Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Ok9oh-ss6jdwlkxU0WQlTMRAY0.roa
File: 9Ok9oh-ss6jdwlkxU0WQlTMRAY0.roa (raw, json)
Hash identifier: dt0ld3h4tqOVT24uojg8QE07MYopYMmmMRFgcuRhtY4=
Subject key identifier: F4:E9:3D:A2:1F:AC:B3:A8:DD:C2:59:31:53:45:90:95:33:11:01:8D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29FF50B5357C4D93A72B25C041BEBC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Ok9oh-ss6jdwlkxU0WQlTMRAY0.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48323
IP address blocks: 93.170.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ff:50:b5:35:7c:4d:93:a7:2b:25:c0:41:be:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4e93da21facb3a8ddc25931534590953311018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:79:54:ba:a4:8e:e1:fd:c6:00:e5:b5:ca:
98:a2:29:05:39:87:73:c1:d4:f2:b4:39:17:0f:b2:
76:0e:09:fe:da:30:99:b9:96:14:eb:0d:87:c4:32:
db:a2:ee:f2:a2:97:d1:2d:03:ee:89:f5:af:17:2a:
3c:d9:86:b6:65:8e:ce:00:30:b4:b7:59:b9:72:4e:
3e:a6:58:8f:ca:da:c3:5f:91:11:7f:0e:89:71:fc:
20:7c:d7:1e:59:61:68:6f:72:3a:9c:98:a4:a4:54:
1e:1b:2b:79:5c:47:62:2e:e2:b4:04:4a:46:ed:38:
ba:0e:5e:b9:46:76:6f:eb:f9:a1:19:c0:3e:44:78:
c7:e6:8a:2f:76:48:a3:10:70:58:41:b1:ea:cb:62:
4a:db:51:cd:bf:9d:19:e9:e3:ef:7d:bd:13:b7:a6:
95:7d:87:9d:df:4b:3f:63:ae:9c:c2:4a:0d:0c:11:
44:89:d3:34:2e:45:34:14:04:ef:82:78:4a:83:bb:
fe:c8:f9:91:c6:24:2b:9b:84:95:18:2c:a9:d8:48:
05:04:40:e5:2d:41:b5:56:ef:24:0e:50:4e:5f:73:
f2:74:cf:82:48:e7:4e:2c:38:44:bb:c7:d9:88:fe:
2d:f8:b6:27:3c:23:90:d4:70:65:db:da:05:da:1e:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:3D:A2:1F:AC:B3:A8:DD:C2:59:31:53:45:90:95:33:11:01:8D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Ok9oh-ss6jdwlkxU0WQlTMRAY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.128.0/22
Signature Algorithm: sha256WithRSAEncryption
74:e9:68:da:c3:35:c3:88:4c:90:ca:62:df:28:d1:fa:0a:ad:
8e:f4:e2:26:91:73:ac:e6:af:d8:b5:cc:ee:11:fb:f3:fd:35:
f9:e9:e4:7b:0b:eb:0f:e6:61:ca:50:11:62:a3:30:d4:09:3e:
51:e4:e4:44:69:44:82:17:b7:57:69:1e:b4:54:b0:a9:2e:c5:
29:0a:a5:36:20:58:9a:9f:d1:68:c0:01:37:3c:96:62:2f:eb:
36:6f:47:7e:0f:2c:dc:6d:d1:49:8f:d9:8c:85:f1:dc:56:53:
67:14:34:0e:0e:d6:6d:41:4e:8b:22:bc:24:95:12:73:63:b3:
45:7d:23:b4:aa:93:fb:51:10:4f:17:e6:f7:ab:7c:7d:b4:f9:
e8:b3:b0:84:99:70:ac:40:26:4a:70:55:5f:ea:cf:1a:6a:92:
e2:5e:35:00:c6:de:2c:2f:f0:a6:18:4b:d5:fa:f6:3f:42:c7:
fd:bf:0c:6d:df:92:59:a1:8a:4b:33:1d:67:d4:d1:f4:94:00:
95:19:f1:7a:f5:ee:c2:87:cf:ef:f3:96:6d:e0:91:91:66:84:
74:91:4b:cc:60:f8:a7:a9:31:7b:5e:6e:db:c5:0d:e2:2b:ed:
71:29:ab:81:09:33:96:2b:43:f2:e0:df:50:4b:5f:95:b7:91:
cc:5e:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 07:55:30 2024 by rpki-client on console-ams.rpki-client.org