Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-XTb9ng7LX5BkQug-br1DLLCi9o.roa
File: 1-XTb9ng7LX5BkQug-br1DLLCi9o.roa (raw, json)
Hash identifier: MsY0DrtYmw6kEIl2LWqUJEbHtmXfQ4orCmNBKBSb+7c=
Subject key identifier: F9:74:DB:F6:78:3B:2D:7E:41:91:0B:A0:F9:BA:F5:0C:B2:C2:8B:DA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1D5C096D1499A1BFF70732BBFA59
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-XTb9ng7LX5BkQug-br1DLLCi9o.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59692
IP address blocks: 93.171.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1d:5c:09:6d:14:99:a1:bf:f7:07:32:bb:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f974dbf6783b2d7e41910ba0f9baf50cb2c28bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:ad:71:c3:a7:7c:60:cf:58:b6:f5:3d:26:
6a:dc:fd:2f:29:82:44:7a:dd:00:cf:da:a1:aa:e6:
b1:5b:1d:52:ee:f5:3f:a7:64:f4:74:7b:d2:19:47:
c9:4c:e3:68:2a:a4:cc:e0:97:c4:36:b3:4f:56:0c:
a6:1c:27:30:a3:b0:04:d5:ec:e7:3f:a5:a0:cb:cc:
d8:f2:6e:72:f8:b2:a0:96:e1:97:b1:66:c2:58:f8:
13:3d:2a:04:37:7a:26:a4:e4:ab:31:51:18:1c:4d:
77:58:cc:a8:e5:5c:03:8f:01:4c:f7:5f:1a:ed:2e:
53:74:ca:51:0e:51:54:b1:83:00:cb:d6:e7:fb:b0:
76:30:a6:46:c9:61:53:9f:ab:d0:fc:a4:d7:6a:a8:
a0:56:a5:f9:b9:d5:0f:bb:e0:f9:3a:69:d3:b6:5d:
3f:bf:c5:2e:ba:41:32:8f:b6:ff:9d:4b:13:0d:78:
4e:cb:aa:32:57:0f:50:e1:8c:2d:b0:28:f2:78:29:
52:53:34:5b:c7:6a:b1:3f:77:fc:04:3e:bc:c8:72:
5b:28:2e:c3:0b:ba:dd:3f:f4:e8:aa:1c:f8:d6:85:
6d:7e:b9:11:85:15:d7:bd:a0:67:d0:21:d2:f7:7f:
06:79:5d:65:cb:38:6a:20:43:d2:e4:20:3f:a6:e3:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:DB:F6:78:3B:2D:7E:41:91:0B:A0:F9:BA:F5:0C:B2:C2:8B:DA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-XTb9ng7LX5BkQug-br1DLLCi9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8a:a3:7d:15:5f:ac:58:80:79:c0:9d:57:32:62:0c:8b:ec:
dd:cf:bf:fe:8a:98:88:e1:fa:c6:2d:75:78:2f:ac:23:bb:7d:
83:21:01:57:27:4f:2a:86:66:69:a7:fd:6e:38:98:84:9c:13:
d4:aa:20:80:a3:00:a1:84:7c:ec:64:e0:a4:32:83:c1:e3:8b:
e9:fc:24:cb:ce:ed:91:fd:2f:73:d4:f8:b2:2c:92:ce:8e:fd:
e5:d7:1b:96:09:6c:96:6b:12:13:e5:8a:56:98:16:41:0b:50:
c6:5a:f5:53:fb:b0:b4:06:e8:a7:c9:74:ee:69:dc:84:72:00:
3e:7e:10:c3:9d:ac:06:d9:b3:08:ac:be:d5:90:a5:9d:d6:25:
f3:bf:6d:1a:a3:da:9a:10:b3:9b:4c:da:c7:6d:82:f2:c3:4a:
4b:01:21:2b:58:8d:a1:cf:1a:22:13:a9:e2:9f:07:c9:c9:d0:
f4:83:64:07:48:03:64:82:56:75:b2:7a:44:64:e3:29:10:56:
f4:ed:25:9a:75:bb:87:cd:fc:68:34:21:b3:1b:51:33:dd:0f:
dc:9c:5c:e6:d9:40:ce:87:a7:f6:26:a6:7e:26:bb:b3:1a:64:
6e:71:34:84:81:37:a5:19:0b:6e:e5:2c:ef:3e:77:1d:d7:0c:
49:f7:12:26
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzKKh1cCW0UmaG/9wcyu/pZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc0ZGJmNjc4M2IyZDdlNDE5MTBiYTBmOWJhZjUwY2IyYzI4YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH+tccOnfGDPWLb1PSZq3P0vKYJE
et0Az9qhquaxWx1S7vU/p2T0dHvSGUfJTONoKqTM4JfENrNPVgymHCcwo7AE1ezn
P6Wgy8zY8m5y+LKgluGXsWbCWPgTPSoEN3ompOSrMVEYHE13WMyo5VwDjwFM918a
7S5TdMpRDlFUsYMAy9bn+7B2MKZGyWFTn6vQ/KTXaqigVqX5udUPu+D5OmnTtl0/
v8UuukEyj7b/nUsTDXhOy6oyVw9Q4YwtsCjyeClSUzRbx2qxP3f8BD68yHJbKC7D
C7rdP/Toqhz41oVtfrkRhRXXvaBn0CHS938GeV1lyzhqIEPS5CA/puMFBQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPl02/Z4Oy1+QZELoPm69QyywovaMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMS1YVGI5bmc3TFg1QmtRdWctYnIxRExMQ2k5by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJl
ZC8xL2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2ryDAN
BgkqhkiG9w0BAQsFAAOCAQEAboqjfRVfrFiAecCdVzJiDIvs3c+//oqYiOH6xi11
eC+sI7t9gyEBVydPKoZmaaf9bjiYhJwT1KoggKMAoYR87GTgpDKDweOL6fwky87t
kf0vc9T4siySzo795dcblglslmsSE+WKVpgWQQtQxlr1U/uwtAbop8l07mnchHIA
Pn4Qw52sBtmzCKy+1ZClndYl879tGqPamhCzm0zax22C8sNKSwEhK1iNoc8aIhOp
4p8HycnQ9INkB0gDZIJWdbJ6RGTjKRBW9O0lmnW7h838aDQhsxtRM90P3Jxc5tlA
zoen9iamfia7sxpkbnE0hIE3pRkLbuUs7z53HdcMSfcSJg==
-----END CERTIFICATE-----
Generated at Tue Jun 11 12:07:02 2024 by rpki-client on console-fra.rpki-client.org