Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7aq0i2AdLIzGk7qskAZb3kxvpdM.roa
File: 7aq0i2AdLIzGk7qskAZb3kxvpdM.roa (raw, json)
Hash identifier: y2+6KaMy1f7xJFW1drwavnmY8X30uu/F5o7fa6reB3Y=
Subject key identifier: ED:AA:B4:8B:60:1D:2C:8C:C6:93:BA:AC:90:06:5B:DE:4C:6F:A5:D3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A06A9530502C3B5D974CB532D2E29
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7aq0i2AdLIzGk7qskAZb3kxvpdM.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49711
IP address blocks: 92.38.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:06:a9:53:05:02:c3:b5:d9:74:cb:53:2d:2e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edaab48b601d2c8cc693baac90065bde4c6fa5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:fc:5f:0c:d2:b7:84:a4:17:77:52:00:7d:
4d:b1:aa:79:2c:f0:43:55:69:50:10:3a:a9:76:f2:
bf:33:21:03:db:a5:e4:f5:4d:f5:20:50:57:48:79:
d8:58:80:f1:ba:90:7b:6f:39:ac:87:9a:ef:60:1f:
6b:39:70:56:6a:34:fc:7e:19:2f:6f:f3:4a:86:fd:
15:9f:fb:1e:8f:64:68:03:df:bb:80:04:60:9e:44:
e1:6e:07:6e:6b:b9:7e:f5:23:0a:7f:b4:3e:3b:30:
f0:34:6e:41:07:d4:2a:b5:df:1c:b3:4c:50:d0:62:
1f:7c:f4:9b:e0:1e:64:26:f0:63:1b:9e:16:82:1e:
27:56:08:38:d1:d6:ad:a0:ef:36:22:12:6d:89:e6:
06:6d:7f:b3:1a:75:fa:f3:39:d8:4a:60:bc:27:91:
0f:a3:e7:85:7a:f7:bc:8d:72:36:a5:8a:06:e5:d0:
10:49:54:06:76:68:3d:48:b0:c5:91:a2:e5:83:9f:
1b:a4:4a:a5:cd:7a:b4:98:4e:58:1e:83:03:4c:b4:
77:ea:46:6e:b1:9e:6c:42:dc:d9:22:27:b9:c4:7a:
9a:8d:2f:b7:22:d3:24:84:d2:39:e2:19:bd:92:6f:
65:ff:c6:a6:77:96:70:2e:39:9e:b4:bf:70:d5:8c:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:B4:8B:60:1D:2C:8C:C6:93:BA:AC:90:06:5B:DE:4C:6F:A5:D3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7aq0i2AdLIzGk7qskAZb3kxvpdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.56.0/21
Signature Algorithm: sha256WithRSAEncryption
12:04:d6:94:15:83:2b:fa:bb:ab:d1:35:01:3c:16:6d:1f:bd:
c6:26:bf:60:3d:da:92:ce:8c:00:e2:b5:53:69:7b:43:4b:9c:
36:49:21:00:ff:1a:28:9f:08:f4:3d:f3:07:80:85:35:8f:b7:
07:0f:87:ab:47:d7:08:40:1d:60:5b:b9:5b:a2:7c:6d:94:85:
c6:57:72:6b:0f:69:d9:7b:40:7a:31:d5:14:81:a9:17:e5:9a:
22:44:a2:6b:21:fd:36:7a:b5:f7:10:03:8a:89:7b:38:4d:41:
77:04:9e:03:e7:3c:f8:76:94:24:86:d0:74:05:60:db:9e:ed:
f2:1e:35:48:64:13:d7:ac:9a:e6:26:fd:aa:c7:80:ce:25:4f:
71:41:89:3f:2a:8c:94:11:f8:59:3d:f1:fb:a0:0e:c6:25:d1:
46:ae:28:c1:45:22:89:8c:6a:7a:d0:db:bf:91:23:5e:b7:b3:
90:59:86:26:57:63:03:dd:f9:19:4a:db:d6:8f:bf:6b:06:9d:
f1:3d:b6:75:b1:c8:28:9d:33:42:82:a5:77:ad:66:a5:6c:b0:
aa:14:36:0f:a7:7a:d4:70:ab:d5:88:bf:65:72:a8:af:01:2c:
ed:32:19:97:a6:b5:59:52:4d:b7:0b:de:19:12:93:23:3b:ca:
4c:c9:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 17:25:48 2024 by rpki-client on console-fra.rpki-client.org