Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/70cXoxWh-ODTfUIZaPNnqspfo20.roa
File: 70cXoxWh-ODTfUIZaPNnqspfo20.roa (raw, json)
Hash identifier: rNCxpG4hp6T1e7mDWVf5/qe/H0DXG29JIX9jozOEfas=
Subject key identifier: EF:47:17:A3:15:A1:F8:E0:D3:7D:42:19:68:F3:67:AA:CA:5F:A3:6D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0192ED5631A28F56A062C05B0DA699FC70EE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/70cXoxWh-ODTfUIZaPNnqspfo20.roa
Signing time: Sat 02 Nov 2024 14:45:01 +0000
ROA not before: Sat 02 Nov 2024 14:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41773
IP address blocks: 93.170.26.0/24 maxlen: 24
95.47.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ed:56:31:a2:8f:56:a0:62:c0:5b:0d:a6:99:fc:70:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 2 14:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef4717a315a1f8e0d37d421968f367aaca5fa36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:22:c3:e1:88:63:77:c8:da:f8:5f:98:f6:
3a:e4:35:14:6c:8a:31:e7:25:1a:f4:d3:0d:d7:45:
ab:84:89:b8:13:70:4a:c8:cf:1f:55:68:77:50:28:
49:00:7f:31:c5:0d:a7:91:56:15:d8:fb:cf:8b:b3:
af:27:a5:14:e5:d5:dd:15:60:b6:82:c3:e2:b8:e4:
44:5b:2c:74:4d:b3:f1:11:44:ed:21:16:40:6a:c7:
9a:3c:7f:60:23:27:27:92:58:bb:6e:5e:e2:0c:72:
4b:dc:e5:f2:0d:8b:34:21:1e:3e:2d:82:56:06:a2:
25:3b:4a:ff:28:93:95:e9:16:f2:8f:fa:24:f0:85:
52:2b:20:d7:30:11:1b:98:b2:70:a4:51:75:e7:ae:
1a:34:4f:2c:2d:6a:61:0f:6f:b9:e3:66:7e:5d:ab:
99:9f:af:42:29:b7:c9:5d:aa:3c:94:75:60:5f:92:
cf:d9:3e:36:c5:0c:5d:91:e8:d2:3b:4c:20:75:29:
1d:11:1c:e2:86:19:78:22:84:57:05:89:b1:a1:31:
52:89:4f:78:91:7d:dd:db:f5:43:d7:f5:54:0b:7a:
5f:e9:60:48:89:93:9b:14:db:39:49:63:1f:6d:89:
f4:6b:26:bf:ae:a0:4f:2d:6d:9a:6e:f7:b0:54:72:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:17:A3:15:A1:F8:E0:D3:7D:42:19:68:F3:67:AA:CA:5F:A3:6D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/70cXoxWh-ODTfUIZaPNnqspfo20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.26.0/24
95.47.250.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:b3:61:cd:7a:86:34:60:1c:09:d6:0f:68:b4:2c:72:cd:a5:
4d:66:3c:c5:e6:91:08:3a:83:0a:18:25:56:13:8f:42:6d:39:
6a:bf:29:a7:47:eb:ae:ad:c4:ef:ad:cd:59:59:d3:01:a1:ea:
d9:8c:49:d5:c7:09:91:cc:12:eb:9d:92:63:f3:c4:52:b3:75:
3b:62:74:ac:3a:81:c8:85:4b:3e:26:b3:90:3c:11:7a:93:75:
35:8d:1c:17:55:95:8f:98:e0:5a:f2:98:a2:26:8c:f9:0b:79:
c6:15:7f:48:23:05:36:01:ad:06:0d:35:dd:94:41:eb:0d:da:
40:cc:4a:ba:4e:b9:7f:81:62:31:b8:fa:86:e4:90:f1:70:ad:
86:b4:d3:38:e9:63:0f:f0:79:57:6e:bb:d1:68:6c:9e:81:a6:
f9:7a:4e:16:3d:a2:f6:cb:a4:2c:8a:60:d0:73:0d:53:59:1e:
03:73:1d:2e:f0:45:ef:53:3a:e3:6a:bd:c4:e5:24:46:fd:e2:
be:a0:a5:80:d7:c9:9d:62:28:e1:c2:c6:d1:1d:07:2a:91:16:
39:14:84:8b:1d:e3:e6:64:3d:94:21:ec:58:15:47:3f:13:cc:
ea:d2:09:eb:79:16:e6:ec:29:67:af:46:05:db:4d:bb:a3:6b:
0f:41:d4:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZLtVjGij1agYsBbDaaZ/HDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQxMTAyMTQ0NTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjQ3MTdhMzE1YTFmOGUwZDM3ZDQyMTk2OGYzNjdhYWNhNWZhMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscYiw+GIY3fI2vhfmPY65DUUbIox
5yUa9NMN10WrhIm4E3BKyM8fVWh3UChJAH8xxQ2nkVYV2PvPi7OvJ6UU5dXdFWC2
gsPiuOREWyx0TbPxEUTtIRZAaseaPH9gIycnkli7bl7iDHJL3OXyDYs0IR4+LYJW
BqIlO0r/KJOV6Rbyj/ok8IVSKyDXMBEbmLJwpFF1564aNE8sLWphD2+542Z+XauZ
n69CKbfJXao8lHVgX5LP2T42xQxdkejSO0wgdSkdERzihhl4IoRXBYmxoTFSiU94
kX3d2/VD1/VUC3pf6WBIiZObFNs5SWMfbYn0aya/rqBPLW2abvewVHLGfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO9HF6MVofjg031CGWjzZ6rKX6NtMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNzBjWG94V2gtT0RUZlVJWmFQTm5xc3BmbzIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXaoaAwQB
Xy/6MA0GCSqGSIb3DQEBCwUAA4IBAQCrs2HNeoY0YBwJ1g9otCxyzaVNZjzF5pEI
OoMKGCVWE49CbTlqvymnR+uurcTvrc1ZWdMBoerZjEnVxwmRzBLrnZJj88RSs3U7
YnSsOoHIhUs+JrOQPBF6k3U1jRwXVZWPmOBa8piiJoz5C3nGFX9IIwU2Aa0GDTXd
lEHrDdpAzEq6Trl/gWIxuPqG5JDxcK2GtNM46WMP8HlXbrvRaGyegab5ek4WPaL2
y6QsimDQcw1TWR4Dcx0u8EXvUzrjar3E5SRG/eK+oKWA18mdYijhwsbRHQcqkRY5
FISLHePmZD2UIexYFUc/E8zq0gnreRbm7Clnr0YF2027o2sPQdQG
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:13:21 2024 by rpki-client on console-fra.rpki-client.org