Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I-z5T7hh00TAgzsawINV1kN60Tc.roa
File: I-z5T7hh00TAgzsawINV1kN60Tc.roa (raw, json)
Hash identifier: ANJ9ismdGQhYRXVOIc6dmJnWhoR5IoGAk1RLlLD3bCE=
Subject key identifier: 23:EC:F9:4F:B8:61:D3:44:C0:83:3B:1A:C0:83:55:D6:43:7A:D1:37
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A310C6E0EBF7DF3B64486628463D5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I-z5T7hh00TAgzsawINV1kN60Tc.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62327
IP address blocks: 93.170.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:31:0c:6e:0e:bf:7d:f3:b6:44:86:62:84:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23ecf94fb861d344c0833b1ac08355d6437ad137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:b5:6b:21:87:c2:2b:f9:e7:7c:51:f7:76:
b0:b2:6b:0f:ad:20:4a:84:ff:2f:45:ef:e8:82:ad:
bc:f4:f0:de:f8:b2:be:07:12:a0:91:1f:71:9f:f8:
7f:1b:93:18:8f:3d:38:53:6d:b4:2e:4a:ea:92:20:
1d:88:40:11:19:e8:2a:57:a1:be:e6:df:c2:a1:8f:
74:51:36:d7:ec:db:53:96:3f:27:dd:3e:a1:e2:6c:
ca:47:aa:6b:04:77:44:54:f4:f1:d5:c1:8c:1f:07:
77:43:9a:0a:01:a4:8b:e6:48:3e:70:5d:df:3e:ab:
a3:a0:e7:2b:d3:98:24:df:1b:b0:1e:1b:0f:9c:dc:
7f:ed:44:11:aa:57:95:ff:3e:58:ff:07:c4:84:18:
b3:72:eb:f8:32:53:dd:16:21:a5:b8:27:ec:6f:93:
18:75:e2:78:db:5a:b6:0a:7b:1b:51:5d:58:2e:d0:
e8:85:8c:b5:ae:3b:95:84:a7:08:ff:2d:ce:71:53:
c7:89:59:04:ad:c2:8e:4b:67:a8:57:ff:5c:d6:6c:
1b:6d:3d:b9:b8:0d:7b:27:09:bc:75:de:53:20:58:
90:cb:9f:6a:54:b1:cd:47:c8:71:50:12:78:42:14:
86:45:1d:b9:49:38:fd:94:53:f0:44:05:a5:83:70:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:F9:4F:B8:61:D3:44:C0:83:3B:1A:C0:83:55:D6:43:7A:D1:37
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I-z5T7hh00TAgzsawINV1kN60Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.188.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:01:aa:31:31:f9:e1:9d:56:bc:a4:36:46:8e:25:62:cc:16:
e6:0e:db:91:e7:a6:01:d0:c7:36:28:b1:2f:32:e7:6f:a4:2c:
c7:d9:ae:93:08:fa:4a:4f:b2:95:26:21:8a:90:37:42:b9:83:
0d:b1:6c:35:75:51:2e:80:b4:4a:db:21:6e:36:41:42:62:44:
51:d6:44:47:b7:30:ea:d6:a3:91:22:e7:4b:de:4f:40:ae:97:
50:0c:e5:5d:f8:9a:4d:e0:f9:ce:33:95:42:cc:3c:20:32:0b:
b2:ce:d1:80:4f:8f:ad:1c:bd:55:93:9a:52:75:eb:3b:bc:d0:
dd:e5:22:be:36:bc:01:73:04:c4:8b:c1:b9:d6:6b:28:a7:8d:
b2:91:a9:f6:77:45:e5:95:2d:6d:80:20:68:21:57:12:d7:c0:
76:75:9e:6e:1b:33:33:40:8d:f5:11:a0:65:75:14:2c:cc:04:
d5:f3:0e:51:b3:3a:6d:53:6e:a5:18:6d:01:d1:28:a1:28:8a:
72:64:5a:84:88:82:51:89:02:06:4e:5e:e7:2f:24:be:a7:19:
5b:ee:96:d9:b8:81:ff:64:72:f6:9a:5c:a9:f5:aa:11:d4:2a:
22:8b:09:f8:f2:60:ac:a0:99:fa:4a:e9:e2:32:9b:98:e7:d3:
cd:ed:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:08 2024 by rpki-client on console-fra.rpki-client.org