Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2ZEhhUEkXBl8TnMfoFPRb1KWI80.roa
File: 2ZEhhUEkXBl8TnMfoFPRb1KWI80.roa (raw, json)
Hash identifier: qyNTT8/zk547w8Ey42paPD71GDkSd48KUGms+u1iUK0=
Subject key identifier: D9:91:21:85:41:24:5C:19:7C:4E:73:1F:A0:53:D1:6F:52:96:23:CD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A2358B33AE1DEB14113F2DA55420C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2ZEhhUEkXBl8TnMfoFPRb1KWI80.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60337
IP address blocks: 93.170.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:23:58:b3:3a:e1:de:b1:41:13:f2:da:55:42:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d991218541245c197c4e731fa053d16f529623cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:5b:56:a7:32:bd:23:1e:1d:a4:3e:7a:ab:
d2:cb:69:ee:f1:2f:0c:b8:50:93:17:3d:99:1d:76:
0e:ae:af:69:d6:00:1e:a5:4c:54:a9:06:dc:7b:3c:
cd:69:bc:33:e6:7b:73:9e:2a:3e:0d:f0:78:b0:c7:
ec:7b:29:77:a0:26:8b:a7:f8:f4:3f:e4:de:a1:9f:
b2:34:5a:fd:16:6b:85:94:32:6d:89:cd:ee:f7:05:
3f:7b:82:2a:5b:5c:23:62:1b:6b:99:fc:a5:11:56:
5e:41:7c:45:5b:85:b6:ae:3c:e0:bc:57:01:49:d7:
58:5f:1b:87:1d:de:7e:9a:02:27:cd:60:d5:ef:c2:
c5:36:b9:d3:72:d2:12:72:57:a8:f3:01:eb:68:b0:
1d:d8:06:03:07:30:eb:d2:44:e9:09:fb:e0:71:bb:
66:12:28:b4:e2:f7:08:46:23:f4:18:20:89:82:d1:
a8:de:eb:e9:c5:54:34:e2:e3:19:85:1c:0c:e1:ad:
e9:13:b8:d2:c5:d3:e3:c4:e6:29:6e:c4:63:00:bb:
9c:07:3d:a3:6d:2f:c7:50:69:d2:4c:ee:9f:90:16:
35:2a:10:3d:ea:79:f4:a2:7d:21:8b:9f:1f:29:f4:
5c:02:b2:1a:00:36:4f:31:03:c2:8c:66:ec:46:de:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:21:85:41:24:5C:19:7C:4E:73:1F:A0:53:D1:6F:52:96:23:CD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2ZEhhUEkXBl8TnMfoFPRb1KWI80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:40:03:7f:0b:5a:c4:33:df:6b:61:ad:61:f7:f9:89:3d:02:
aa:cc:1d:9e:24:a4:82:8d:95:ed:cd:bb:40:20:7c:15:b7:de:
26:ff:3b:da:43:e0:0f:c5:4b:a5:1a:7d:11:6d:09:62:06:48:
1f:d8:be:2a:59:db:b7:b8:61:d0:f2:db:3c:de:83:fa:5d:03:
e9:a1:22:36:fa:0d:95:86:56:96:a1:c8:b1:1c:64:81:55:90:
6d:80:ff:14:c9:c8:b7:2b:84:0d:48:4c:61:a9:5f:0f:52:a0:
6e:48:85:3f:71:78:a2:9e:fa:86:87:c3:f4:04:09:19:47:ab:
c9:42:b3:ae:bf:0c:a2:9f:f7:45:5b:1b:5a:08:38:b6:6c:8d:
a0:d6:d0:dc:6e:7b:a9:09:d0:34:2b:01:12:ec:34:0a:dd:44:
5e:c1:9d:fe:fe:90:e2:6b:d9:b2:a8:e2:99:ef:0d:68:d0:3b:
63:db:a7:fb:d8:47:a5:cc:1f:d6:21:c8:c4:47:04:5b:62:a8:
39:20:60:25:b8:e0:fc:d6:8a:4e:4e:89:e0:d9:24:86:4e:96:
4e:3e:05:94:a8:07:25:c7:10:51:ca:47:f9:9a:b8:58:62:2a:
7b:d1:53:12:93:33:d8:ad:7b:18:2d:4c:dc:67:8e:83:69:98:
12:74:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:30:31 2024 by rpki-client on console-fra.rpki-client.org