Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DnZqipGiJGUdxDjI8T9mkHIZ6C0.roa
File: DnZqipGiJGUdxDjI8T9mkHIZ6C0.roa (raw, json)
Hash identifier: q1SSe5zosPRqT1V42FjQl8h5n7tsjMpE3YQHcsz5+TA=
Subject key identifier: 0E:76:6A:8A:91:A2:24:65:1D:C4:38:C8:F1:3F:66:90:72:19:E8:2D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A25056D85FBB1BAE8C81C2E8DB568
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DnZqipGiJGUdxDjI8T9mkHIZ6C0.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60777
IP address blocks: 93.170.0.0/24 maxlen: 24
95.47.136.0/24 maxlen: 24
93.170.25.0/24 maxlen: 24
95.46.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:25:05:6d:85:fb:b1:ba:e8:c8:1c:2e:8d:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e766a8a91a224651dc438c8f13f66907219e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:c7:1a:ed:ad:6a:ee:11:76:a4:d6:12:e6:
ad:40:53:3d:d8:4c:2b:63:4a:f9:5f:ef:50:15:81:
6f:05:1e:a9:59:3f:ed:c4:e7:4d:13:9f:09:11:e9:
2e:a8:6e:ed:d2:24:c5:e4:a7:c9:1a:fd:2f:a4:67:
40:b7:a1:bb:ed:03:6e:df:ab:eb:06:de:e4:18:81:
75:47:7e:98:84:79:9a:40:39:c1:83:49:ee:db:d6:
d6:e4:75:45:02:30:57:de:9e:05:ef:f4:1f:68:56:
ca:e4:1b:42:dd:89:1e:e9:a6:bb:32:91:30:6b:f6:
e6:a3:b7:04:96:f5:d2:2d:34:81:4a:fd:35:23:b1:
21:dc:43:78:f5:11:99:3a:48:d4:e5:f0:ec:e8:ff:
14:45:85:7f:7a:96:04:10:2c:54:99:bc:a6:2f:1e:
1d:0f:41:42:40:1f:5d:a6:35:0b:98:87:e9:ee:94:
d4:a9:59:cb:63:94:15:ca:99:55:2b:c1:1e:68:65:
2b:7c:7d:1a:c3:2d:63:a6:e0:d8:d3:4d:00:bd:35:
e3:12:af:85:1f:88:f6:c6:ec:8e:fd:0f:7e:26:6d:
12:d5:fa:29:d0:c8:f7:74:26:a7:ee:f0:d3:c3:a8:
69:68:2c:46:56:9a:27:46:a0:07:8c:01:86:a8:b1:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:6A:8A:91:A2:24:65:1D:C4:38:C8:F1:3F:66:90:72:19:E8:2D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DnZqipGiJGUdxDjI8T9mkHIZ6C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.0.0/24
93.170.25.0/24
95.46.108.0/24
95.47.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:52:d5:38:fe:0a:8f:91:6f:2d:86:1b:68:b3:a9:db:19:6c:
bf:69:39:b9:0d:a2:71:52:7b:80:6c:53:5a:1d:2f:a8:de:56:
a5:7c:84:6d:1c:a6:ec:ed:2b:f0:8b:99:b7:03:2a:47:8c:d0:
37:c4:e4:7a:77:6f:10:76:da:28:16:3c:d7:a8:d0:7b:17:08:
bd:ce:da:57:42:1c:d0:90:45:2a:b0:fc:48:98:42:dd:5d:7f:
a2:68:bb:c3:83:5c:b7:18:a2:e4:0a:e2:8f:47:59:42:af:41:
d3:31:5c:18:3a:54:fb:3c:5d:28:fd:7c:67:4d:71:ab:84:fd:
65:6a:56:5b:ff:b3:60:fb:ea:dd:33:0c:44:f4:02:46:37:11:
82:20:70:1c:39:17:cc:25:d4:3d:e7:46:63:fb:2b:38:f9:f0:
cb:c7:9f:80:c2:e4:9d:e9:13:7a:5c:8d:60:8d:1c:0b:79:e4:
c2:01:38:c5:72:aa:c4:98:39:bd:4d:43:29:43:c0:56:93:1b:
a3:c9:e2:44:70:f4:bc:66:20:a1:8a:93:23:b2:b0:c6:67:bc:
24:74:92:1d:b5:b6:84:00:b1:4c:88:1c:24:4c:69:f6:4d:f4:
db:ca:2d:cd:2c:70:d0:3b:c8:74:95:94:1c:56:fd:d9:46:ef:
a3:06:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 19:46:47 2024 by rpki-client on console-ams.rpki-client.org