Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7ynhjtuDA1wcPuk-fR_sLp61f4M.roa
File: 7ynhjtuDA1wcPuk-fR_sLp61f4M.roa (raw, json)
Hash identifier: my46xmwPKWKSwFKPTloYQqmIMXI6uPMLjqRKzDFdWtE=
Subject key identifier: EF:29:E1:8E:DB:83:03:5C:1C:3E:E9:3E:7D:1F:EC:2E:9E:B5:7F:83
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29ECFBC68F529586F993C0D02CA51B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7ynhjtuDA1wcPuk-fR_sLp61f4M.roa
Signing time: Tue 02 Jan 2024 12:33:14 +0000
ROA not before: Tue 02 Jan 2024 12:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42146
IP address blocks: 95.46.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ec:fb:c6:8f:52:95:86:f9:93:c0:d0:2c:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef29e18edb83035c1c3ee93e7d1fec2e9eb57f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:4c:27:0c:9a:f8:1b:df:7e:2c:17:03:e6:
21:de:b5:63:9b:50:3b:5b:49:75:40:8f:a7:db:47:
a9:c6:c1:00:5a:c2:db:28:00:c0:34:3b:b9:8f:95:
32:cf:9e:0a:31:b0:f4:74:f0:0e:1e:22:04:bd:aa:
ce:de:c4:10:d1:45:0e:d1:61:cd:c6:0e:0e:23:8d:
ee:dd:33:2a:4a:90:d7:cd:d7:47:5d:44:96:6e:70:
d1:fa:08:ac:16:ee:0d:1f:66:f8:c3:88:5b:02:32:
6e:35:07:9c:de:e3:e0:b7:ed:c1:5a:f9:e4:4c:d4:
3c:a2:8f:52:20:f4:8d:0d:d2:d9:ba:5e:9d:77:49:
5b:03:dd:8f:6b:56:7e:59:1b:55:99:fc:bc:69:06:
a4:b2:09:7f:1a:a7:50:c2:98:47:4e:f6:41:e3:99:
cb:f6:f8:e5:8d:68:32:d7:3d:37:07:e7:ce:93:94:
de:f7:3b:e5:1e:76:bc:55:1f:72:3f:8a:33:c8:38:
b4:ab:35:69:8f:e8:aa:68:c3:d2:0c:2e:d1:7b:f7:
06:68:4e:4c:01:db:7f:fd:36:c1:1b:24:ef:18:2c:
8c:15:c7:c2:69:45:47:f4:d5:3d:ed:36:66:e3:30:
07:54:ee:10:cb:08:d9:9f:70:02:21:e5:0d:0d:f6:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:E1:8E:DB:83:03:5C:1C:3E:E9:3E:7D:1F:EC:2E:9E:B5:7F:83
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7ynhjtuDA1wcPuk-fR_sLp61f4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e6:07:00:34:df:0f:31:e0:0f:84:cc:ca:d4:8c:92:c5:e2:
68:1a:d1:0e:03:70:43:1d:ef:83:da:9a:bd:5f:f4:53:fe:75:
66:77:80:53:ec:21:d9:9e:01:84:ee:09:74:27:41:b7:7a:a0:
43:5c:37:30:4a:13:04:f2:60:3b:ef:7c:0b:c8:45:b5:c7:27:
ad:37:16:85:1c:84:b7:28:c5:21:dc:cc:e5:04:b2:23:cb:a9:
db:84:0e:ff:c6:6e:72:8a:1b:6a:f7:9a:33:9e:7e:40:a9:64:
36:43:b8:21:69:91:c6:37:37:12:ed:25:8b:9d:46:34:52:5b:
c3:d5:94:e7:14:37:e8:51:ad:5e:5b:b4:f1:c7:62:7f:c6:98:
a9:e4:1d:77:49:7c:1b:56:98:77:b3:fa:ba:2e:70:95:06:d2:
52:16:9e:0a:83:7c:8c:a2:4e:67:1b:3b:be:47:f1:8d:b3:a3:
a9:3a:e5:0d:11:92:bd:0a:dc:b2:cc:cb:15:99:0e:d8:ea:16:
8b:33:56:74:7c:5e:6c:38:76:ed:a3:e6:9a:c7:52:9f:a9:e2:
10:c1:5f:13:40:18:b1:5b:41:22:1b:d1:d0:c6:a8:0b:01:d0:
4a:96:7d:ef:2a:f9:b1:be:f3:92:30:e7:c7:be:d9:ac:2d:b6:
62:20:5b:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKez7xo9SlYb5k8DQLKUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjI5ZTE4ZWRiODMwMzVjMWMzZWU5M2U3ZDFmZWMyZTllYjU3ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdhMJwya+BvffiwXA+Yh3rVjm1A7
W0l1QI+n20epxsEAWsLbKADANDu5j5Uyz54KMbD0dPAOHiIEvarO3sQQ0UUO0WHN
xg4OI43u3TMqSpDXzddHXUSWbnDR+gisFu4NH2b4w4hbAjJuNQec3uPgt+3BWvnk
TNQ8oo9SIPSNDdLZul6dd0lbA92Pa1Z+WRtVmfy8aQaksgl/GqdQwphHTvZB45nL
9vjljWgy1z03B+fOk5Te9zvlHna8VR9yP4ozyDi0qzVpj+iqaMPSDC7Re/cGaE5M
Adt//TbBGyTvGCyMFcfCaUVH9NU97TZm4zAHVO4QywjZn3ACIeUNDfaUHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8p4Y7bgwNcHD7pPn0f7C6etX+DMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvN3luaGp0dURBMXdjUHVrLWZSX3NMcDYxZjRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy5MMA0G
CSqGSIb3DQEBCwUAA4IBAQA85gcANN8PMeAPhMzK1IySxeJoGtEOA3BDHe+D2pq9
X/RT/nVmd4BT7CHZngGE7gl0J0G3eqBDXDcwShME8mA773wLyEW1xyetNxaFHIS3
KMUh3MzlBLIjy6nbhA7/xm5yihtq95oznn5AqWQ2Q7ghaZHGNzcS7SWLnUY0UlvD
1ZTnFDfoUa1eW7Txx2J/xpip5B13SXwbVph3s/q6LnCVBtJSFp4Kg3yMok5nGzu+
R/GNs6OpOuUNEZK9CtyyzMsVmQ7Y6haLM1Z0fF5sOHbto+aax1KfqeIQwV8TQBix
W0EiG9HQxqgLAdBKln3vKvmxvvOSMOfHvtmsLbZiIFvZ
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org