d5:e5:da:e0:af:46:40:b6:5f:
d2:61:76:4c:a0:06:0a:0a:4e:14:d4:74:09:1c:ad:c9:d8:0a:
fd:03:ce:04:a3:87:30:17:d9:13:e9:ed:dc:ef:e2:7b:0e:90:
c7:34:14:e2:38:a3:93:e6:7b:d6:30:da:13:7f:1c:a0:2c:e0:
7b:63:76:e7:41:dc:1f:e6:f4:e0:cd:f0:5d:55:d7:ba:19:f6:
53:28:87:96:6f:8e:1b:e9:1d:aa:eb:c8:61:b9:3d:50:d5:3d:
11:64:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 13:50:52 2024 by rpki-client on console-fra.rpki-client.org