Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FyZi8HH1DjfOGYtue7SExVx58ds.roa
File: FyZi8HH1DjfOGYtue7SExVx58ds.roa (raw, json)
Hash identifier: x3yFhb51swOKfiDpC0j/2rk2t4IioovzXz6IMced2gE=
Subject key identifier: 17:26:62:F0:71:F5:0E:37:CE:19:8B:6E:7B:B4:84:C5:5C:79:F1:DB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E067B9539E8698EE66AAC014A8CB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FyZi8HH1DjfOGYtue7SExVx58ds.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8381
IP address blocks: 95.46.2.0/23 maxlen: 24
95.46.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e0:67:b9:53:9e:86:98:ee:66:aa:c0:14:a8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=172662f071f50e37ce198b6e7bb484c55c79f1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:1d:93:26:82:5f:47:b4:65:6e:e8:6b:2c:
c6:7d:fb:69:bf:e9:3c:50:24:53:70:de:94:4a:99:
f2:b6:85:af:e3:25:4f:30:d2:be:15:64:d6:57:d0:
f7:da:9b:3a:23:3d:93:8c:05:f9:72:8e:ec:7a:05:
f4:25:37:5b:cf:23:c7:f5:67:ea:48:cb:24:18:5d:
d5:07:8e:98:a5:77:37:5e:21:f6:59:dd:d4:aa:61:
8e:2d:16:39:9e:b3:16:07:0d:28:ae:e1:39:aa:50:
74:6b:05:c4:00:38:1c:3e:95:b7:ea:91:fa:52:93:
ad:e4:53:65:37:dc:f8:aa:1d:01:3d:5c:ca:e9:d3:
71:44:d9:b3:6a:27:6e:d5:d8:4f:7a:f0:a7:0f:19:
5b:12:8a:42:ff:82:12:b6:33:2f:43:26:fd:80:41:
4c:e7:f7:6f:74:b1:9e:46:e9:db:18:79:cd:5f:74:
75:2e:88:ea:55:73:57:ec:51:c3:53:0f:28:73:e6:
bd:cb:84:75:05:d3:25:6c:54:7d:9f:6c:57:fe:a6:
43:37:c2:7c:0e:ad:f6:bd:aa:5e:80:ea:57:9c:ae:
d4:ea:2e:25:4d:dc:ff:f8:be:74:18:01:ac:db:bf:
6f:87:82:c8:f0:a3:f3:43:a9:81:e6:15:a1:07:9d:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:62:F0:71:F5:0E:37:CE:19:8B:6E:7B:B4:84:C5:5C:79:F1:DB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FyZi8HH1DjfOGYtue7SExVx58ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.2.0/23
95.46.122.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b8:ea:d0:5b:c2:47:01:fd:22:4b:d2:d3:e5:7d:7d:1a:76:
6a:09:c8:f0:b8:b4:d8:5a:4d:f2:af:8f:1a:b5:30:3f:8f:10:
50:82:b1:06:31:b5:76:70:f1:5a:26:e1:ab:ce:1d:63:6c:f8:
22:53:64:62:04:db:f0:a2:df:e5:7a:4b:3b:38:52:b4:9a:13:
7c:20:b7:f3:bd:a1:4a:ef:60:4a:67:62:2a:50:1d:68:a6:c5:
91:38:0a:4e:69:78:0f:c9:39:ea:f7:24:84:19:c6:83:37:d4:
f2:63:0f:04:ae:42:46:6c:e3:08:dc:8c:a8:36:0e:62:c5:26:
15:bc:da:a6:61:3c:a9:af:85:6c:43:c8:db:65:3e:f9:81:0a:
76:e7:cb:65:65:68:2b:fe:8b:31:3d:a9:a3:c7:18:09:a4:6d:
b9:89:d7:ab:22:55:f0:f1:20:16:32:77:0f:90:f6:7b:48:60:
fe:c0:b0:40:49:cc:75:60:dc:2b:8c:1a:8b:46:ac:04:f6:a1:
70:bf:8d:1d:09:e7:97:73:78:c6:b9:2a:19:30:86:df:62:80:
7d:af:5c:73:04:e6:30:7d:bc:5e:86:db:36:cb:2b:08:e0:dc:
26:5b:8d:c6:1a:3c:a1:0a:8e:b1:c8:47:df:46:4e:11:7a:c9:
6c:5f:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:16:03 2024 by rpki-client on console-ams.rpki-client.org