Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9iBRXeeD8bGxG6on2rKfKfKhs4E.roa
File: 9iBRXeeD8bGxG6on2rKfKfKhs4E.roa (raw, json)
Hash identifier: 6JdQRrYlWkD0H/wSqoOlDRO66sPlDvdF9L2oXyyCA00=
Subject key identifier: F6:20:51:5D:E7:83:F1:B1:B1:1B:AA:27:DA:B2:9F:29:F2:A1:B3:81
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CF8E5876D2B68CB30B4E2962519024795
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9iBRXeeD8bGxG6on2rKfKfKhs4E.roa
Signing time: Thu 11 Jan 2024 14:20:41 +0000
ROA not before: Thu 11 Jan 2024 14:20:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61406
IP address blocks: 93.171.100.0/22 maxlen: 24
95.47.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:e5:87:6d:2b:68:cb:30:b4:e2:96:25:19:02:47:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 11 14:20:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f620515de783f1b1b11baa27dab29f29f2a1b381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:b5:7c:47:aa:90:39:34:1a:eb:96:d4:15:
98:07:25:b7:22:7c:7b:00:0b:e3:46:58:05:85:a1:
fa:7d:9c:8f:cc:cf:06:c3:4c:14:27:2a:7b:9a:11:
85:53:92:e9:0a:e7:ef:db:ec:d7:f9:19:0a:28:ab:
63:5a:2e:ea:54:e2:db:b8:76:bd:f5:c4:81:bf:aa:
ba:51:5c:71:82:c8:9e:ef:36:11:f3:05:f1:d6:44:
82:9b:d1:fa:7f:35:e4:72:d3:cb:11:9a:d7:45:be:
4c:3f:77:de:30:87:21:b6:ba:53:18:61:2f:3b:cf:
8b:13:49:5b:da:ab:74:95:8a:42:3a:db:e9:db:f6:
49:da:44:92:75:eb:66:59:6b:45:03:b6:1c:46:cf:
ba:57:10:5d:aa:46:f0:11:f5:41:b4:d1:ef:78:62:
2a:ee:8c:d3:c4:4f:a7:fe:94:57:04:19:af:7e:62:
34:59:cc:10:3c:9c:3f:e7:f1:13:7f:63:eb:26:7c:
e5:48:de:59:a0:73:8f:7b:b6:fd:ba:f9:aa:91:68:
b6:29:16:25:be:e8:7f:84:b6:8a:73:0c:69:79:8c:
71:5e:68:9a:0a:78:09:e1:cc:26:3b:38:2d:72:98:
74:3c:56:49:ac:5b:b4:6e:b2:f6:9f:88:fd:40:f2:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:51:5D:E7:83:F1:B1:B1:1B:AA:27:DA:B2:9F:29:F2:A1:B3:81
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9iBRXeeD8bGxG6on2rKfKfKhs4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.100.0/22
95.47.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:db:1c:d3:6c:46:3a:db:c6:23:4a:6c:7c:84:c1:8e:b2:72:
69:c1:f1:58:0d:3d:23:af:39:3f:d9:f5:d0:f7:1e:34:df:b3:
61:fa:66:f8:1e:27:39:3c:07:e2:84:18:0f:97:a0:ed:f1:47:
62:d0:f3:0e:07:d6:3d:8d:8f:7e:93:da:11:80:db:23:32:f9:
01:c6:59:0a:3a:9b:59:d8:93:2a:29:fb:27:ef:84:08:2c:dd:
c6:4c:46:82:f5:3a:31:e2:00:cf:96:1b:14:3f:5d:72:2a:ec:
c9:cd:09:73:3d:e2:cc:2a:fa:10:47:2c:95:de:f6:9d:4e:61:
74:80:25:ee:e7:96:83:1c:44:32:31:4a:30:29:b3:78:3e:e6:
8b:e2:db:0d:73:1c:08:57:04:a0:21:bd:be:56:17:56:36:48:
0e:15:62:e0:97:15:73:d6:a7:43:3b:67:47:3e:c9:e6:3f:3b:
fc:12:bd:41:62:e3:ce:5b:78:59:17:4e:86:6a:f1:3d:de:69:
4a:cc:73:74:fa:32:58:3d:69:23:5f:ab:6c:1a:bc:5e:32:43:
07:d4:0e:8e:00:f9:ea:88:a9:23:e6:1c:3f:69:c4:93:20:c1:
6e:80:85:82:89:0c:89:12:ee:58:7a:a5:8d:90:85:42:f9:28:
4c:fd:25:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYz45YdtK2jLMLTiliUZAkeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTExMTQyMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjIwNTE1ZGU3ODNmMWIxYjExYmFhMjdkYWIyOWYyOWYyYTFiMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxie1fEeqkDk0GuuW1BWYByW3Inx7
AAvjRlgFhaH6fZyPzM8Gw0wUJyp7mhGFU5LpCufv2+zX+RkKKKtjWi7qVOLbuHa9
9cSBv6q6UVxxgsie7zYR8wXx1kSCm9H6fzXkctPLEZrXRb5MP3feMIchtrpTGGEv
O8+LE0lb2qt0lYpCOtvp2/ZJ2kSSdetmWWtFA7YcRs+6VxBdqkbwEfVBtNHveGIq
7ozTxE+n/pRXBBmvfmI0WcwQPJw/5/ETf2PrJnzlSN5ZoHOPe7b9uvmqkWi2KRYl
vuh/hLaKcwxpeYxxXmiaCngJ4cwmOzgtcph0PFZJrFu0brL2n4j9QPKMhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPYgUV3ng/GxsRuqJ9qynynyobOBMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvOWlCUlhlZUQ4Ykd4RzZvbjJyS2ZLZktoczRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXatkAwQB
Xy+qMA0GCSqGSIb3DQEBCwUAA4IBAQBu2xzTbEY628YjSmx8hMGOsnJpwfFYDT0j
rzk/2fXQ9x4037Nh+mb4Hic5PAfihBgPl6Dt8Udi0PMOB9Y9jY9+k9oRgNsjMvkB
xlkKOptZ2JMqKfsn74QILN3GTEaC9Tox4gDPlhsUP11yKuzJzQlzPeLMKvoQRyyV
3vadTmF0gCXu55aDHEQyMUowKbN4PuaL4tsNcxwIVwSgIb2+VhdWNkgOFWLglxVz
1qdDO2dHPsnmPzv8Er1BYuPOW3hZF06GavE93mlKzHN0+jJYPWkjX6tsGrxeMkMH
1A6OAPnqiKkj5hw/acSTIMFugIWCiQyJEu5YeqWNkIVC+ShM/SUd
-----END CERTIFICATE-----
Generated at Mon Jun 10 22:24:08 2024 by rpki-client on console-ams.rpki-client.org