Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4im0_m0spFpZCUoEkOGgD4pr63g.roa
File: 4im0_m0spFpZCUoEkOGgD4pr63g.roa (raw, json)
Hash identifier: wa0yobizSaPfFMhYoUIptHO/r1bmXwAFSGdJWXorSCA=
Subject key identifier: E2:29:B4:FE:6D:2C:A4:5A:59:09:4A:04:90:E1:A0:0F:8A:6B:EB:78
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A48B3964FEBAC0CC44EE29837FFDE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4im0_m0spFpZCUoEkOGgD4pr63g.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208038
IP address blocks: 93.170.122.0/24 maxlen: 24
2a02:128:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:48:b3:96:4f:eb:ac:0c:c4:4e:e2:98:37:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e229b4fe6d2ca45a59094a0490e1a00f8a6beb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:d2:d5:4f:f2:24:c1:78:61:42:90:7f:1a:
37:10:f7:86:78:c0:2f:b0:dc:ba:b5:39:c2:ee:2d:
77:39:3f:1f:2b:e7:b9:e0:1d:ca:2e:b1:89:1c:b9:
cc:78:96:ad:aa:17:51:50:ea:96:c3:02:cc:22:c6:
3b:6f:38:c3:ac:ae:30:04:73:e5:3f:6e:f0:74:b6:
c8:c9:28:eb:47:88:b4:62:32:e9:03:12:cc:70:cc:
8c:84:cd:5e:1c:ef:18:d4:10:42:c0:64:02:ae:69:
d8:b8:ff:39:58:65:1a:a4:d2:86:7c:a2:0c:2c:45:
3a:0e:27:63:48:f1:e7:6c:84:10:9d:f6:5b:03:c6:
07:48:8c:be:92:83:4b:8f:72:a2:8a:c9:cc:0d:f6:
e7:f8:af:31:80:49:21:29:9a:cf:c1:de:2e:d2:4e:
df:9f:0b:03:62:da:11:6e:d3:71:bc:a3:ff:31:4d:
43:12:e9:0a:5d:ce:2e:d7:33:30:d2:d5:7c:96:d8:
ea:ed:b2:50:cc:41:cd:29:53:7c:8c:1d:b7:65:1b:
5c:6b:89:c3:6d:2d:20:79:dd:4c:82:3d:8d:09:5a:
39:83:ca:54:76:ce:6f:91:5a:37:45:41:c5:28:33:
69:95:3c:d6:a0:b2:18:d9:97:9a:4c:bb:68:88:82:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:B4:FE:6D:2C:A4:5A:59:09:4A:04:90:E1:A0:0F:8A:6B:EB:78
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4im0_m0spFpZCUoEkOGgD4pr63g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.122.0/24
IPv6:
2a02:128:20::/48
Signature Algorithm: sha256WithRSAEncryption
24:c5:bc:7c:19:19:57:ab:3d:c5:1f:f6:27:97:4d:11:1c:4c:
4d:51:ac:7f:b2:02:fe:e8:b0:f6:ae:a5:aa:62:b1:82:91:76:
80:7b:bc:22:83:65:f4:ca:5d:03:75:0e:e0:90:0b:cf:41:bf:
d6:82:29:ad:32:2b:9d:ab:4a:f6:77:50:51:2b:7c:61:a1:1e:
c5:ed:f4:a4:99:56:52:41:4f:0a:e5:65:ac:7c:cb:f0:a8:6e:
af:79:7c:92:b8:31:fb:b1:f2:86:c6:8b:8a:a4:78:83:73:0c:
14:5c:3e:51:22:de:9b:3c:67:92:95:bc:64:3d:a5:89:da:4e:
6b:cb:4b:30:0c:96:6a:42:3b:be:71:8b:cc:35:27:99:7f:aa:
c9:ef:01:dc:bf:b4:c2:4d:12:c9:79:dc:d9:36:7d:eb:9e:4c:
9b:89:3d:18:0a:97:f5:89:44:b2:10:ae:da:1e:81:94:f7:24:
d1:2b:d5:6a:38:0b:5c:5e:ae:bf:27:5c:f0:18:d3:c1:00:c6:
6b:d1:8e:a1:e5:cf:da:26:01:e0:3e:73:5d:a6:d8:ca:50:89:
ac:4a:60:ab:f5:ef:8e:ed:c7:bb:08:2c:8e:37:69:6a:99:dc:
dd:4d:03:ba:90:f9:30:94:26:44:b6:a5:4b:8c:fe:8b:ef:e1:
0f:3d:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:10 2024 by rpki-client on console-fra.rpki-client.org