Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HGzqgt0qm7Lu3Luc8-cWe-dTWao.roa
File: HGzqgt0qm7Lu3Luc8-cWe-dTWao.roa (raw, json)
Hash identifier: 1nlmgfeIz05LmVl0SvjyU+HolseAAVVAsL/9t3PkIzU=
Subject key identifier: 1C:6C:EA:82:DD:2A:9B:B2:EE:DC:BB:9C:F3:E7:16:7B:E7:53:59:AA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F3C56802B2A3D462A86CD82CCF25
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HGzqgt0qm7Lu3Luc8-cWe-dTWao.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43656
IP address blocks: 93.170.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f3:c5:68:02:b2:a3:d4:62:a8:6c:d8:2c:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c6cea82dd2a9bb2eedcbb9cf3e7167be75359aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:e3:39:24:09:5b:0e:1a:3f:85:1f:28:de:
24:6e:d6:79:b8:99:4a:a8:90:d7:d3:e3:70:18:5b:
9f:20:28:d6:2e:bc:2b:7c:86:3a:37:01:d3:01:c3:
95:7f:df:a7:e4:5c:74:c8:5a:ea:8b:1b:fc:2e:5f:
b4:f1:95:e8:6b:2a:7b:e9:f3:ea:de:21:71:9b:cd:
df:85:a8:7c:10:bd:c0:10:99:ff:ea:3c:4e:63:c7:
68:1f:b2:02:a2:bb:39:a3:20:cb:7f:20:6f:27:f6:
2e:c7:3a:d9:86:28:ba:38:71:78:04:c1:40:d1:0a:
80:8b:75:5f:13:35:98:58:52:c2:18:82:eb:df:4e:
08:bc:b3:f6:79:ee:f2:ea:87:5b:3a:8d:b3:44:9d:
1c:b6:cf:cc:b4:5d:cf:b6:f5:c1:fb:2d:4f:7c:0a:
f0:99:e8:3f:2a:dd:ee:02:76:f3:2d:68:50:16:46:
a8:d9:73:50:f2:e0:25:69:63:e8:88:48:76:74:52:
64:eb:24:23:94:f3:90:0e:6b:ec:67:fe:d5:3e:a9:
83:58:17:b4:6b:59:38:db:08:0f:14:50:f1:92:dc:
b8:78:f4:c0:4c:b8:81:5f:9f:6f:d4:70:e0:50:4e:
21:b2:03:38:8c:85:81:85:4e:f7:95:71:e6:80:39:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6C:EA:82:DD:2A:9B:B2:EE:DC:BB:9C:F3:E7:16:7B:E7:53:59:AA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HGzqgt0qm7Lu3Luc8-cWe-dTWao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.64.0/21
Signature Algorithm: sha256WithRSAEncryption
81:20:9e:6d:77:2a:c1:78:f3:67:05:f1:c6:de:8c:2d:22:c5:
54:5d:7a:d7:3d:df:76:8c:e6:95:fb:81:a6:0f:44:ce:c3:9e:
55:b5:85:15:51:a8:5e:da:8a:22:ec:17:00:c1:1e:33:be:7d:
4b:5f:5d:e6:8d:9d:d0:55:c4:74:24:bc:3a:7f:04:01:4d:71:
d1:98:71:eb:99:80:f5:da:16:f5:6f:15:0b:00:0c:89:e7:9b:
a6:2b:96:03:f5:6c:e3:a9:11:08:7b:1f:3b:5d:76:29:95:34:
e4:12:dd:4a:5e:87:ff:cc:51:9b:bf:c2:b0:e8:ac:b8:12:2b:
97:74:99:91:b5:0e:c5:cc:a2:2a:c1:91:73:e1:fd:72:f9:cb:
66:2b:3c:cd:68:20:bf:b3:6c:cd:e2:6a:e2:32:ea:ac:96:fb:
2e:65:74:59:f6:cc:d9:e3:f9:c2:c7:a6:33:23:f5:49:f8:ac:
2a:70:6f:7a:9b:6e:ce:81:9b:8e:b0:20:37:a9:6a:f2:4c:34:
8e:05:83:cb:bc:44:85:02:db:5e:8c:81:f9:9b:39:51:c4:44:
9b:55:c3:38:d6:54:a3:7d:59:63:d9:55:91:f1:de:cf:71:5c:
dc:71:d7:8b:e4:5a:6c:c9:5c:e9:84:58:05:1b:21:65:06:64:
2f:d3:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:11 2024 by rpki-client on console-fra.rpki-client.org