Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C49tyYtxs1wk0QVxcveLgad1YnM.roa
File: C49tyYtxs1wk0QVxcveLgad1YnM.roa (raw, json)
Hash identifier: Zmqp6HUGnAAPi5uQh5XtbnIC0cNgeCC6cv3IvghvECo=
Subject key identifier: 0B:8F:6D:C9:8B:71:B3:5C:24:D1:05:71:72:F7:8B:81:A7:75:62:73
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018EE63E02823A50DDDB35DA41B4E8197848
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C49tyYtxs1wk0QVxcveLgad1YnM.roa
Signing time: Tue 16 Apr 2024 09:30:07 +0000
ROA not before: Tue 16 Apr 2024 09:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62069
IP address blocks: 31.148.5.0/24 maxlen: 24
92.38.3.0/24 maxlen: 24
95.47.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:3e:02:82:3a:50:dd:db:35:da:41:b4:e8:19:78:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 16 09:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b8f6dc98b71b35c24d1057172f78b81a7756273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:6a:00:a8:7c:aa:aa:9d:8c:a7:a2:96:ad:
91:9e:7f:a6:67:47:95:65:16:df:d0:93:ca:ed:2a:
88:7b:33:b0:72:3d:3c:b5:4e:a1:c6:f9:aa:41:11:
ac:c7:3b:14:81:ad:f8:b8:05:52:cf:93:0e:44:2a:
9a:02:ed:13:82:bb:2e:0c:63:87:75:1d:73:71:4e:
cc:3c:7a:b6:07:53:78:92:6e:70:0e:0a:4f:13:82:
0a:a1:51:41:00:ba:3c:fc:97:90:99:3a:a9:75:ca:
28:8c:95:14:c6:b0:e2:a2:d4:7d:e7:63:91:23:12:
9b:90:32:8f:f3:5f:c1:50:51:44:7b:99:a9:75:53:
bb:7b:c7:28:f8:25:60:58:5c:30:0c:b3:6f:a4:af:
30:a6:86:11:75:fe:1e:86:de:d6:46:ae:f2:e0:cb:
cc:ff:cb:fb:a4:f2:c1:50:ec:d5:b3:3c:85:fc:50:
6d:1e:19:e7:b4:da:c8:fd:84:85:ed:3f:23:65:dc:
e7:0d:51:ab:c6:0d:9b:15:5b:04:d8:43:61:1b:db:
72:a6:01:3c:6d:b8:a6:cc:df:2b:94:3a:92:c0:7f:
dd:a5:3f:44:5a:a3:a6:32:d3:e2:9e:d4:c6:52:49:
33:c8:54:9e:73:43:54:42:1e:a4:d7:cb:98:a1:18:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:6D:C9:8B:71:B3:5C:24:D1:05:71:72:F7:8B:81:A7:75:62:73
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C49tyYtxs1wk0QVxcveLgad1YnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.5.0/24
92.38.3.0/24
95.47.242.0/24
Signature Algorithm: sha256WithRSAEncryption
10:33:5f:f0:ed:e4:16:3b:c2:fc:51:d4:97:b2:38:ee:51:51:
68:81:61:15:db:17:a5:02:69:da:c8:a2:05:bb:64:26:f7:6a:
81:d2:61:18:3b:17:ce:7f:fe:08:be:de:b1:d4:51:7b:69:03:
36:97:a3:a2:0e:07:d6:46:34:b4:ed:ce:12:c4:39:ca:33:a2:
ff:94:52:c1:90:b3:eb:b3:c0:87:30:9d:1b:db:e2:c2:65:07:
a7:34:dc:02:01:b4:be:36:03:43:21:c0:ad:54:10:2f:b6:c4:
6c:44:ca:05:76:0d:43:3f:84:66:80:3d:95:43:a6:9e:ed:59:
9f:bc:6f:e5:7a:5b:45:c1:be:22:73:eb:3a:ee:28:ce:70:5f:
46:6a:57:0d:4b:b5:55:cd:fc:5f:94:a0:9d:90:9b:f0:5b:af:
30:69:f5:dd:55:4c:3d:55:1b:e6:ec:56:96:7a:36:21:e5:29:
9a:63:ce:d4:c2:a1:1a:b0:dc:48:02:8b:a1:d2:a3:15:d6:26:
7c:97:04:24:93:02:05:cf:6b:f8:35:75:cb:37:38:bf:80:44:
76:be:e4:e2:05:31:7e:90:17:8e:48:81:16:9b:ca:65:c1:d4:
9c:36:b1:e2:e1:1e:44:ca:8e:c3:9a:1e:62:44:96:73:99:5b:
4b:88:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:11 2024 by rpki-client on console-fra.rpki-client.org