Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1W0PWnFQutp35DvtXWdYWFXUg0A.roa
File: 1W0PWnFQutp35DvtXWdYWFXUg0A.roa (raw, json)
Hash identifier: SUuODqBuJFS1H32TxoX84Wy8n3S00mbMvUOXcgcARCk=
Subject key identifier: D5:6D:0F:5A:71:50:BA:DA:77:E4:3B:ED:5D:67:58:58:55:D4:83:40
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0192B0296BC3E62B07631F4C1F4C2A10334C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1W0PWnFQutp35DvtXWdYWFXUg0A.roa
Signing time: Mon 21 Oct 2024 17:39:17 +0000
ROA not before: Mon 21 Oct 2024 17:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41124
IP address blocks: 93.171.64.0/21 maxlen: 24
93.171.228.0/23 maxlen: 24
95.47.32.0/22 maxlen: 24
95.47.192.0/22 maxlen: 24
146.120.124.0/22 maxlen: 24
146.120.152.0/22 maxlen: 24
146.120.176.0/22 maxlen: 24
146.158.24.0/22 maxlen: 24
146.158.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:29:6b:c3:e6:2b:07:63:1f:4c:1f:4c:2a:10:33:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 21 17:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d56d0f5a7150bada77e43bed5d67585855d48340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:ef:e6:52:53:cf:6b:e2:79:32:54:e6:89:
10:06:fb:b6:19:1e:e5:63:31:4b:57:22:73:e2:29:
7d:09:32:9f:b1:da:90:d9:f5:81:4c:eb:c0:fe:e6:
8e:67:65:1b:85:5b:54:4c:28:05:56:b5:93:81:c2:
80:37:c1:a5:84:76:de:b8:8e:d1:1c:d0:9a:96:31:
bc:33:30:a3:cd:d6:9a:1d:23:91:5d:8d:ad:30:2c:
fa:5c:4b:bf:3c:0f:b4:e7:2c:b6:57:44:35:21:a7:
12:dd:ab:7e:f9:94:89:90:86:f9:8c:41:b0:21:25:
ef:79:73:2d:cc:90:d0:66:8c:30:ca:9f:b4:98:3e:
7e:bd:9a:fc:58:7a:21:df:e4:7c:d6:19:3d:28:e9:
b3:9a:75:44:27:c7:c3:5e:ee:00:18:09:71:d0:e8:
12:42:d0:b2:1f:d1:c8:6b:5c:5c:50:a3:80:4e:93:
28:04:58:aa:37:fc:33:62:57:54:40:f1:73:d0:17:
94:20:9f:b5:12:08:bd:f9:86:cf:45:34:a2:db:e7:
f9:f0:23:59:62:18:a3:70:24:a1:1e:9b:f5:2a:95:
d8:42:e1:c5:73:b9:80:6e:cc:2e:55:df:2a:34:1c:
8a:e6:a0:c5:44:80:9e:fa:fd:67:0e:12:2b:bd:8f:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:0F:5A:71:50:BA:DA:77:E4:3B:ED:5D:67:58:58:55:D4:83:40
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1W0PWnFQutp35DvtXWdYWFXUg0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.64.0/21
93.171.228.0/23
95.47.32.0/22
95.47.192.0/22
146.120.124.0/22
146.120.152.0/22
146.120.176.0/22
146.158.24.0/22
146.158.64.0/22
Signature Algorithm: sha256WithRSAEncryption
25:19:70:bb:34:39:c4:87:94:ef:a9:dd:06:3e:1c:7a:cf:19:
e7:8d:5c:b7:cd:ab:41:e2:a6:2d:91:0a:29:36:d0:69:82:0e:
9e:70:6d:0b:f8:7b:df:34:ad:e2:72:bb:32:b5:f8:83:17:c6:
de:0c:2b:a3:3a:36:71:73:2a:ba:e2:89:af:45:d3:f5:c2:64:
c5:bd:1a:d2:4f:22:1d:2d:7d:fc:8b:46:ae:38:1d:8f:f2:d9:
80:5a:1e:61:cf:78:56:2f:39:6c:9d:43:5d:bb:fb:74:24:a0:
76:96:a6:df:26:41:d8:ff:9d:fb:9f:da:45:d6:31:d1:1f:e6:
f4:f7:78:6f:72:bf:e7:fa:6d:fc:0d:65:45:9b:0e:8d:ce:e9:
cd:8e:94:fc:a6:97:ca:c3:96:36:ae:36:46:8f:da:21:a2:08:
90:3b:43:17:03:8e:85:f1:9a:a0:62:f0:66:2f:1f:8e:a5:b3:
85:75:c7:f1:dd:d1:7c:1b:66:24:6d:2d:5d:c7:f2:fb:64:53:
0d:9e:79:79:25:83:b3:1a:13:4b:aa:85:5f:b9:22:2d:34:2e:
dd:a1:bb:7f:e1:11:01:3f:87:f2:8d:89:55:e0:7e:44:86:b2:
b0:46:d4:9e:9e:00:9e:70:f9:d7:a1:cc:47:2d:a0:a7:3c:c9:
8a:a3:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org