Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EYEVJpncQSFG31u3QoYfgs8_GMk.roa
File: EYEVJpncQSFG31u3QoYfgs8_GMk.roa (raw, json)
Hash identifier: bjTqOsUnGbT9p+k5BsoDMz3mMCuYo8DKBUQZAFNohsM=
Subject key identifier: 11:81:15:26:99:DC:41:21:46:DF:5B:B7:42:86:1F:82:CF:3F:18:C9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A539FB5F9D426CCC293C80556E93E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EYEVJpncQSFG31u3QoYfgs8_GMk.roa
Signing time: Tue 02 Jan 2024 12:33:40 +0000
ROA not before: Tue 02 Jan 2024 12:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210768
IP address blocks: 93.170.191.0/24 maxlen: 24
95.46.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:53:9f:b5:f9:d4:26:cc:c2:93:c8:05:56:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1181152699dc412146df5bb742861f82cf3f18c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:d9:2b:2d:a2:6c:ec:36:93:a6:06:a6:2f:
0e:26:13:17:7e:c6:8e:3d:3a:35:ea:b1:dd:15:41:
86:97:b1:9c:50:69:59:f1:fa:86:09:51:e6:ee:6b:
5a:43:9d:e1:2d:e1:c2:8c:b3:7d:ed:f5:3b:50:4c:
69:db:10:61:c8:1f:2f:ea:24:bd:e6:f4:18:d3:a2:
1d:52:b4:ae:eb:23:27:b8:0c:1e:16:d8:c4:65:b4:
a6:7f:d7:d2:d6:ae:ef:9e:47:1a:3e:b5:71:bb:e8:
4f:0c:6d:6f:31:31:29:51:08:52:33:10:c2:0b:e1:
b7:a9:0b:87:40:16:70:ec:79:bd:cd:c3:f7:42:2d:
33:66:6a:02:d2:24:a6:ca:19:50:d0:1d:db:72:27:
19:5b:cb:5e:7c:4a:d8:4d:59:19:76:93:3a:70:c7:
22:98:be:cd:a3:7e:98:2d:e6:0a:56:e0:7a:2c:1d:
5c:b1:61:59:33:c1:62:c9:e1:eb:3b:6b:e0:d2:bc:
e4:02:1b:78:c8:ce:06:e1:c9:a7:2f:e6:13:a4:57:
95:50:7f:98:e0:a9:27:c2:fc:6f:ee:de:78:1a:b5:
52:99:85:c7:c4:3c:3d:2b:a7:a2:2c:92:e3:60:ac:
1d:bc:77:a8:46:6e:24:74:a3:7d:d4:c1:3a:f0:6e:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:81:15:26:99:DC:41:21:46:DF:5B:B7:42:86:1F:82:CF:3F:18:C9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/EYEVJpncQSFG31u3QoYfgs8_GMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.191.0/24
95.46.36.0/23
Signature Algorithm: sha256WithRSAEncryption
03:e7:49:c7:81:09:fd:e8:f3:51:13:2a:54:21:db:37:05:47:
e0:12:56:c0:63:56:8a:86:e9:7f:ac:97:b0:19:42:3f:7d:34:
52:94:db:59:7d:ac:2d:68:8e:94:dc:75:ed:16:c5:f1:6d:a3:
04:b8:7a:1f:04:dd:00:ad:6a:8d:5f:b6:95:9f:11:56:02:b0:
96:53:63:38:17:f4:71:c0:b8:f1:e1:2f:ef:66:17:bf:25:5f:
e3:16:89:a4:b0:a5:72:19:e1:f1:8d:b0:07:b4:14:54:2d:bc:
f0:32:c1:0b:06:a9:c4:24:f0:53:c4:97:44:ee:8e:b0:8c:56:
53:5d:e8:3b:3c:41:43:ad:28:77:9c:ef:c3:4e:3e:cf:ea:d5:
d3:77:9e:79:d5:b0:6e:f5:2b:7a:73:24:ba:cb:9e:7c:33:13:
da:bb:10:d0:67:9f:81:6f:42:be:45:46:5d:6e:33:06:24:83:
e0:ff:31:7d:48:18:8b:6f:ef:fb:cf:a4:02:f1:9d:c8:5b:e2:
43:59:16:b7:b1:27:37:45:20:ff:47:35:57:68:1d:b0:83:d0:
e0:d9:4e:78:01:71:33:cf:c7:bc:d1:9d:d2:95:17:75:00:30:
4d:c8:7d:23:0e:f1:db:ae:86:2f:ae:eb:83:32:24:5a:04:75:
89:77:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:11 2024 by rpki-client on console-fra.rpki-client.org