Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/66H6lJA-WUqU1VTo2s6SHasMNFw.roa
File: 66H6lJA-WUqU1VTo2s6SHasMNFw.roa (raw, json)
Hash identifier: SFCTX6+GDZEaGSSfq2Y6pYT5j6oW67r7QmVfJ3QHOfI=
Subject key identifier: EB:A1:FA:94:90:3E:59:4A:94:D5:54:E8:DA:CE:92:1D:AB:0C:34:5C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A0999BDC22741B2821BEB5C817462
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/66H6lJA-WUqU1VTo2s6SHasMNFw.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50400
IP address blocks: 93.171.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:09:99:bd:c2:27:41:b2:82:1b:eb:5c:81:74:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eba1fa94903e594a94d554e8dace921dab0c345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:3f:fb:8d:81:fd:81:5d:b5:fc:63:63:b1:
e2:ff:76:8b:b8:b4:84:8c:1e:c1:09:d8:55:fc:ed:
9c:f1:90:75:ed:e8:32:16:a3:dd:f9:9c:4e:4d:9b:
81:1a:28:5a:81:18:1b:67:bb:49:72:6c:06:8e:7b:
7c:fc:3a:61:3e:8d:ec:33:4a:11:f2:de:c0:73:e8:
76:f9:08:0c:dd:3f:ad:38:a5:c1:82:6c:e7:d8:ab:
6d:48:26:fb:53:3e:50:79:4e:8c:57:f1:7e:fa:9e:
04:2d:92:3f:1e:85:86:eb:02:ee:c0:61:a5:16:aa:
ad:70:b4:bb:3e:0e:7e:87:96:8b:d4:31:7b:85:6a:
8f:56:f0:6c:9d:b3:a2:12:d9:ed:a7:c8:2c:68:ca:
1d:1f:05:5c:61:99:5e:b2:50:e4:e3:93:b6:cd:c7:
2f:18:53:ba:4c:df:35:fa:c6:e1:ef:7e:de:09:ec:
6c:a5:78:c3:11:fe:de:33:d0:94:6b:65:d8:58:9a:
f1:57:77:d7:87:9a:8f:0a:20:f9:15:2e:b0:ff:04:
f9:db:f9:aa:f0:e7:61:99:04:23:54:f8:6b:fd:ea:
71:e0:c1:93:0d:aa:bc:e0:c3:14:72:be:46:36:71:
65:3a:9d:f8:98:52:47:71:ee:61:89:ff:b4:2d:4b:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:FA:94:90:3E:59:4A:94:D5:54:E8:DA:CE:92:1D:AB:0C:34:5C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/66H6lJA-WUqU1VTo2s6SHasMNFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.239.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4f:51:1c:e5:90:64:95:db:0b:9b:5d:bd:8c:36:30:c7:8c:
42:8e:91:12:eb:bd:4e:f9:e7:96:3e:1d:1e:05:63:0e:71:6e:
43:3f:2b:50:29:b1:91:f8:a6:76:44:8c:85:93:d8:db:f7:fd:
e6:8f:00:61:74:d9:f1:58:94:06:82:ed:e3:2d:77:e5:37:92:
38:4c:57:20:a2:1c:46:12:66:26:5f:39:81:fe:ea:0f:4b:be:
1e:f8:c7:5f:b2:b7:c8:d7:9b:f2:91:f2:41:d1:2f:67:47:22:
ab:0b:96:18:8b:ac:b7:d6:c2:4b:06:0c:0b:d3:fb:1b:f6:0a:
04:40:c9:c4:44:da:9d:84:a1:0d:a4:e3:68:ff:ac:66:1e:51:
7b:06:b6:54:b9:ea:e1:8a:60:95:32:73:59:35:85:ca:c2:23:
0e:3d:9a:54:3a:9d:35:b2:4d:a3:73:7f:92:32:9d:d4:92:1a:
70:2c:f0:82:90:cd:80:c9:d7:de:9f:37:92:68:38:42:d8:cd:
10:a6:b6:95:c2:a6:57:ca:8c:29:e3:72:2a:b9:02:fb:59:57:
31:31:b4:04:0c:12:ca:04:95:26:71:c6:dd:37:8e:5f:df:10:
b4:f7:3a:d4:2a:04:ae:fa:e0:fd:a9:c4:8d:8b:5f:45:dd:29:
82:d0:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:17:01 2024 by rpki-client on console-fra.rpki-client.org