Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ICzmkF6DshxE12xPvdOTHbXz1KI.roa
File: ICzmkF6DshxE12xPvdOTHbXz1KI.roa (raw, json)
Hash identifier: ElkYtPb9TFtlx8PVOAeDjCBGFnYsgVQgPvVzMpBbpNE=
Subject key identifier: 20:2C:E6:90:5E:83:B2:1C:44:D7:6C:4F:BD:D3:93:1D:B5:F3:D4:A2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3F8BD010A05D3444E624204E3B78
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ICzmkF6DshxE12xPvdOTHbXz1KI.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204485
IP address blocks: 95.47.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3f:8b:d0:10:a0:5d:34:44:e6:24:20:4e:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=202ce6905e83b21c44d76c4fbdd3931db5f3d4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:4b:dd:d1:cc:6d:60:28:7f:62:ad:43:03:
54:30:b6:dc:bb:1a:46:75:82:10:14:49:00:78:a2:
cc:10:76:e3:8b:da:5e:fa:83:89:7f:63:ee:12:15:
39:9e:7a:f7:4d:75:72:06:00:8c:e6:4f:c6:d6:9a:
95:cd:36:7e:2b:86:8f:d9:37:5d:31:54:6b:a5:80:
b0:2c:04:d7:ff:1e:ae:b6:1f:1b:09:ba:a8:e9:34:
2f:4f:93:b9:0c:a5:04:02:fb:52:4a:16:42:21:46:
9d:76:e3:7a:fe:bd:fb:0e:89:f7:41:37:c5:cf:f6:
9e:66:35:0b:dc:f0:d8:f7:70:25:e6:a4:17:4e:d0:
b8:64:69:41:64:94:a3:e9:1e:b1:dc:68:8f:a6:b5:
17:f1:57:8f:86:41:aa:38:2a:66:3b:ad:86:d3:91:
7f:f1:d1:47:23:16:f3:1f:c6:c6:1c:c9:a8:ea:d7:
9f:09:e6:bd:7c:1b:4f:a8:bc:a6:05:46:a6:e4:4f:
4f:b1:30:42:14:96:c9:59:9e:3f:b8:14:4b:ab:4a:
4a:d7:f7:26:a3:35:f6:25:ac:9d:d9:cb:e0:a9:5f:
ee:39:89:9a:b2:86:28:ea:ca:7c:62:3b:43:a9:49:
0a:2c:37:44:d4:c4:8a:24:e5:e4:4f:3b:ec:00:e0:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:E6:90:5E:83:B2:1C:44:D7:6C:4F:BD:D3:93:1D:B5:F3:D4:A2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ICzmkF6DshxE12xPvdOTHbXz1KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.172.0/24
Signature Algorithm: sha256WithRSAEncryption
62:08:2b:9c:23:8b:cb:b7:cf:05:53:4b:f6:7b:cb:6d:eb:01:
ec:99:c6:c8:67:cf:09:d5:53:16:9e:2e:8e:fa:49:e3:dc:37:
40:91:b7:66:2c:fe:bd:a2:53:dd:e1:89:da:60:3e:ad:b5:0e:
d7:64:d6:0d:94:eb:73:02:54:d6:cd:4d:9e:87:32:5b:2f:4c:
ec:82:72:2e:d6:17:fe:09:c7:3b:ad:44:a9:c5:df:17:94:c6:
b1:c2:33:d7:14:d2:f7:e8:20:1d:f6:09:d1:e2:41:07:06:9c:
79:73:67:2f:40:b8:13:d2:a0:0c:62:4a:d2:2b:6b:31:51:9e:
d5:0c:39:41:a5:b1:46:f9:94:81:fa:60:4d:d6:63:0a:49:0a:
89:9a:0e:86:4c:eb:4d:55:7e:13:06:a6:32:26:ac:36:9f:48:
14:90:8d:56:58:59:bb:4c:0d:d5:44:53:ae:64:fb:37:35:6c:
b4:49:d1:57:74:18:c4:f9:34:55:a4:81:0e:5c:2d:1e:f0:a9:
22:af:54:94:34:b4:ca:e7:ed:48:19:e8:6b:1b:6c:cb:5c:a3:
f4:48:6b:c9:ba:8f:9c:18:81:3e:40:e2:2a:f7:79:ff:da:be:
43:5b:44:af:7e:ba:8e:ce:1d:78:d9:c9:9b:cd:18:3d:77:22:
40:7d:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:02 2024 by rpki-client on console-fra.rpki-client.org