Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2n3dmAS9pmvKuoe9NwM0r-1baic.roa
File: 2n3dmAS9pmvKuoe9NwM0r-1baic.roa (raw, json)
Hash identifier: F6330uwD4pJFamkxbNpq2l2JTr2hgrM6slu+MY1wFgY=
Subject key identifier: DA:7D:DD:98:04:BD:A6:6B:CA:BA:87:BD:37:03:34:AF:ED:5B:6A:27
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A0BE6663106F702DE09EA50790279
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2n3dmAS9pmvKuoe9NwM0r-1baic.roa
Signing time: Tue 02 Jan 2024 12:33:22 +0000
ROA not before: Tue 02 Jan 2024 12:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50716
IP address blocks: 93.171.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0b:e6:66:31:06:f7:02:de:09:ea:50:79:02:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da7ddd9804bda66bcaba87bd370334afed5b6a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:cc:43:d8:c3:74:2e:7b:a2:96:c4:37:8e:
f8:bd:fd:59:d9:68:34:5c:7b:24:0c:e4:cd:c9:b1:
08:2c:c4:1c:05:dc:b7:e1:74:c8:69:49:19:1b:bd:
0e:ec:ec:8e:9a:1a:ef:0d:04:7d:6f:7b:b5:ae:b7:
2c:99:68:68:da:fe:0b:e0:94:93:d1:e8:75:37:eb:
a0:d5:86:7d:06:59:2a:dc:ec:8e:f9:d2:9f:d4:51:
70:6a:08:6e:59:06:fe:fb:ea:27:c9:7f:68:63:8d:
b9:58:7d:ad:d5:5c:58:37:32:75:3d:8b:bc:61:b0:
08:e0:3a:75:22:8f:49:9f:4a:f5:6a:04:73:03:dd:
0e:b7:c3:94:fc:7c:4d:ff:44:1d:33:ae:aa:de:df:
4f:03:3f:93:37:9b:f9:f4:9f:2c:98:58:d7:e1:13:
55:b5:19:a4:87:65:8e:c0:15:26:5d:bf:34:3c:af:
3f:5b:09:1d:cc:2b:ed:0e:7c:d6:09:35:fb:9f:aa:
2a:4a:b6:6a:29:d2:1d:65:6f:ed:f2:36:ac:d1:36:
f0:1a:71:ca:7f:92:45:ac:7a:ea:1f:5f:97:73:98:
2e:3c:21:e9:d1:9f:60:d3:cd:75:aa:68:81:e5:bd:
0c:e6:00:3b:d3:d0:cf:b5:bb:90:ad:b5:50:f8:de:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:DD:98:04:BD:A6:6B:CA:BA:87:BD:37:03:34:AF:ED:5B:6A:27
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2n3dmAS9pmvKuoe9NwM0r-1baic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.72.0/22
Signature Algorithm: sha256WithRSAEncryption
69:e0:bf:b8:df:21:d8:36:3f:ad:71:67:d3:08:40:96:fb:5c:
bc:85:d3:5f:73:8a:77:6b:8e:1f:0a:f6:68:d0:07:00:05:49:
fb:38:cb:3c:9f:9e:22:25:42:64:33:5e:d7:f5:6c:00:1e:a8:
81:2e:a7:70:6a:e2:91:0d:71:b9:81:97:d5:73:ca:a6:0f:e0:
52:4f:1c:13:ac:8a:eb:e8:60:b4:a1:2a:ea:fc:13:ea:12:c7:
15:a2:e3:bf:b5:9f:29:05:3c:73:b5:2a:24:b6:07:14:82:7b:
0e:ff:14:29:77:31:6e:91:64:d9:da:35:ee:60:08:00:07:1e:
bc:ea:db:68:d0:dc:35:12:58:ae:3d:c2:33:8b:9a:8b:08:ef:
f6:e9:9d:99:c7:24:b0:9a:1c:4b:02:c9:44:47:e5:96:83:44:
d8:a0:ec:d7:e7:e7:de:8f:22:b6:fe:f0:a1:b0:8c:7a:d8:96:
64:f0:50:d8:50:18:67:33:49:62:8f:cd:eb:27:d5:14:7b:80:
01:50:08:1c:fa:68:4f:26:a1:fb:3f:9a:9d:3d:c0:de:73:19:
01:3b:62:9a:a0:d2:6d:c3:48:f3:d1:38:ad:a6:4a:89:7c:c8:
98:00:7d:3e:6b:e8:18:5f:cc:2c:c3:1f:f6:32:8e:e9:bd:cc:
dd:aa:40:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKgvmZjEG9wLeCepQeQJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTdkZGQ5ODA0YmRhNjZiY2FiYTg3YmQzNzAzMzRhZmVkNWI2YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDXMQ9jDdC57opbEN474vf1Z2Wg0
XHskDOTNybEILMQcBdy34XTIaUkZG70O7OyOmhrvDQR9b3u1rrcsmWho2v4L4JST
0eh1N+ug1YZ9Blkq3OyO+dKf1FFwaghuWQb+++onyX9oY425WH2t1VxYNzJ1PYu8
YbAI4Dp1Io9Jn0r1agRzA90Ot8OU/HxN/0QdM66q3t9PAz+TN5v59J8smFjX4RNV
tRmkh2WOwBUmXb80PK8/WwkdzCvtDnzWCTX7n6oqSrZqKdIdZW/t8jas0TbwGnHK
f5JFrHrqH1+Xc5guPCHp0Z9g0811qmiB5b0M5gA709DPtbuQrbVQ+N6jwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNp93ZgEvaZryrqHvTcDNK/tW2onMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMm4zZG1BUzlwbXZLdW9lOU53TTByLTFiYWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXatIMA0G
CSqGSIb3DQEBCwUAA4IBAQBp4L+43yHYNj+tcWfTCECW+1y8hdNfc4p3a44fCvZo
0AcABUn7OMs8n54iJUJkM17X9WwAHqiBLqdwauKRDXG5gZfVc8qmD+BSTxwTrIrr
6GC0oSrq/BPqEscVouO/tZ8pBTxztSoktgcUgnsO/xQpdzFukWTZ2jXuYAgABx68
6tto0Nw1EliuPcIzi5qLCO/26Z2ZxySwmhxLAslER+WWg0TYoOzX5+fejyK2/vCh
sIx62JZk8FDYUBhnM0lij83rJ9UUe4ABUAgc+mhPJqH7P5qdPcDecxkBO2KaoNJt
w0jz0TitpkqJfMiYAH0+a+gYX8wswx/2Mo7pvczdqkCy
-----END CERTIFICATE-----
Generated at Wed May 29 07:59:53 2024 by rpki-client on console-ams.rpki-client.org