Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/76i9l5cI3TI0e3PmZAo7P0bhK0g.roa
File: 76i9l5cI3TI0e3PmZAo7P0bhK0g.roa (raw, json)
Hash identifier: CkcDSBTqmDHtBGQ2O9v0joj6E/8YzmsoazyUYBvHz/Y=
Subject key identifier: EF:A8:BD:97:97:08:DD:32:34:7B:73:E6:64:0A:3B:3F:46:E1:2B:48
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A2E7A7882027174903A16F1602BCD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/76i9l5cI3TI0e3PmZAo7P0bhK0g.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62065
IP address blocks: 92.38.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2e:7a:78:82:02:71:74:90:3a:16:f1:60:2b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efa8bd979708dd32347b73e6640a3b3f46e12b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:38:f8:dc:18:9e:d5:03:7a:1c:38:b4:8f:18:
1a:ed:d2:f4:71:f4:36:e0:6e:22:b7:df:0e:06:58:
c2:4b:3f:05:cf:28:0f:bc:91:f0:f4:d8:29:5f:c1:
ba:64:67:02:99:56:d6:09:b6:0a:36:ca:45:d0:06:
e6:b0:47:16:52:17:3b:80:78:15:1e:04:7d:9e:b7:
c8:a2:b8:32:d2:68:66:98:f6:38:46:30:c5:e6:de:
c1:48:d3:17:ff:f0:f2:9a:c4:f7:31:b8:cc:6b:6d:
6d:b3:fc:59:37:1b:e4:f6:72:81:69:00:7c:b0:0d:
75:b1:1e:cf:65:a4:1e:9f:2e:91:72:99:cc:fd:21:
ff:24:a2:18:69:b0:2d:8d:5e:dc:3c:4a:58:dc:cd:
13:bc:e4:b9:b3:21:6f:be:ef:b0:04:1e:83:f9:1f:
b9:b1:9e:57:86:eb:a2:f1:c2:12:54:a6:68:42:62:
0d:42:a3:1a:8a:0d:04:88:f6:86:be:13:d3:41:1c:
61:fb:98:9b:ef:99:db:eb:90:c5:25:e8:19:93:b9:
03:9a:98:19:7d:ba:65:ed:b8:af:f8:61:6e:4f:1f:
ce:16:88:da:ea:cb:4c:16:44:2a:c0:24:c3:9b:83:
5a:5e:54:e4:04:95:02:0e:b5:9f:90:e8:f2:ad:56:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:BD:97:97:08:DD:32:34:7B:73:E6:64:0A:3B:3F:46:E1:2B:48
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/76i9l5cI3TI0e3PmZAo7P0bhK0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.2.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ed:f5:34:91:66:fe:85:80:97:61:d7:70:19:fa:3e:f2:c3:
47:ed:10:ad:03:69:c8:4c:22:ce:2a:01:35:40:50:bd:e0:10:
5b:74:58:c9:c3:53:6b:a3:da:6c:a0:db:08:cc:7d:01:88:07:
af:e4:fc:ae:16:e0:44:62:06:aa:99:59:fc:41:4c:e1:e7:d9:
8d:65:07:89:16:98:a1:9c:6f:e1:5b:19:ec:3c:cb:5b:50:a9:
24:b8:34:98:e3:62:bb:56:b5:c8:e8:2b:e4:22:dc:5e:9d:06:
54:9b:2a:89:e6:54:26:79:c7:96:ce:35:a5:b1:f1:ad:7c:e2:
ec:4f:bd:27:3a:b7:cb:f6:79:ea:de:76:ae:30:bf:36:20:53:
ad:cd:66:24:84:d9:ae:10:c0:74:38:56:e0:b0:22:94:fc:b6:
0d:20:da:86:85:2d:39:95:b0:de:42:e0:a4:12:2b:ac:eb:fc:
6c:cb:14:8d:90:24:83:84:16:16:09:3f:44:7a:a7:f7:20:b3:
ee:56:be:2d:b2:90:f7:01:78:e1:b5:f5:be:75:5a:6e:20:92:
1d:53:4c:8a:9e:9b:28:6f:ea:36:5f:98:78:7a:57:0e:a8:8c:
0a:80:37:e7:c8:e6:52:f5:62:92:29:08:23:a1:ec:95:d7:45:
15:38:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:24:07 2024 by rpki-client on console-ams.rpki-client.org