Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6fw8QbJLyAVmvv31tGqINvHQpkI.roa
File: 6fw8QbJLyAVmvv31tGqINvHQpkI.roa (raw, json)
Hash identifier: Cte+Db5pBrNIV12c2TtL2ra+LRWG1w3wu3tKo+p2k5s=
Subject key identifier: E9:FC:3C:41:B2:4B:C8:05:66:BE:FD:F5:B4:6A:88:36:F1:D0:A6:42
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29FD97A1203ADD4817D4FC2627C47F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6fw8QbJLyAVmvv31tGqINvHQpkI.roa
Signing time: Tue 02 Jan 2024 12:33:18 +0000
ROA not before: Tue 02 Jan 2024 12:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47845
IP address blocks: 95.47.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:fd:97:a1:20:3a:dd:48:17:d4:fc:26:27:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9fc3c41b24bc80566befdf5b46a8836f1d0a642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:35:24:54:a0:01:b0:37:24:25:14:3b:58:
35:59:23:a0:15:65:c5:fb:9e:d0:74:81:0e:a7:0c:
3f:a0:e4:7a:0c:d4:86:5e:24:e1:f4:97:97:55:5f:
7e:55:b0:ef:74:d2:f3:7d:09:1f:df:1e:89:67:9b:
a6:89:63:8a:38:cf:60:10:07:ea:8c:0e:06:b0:a8:
17:16:9d:56:65:90:17:f3:e7:ac:20:6d:7f:e6:bc:
1e:0b:e4:d7:8e:e9:35:eb:5c:26:ac:bc:47:dd:6e:
3b:14:08:30:c9:62:59:b4:36:b3:c8:27:1c:23:e6:
fd:66:ff:67:0f:5f:f2:15:98:ea:43:ee:4c:6d:2f:
ab:48:56:e0:07:b7:46:3f:d9:bb:3d:d6:88:ec:b4:
b2:03:5d:70:6d:51:b9:3e:27:75:93:6f:7d:e3:fd:
bf:ff:83:1a:38:fe:ff:b5:9c:6e:f7:a3:18:77:ab:
02:7a:37:5b:66:fd:99:3f:a2:ad:00:27:7c:4a:9f:
d9:64:49:51:d6:8f:2f:16:73:6a:62:c9:67:9b:b9:
80:e3:27:1e:73:8b:65:db:48:20:8a:72:ea:ce:a1:
b1:04:ba:85:0b:9e:ac:3e:3d:51:21:be:fc:9d:0c:
70:b2:a8:32:17:ae:76:92:4b:d0:c4:8f:fa:19:6d:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FC:3C:41:B2:4B:C8:05:66:BE:FD:F5:B4:6A:88:36:F1:D0:A6:42
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6fw8QbJLyAVmvv31tGqINvHQpkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8e:e9:e1:f1:c5:7a:2a:6f:0a:90:db:2d:f7:35:b7:bf:97:
56:de:49:73:18:e3:19:16:d5:ee:18:d1:29:a1:9c:fb:49:e2:
0b:35:76:30:29:98:e9:84:63:f8:71:6e:12:34:c2:3b:2e:aa:
d6:86:85:02:db:8e:da:0a:7f:7d:32:64:4f:4d:ca:69:b3:ce:
be:b1:b8:69:b7:3f:18:11:68:4f:97:57:fb:83:d5:68:14:8e:
52:a7:89:be:b1:b8:c8:3a:36:c4:0d:f8:5e:83:93:f8:46:89:
b1:40:1c:e4:54:9a:e8:b8:9e:da:cd:40:f4:b6:01:75:f4:a2:
1b:19:2d:c0:31:7b:de:10:e4:b8:70:3d:77:fd:3a:b7:c3:16:
3f:31:92:8a:67:c7:52:ee:cc:2b:de:12:87:c3:02:57:0a:53:
02:dd:b2:2b:d7:3f:0f:76:66:7e:5e:e7:61:b2:36:9a:f2:49:
9d:7c:83:85:d1:4e:a7:63:92:b1:f5:52:d2:12:52:d3:b9:9f:
f2:bf:80:0f:c4:21:cd:9b:0a:4a:aa:49:bc:ad:bf:5d:99:37:
22:3f:2d:41:ac:08:0f:38:c5:28:d0:32:b9:7e:3a:cf:19:96:
fc:0a:14:77:2b:96:a6:48:46:42:8b:2d:bf:fd:ee:94:f8:fa:
8d:29:08:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKf2XoSA63UgX1PwmJ8R/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWZjM2M0MWIyNGJjODA1NjZiZWZkZjViNDZhODgzNmYxZDBhNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv81JFSgAbA3JCUUO1g1WSOgFWXF
+57QdIEOpww/oOR6DNSGXiTh9JeXVV9+VbDvdNLzfQkf3x6JZ5umiWOKOM9gEAfq
jA4GsKgXFp1WZZAX8+esIG1/5rweC+TXjuk161wmrLxH3W47FAgwyWJZtDazyCcc
I+b9Zv9nD1/yFZjqQ+5MbS+rSFbgB7dGP9m7PdaI7LSyA11wbVG5Pid1k2994/2/
/4MaOP7/tZxu96MYd6sCejdbZv2ZP6KtACd8Sp/ZZElR1o8vFnNqYslnm7mA4yce
c4tl20gginLqzqGxBLqFC56sPj1RIb78nQxwsqgyF652kkvQxI/6GW2RHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOn8PEGyS8gFZr799bRqiDbx0KZCMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNmZ3OFFiSkx5QVZtdnYzMXRHcUlOdkhRcGtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy/2MA0G
CSqGSIb3DQEBCwUAA4IBAQCxjunh8cV6Km8KkNst9zW3v5dW3klzGOMZFtXuGNEp
oZz7SeILNXYwKZjphGP4cW4SNMI7LqrWhoUC247aCn99MmRPTcpps86+sbhptz8Y
EWhPl1f7g9VoFI5Sp4m+sbjIOjbEDfheg5P4RomxQBzkVJrouJ7azUD0tgF19KIb
GS3AMXveEOS4cD13/Tq3wxY/MZKKZ8dS7swr3hKHwwJXClMC3bIr1z8PdmZ+Xudh
sjaa8kmdfIOF0U6nY5Kx9VLSElLTuZ/yv4APxCHNmwpKqkm8rb9dmTciPy1BrAgP
OMUo0DK5fjrPGZb8ChR3K5amSEZCiy2//e6U+PqNKQhr
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:41 2024 by rpki-client on console-ams.rpki-client.org