Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Kp98ZQbwGiN1TTeNXLbzAcNQ_-o.roa
File: Kp98ZQbwGiN1TTeNXLbzAcNQ_-o.roa (raw, json)
Hash identifier: fYACBB3osSLl580FpCaHUDM2LgJ6wkEWwWh1+12xJ94=
Subject key identifier: 2A:9F:7C:65:06:F0:1A:23:75:4D:37:8D:5C:B6:F3:01:C3:50:FF:EA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A50F1D7E50EFFCC8F475461F9C7C5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Kp98ZQbwGiN1TTeNXLbzAcNQ_-o.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210188
IP address blocks: 93.170.100.0/24 maxlen: 24
31.148.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:50:f1:d7:e5:0e:ff:cc:8f:47:54:61:f9:c7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a9f7c6506f01a23754d378d5cb6f301c350ffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:5a:6a:f2:5b:b0:4e:39:97:21:ee:8c:05:
8b:7d:e4:57:5b:8b:3c:44:cf:3e:99:f4:57:a4:62:
5d:36:05:4f:30:85:5d:66:35:50:de:41:74:6a:cd:
14:01:1c:6f:91:81:c6:a2:6f:cd:61:62:fe:6b:0e:
d3:63:6f:75:4d:37:a4:b0:b2:ec:49:e1:ef:fa:c9:
6f:9a:50:ca:b4:32:6e:96:9e:1e:b1:15:7b:22:0c:
db:6a:74:38:71:2d:e2:fb:85:37:b8:69:3c:a9:0f:
78:4b:04:9c:ed:47:66:9b:a7:c1:0d:77:01:6b:18:
40:c9:f7:a1:63:b9:5c:57:52:3c:9e:59:5b:08:0e:
72:ca:bc:f9:5b:bc:c6:f8:4c:6a:3a:7c:22:a5:0d:
01:48:e1:9b:39:12:42:61:1e:7e:5a:5a:13:8a:6d:
eb:1d:98:57:aa:1c:78:a4:74:1c:9e:f1:1d:e6:ab:
0e:50:3f:0a:62:d6:ab:e6:f4:e2:e1:0a:81:78:82:
a1:8b:f8:f9:bd:3d:b2:d7:8c:ca:c4:17:ec:6d:d5:
80:1a:d7:e3:de:3f:6b:29:e7:57:4a:df:36:15:8b:
01:1f:9a:8f:a1:42:65:0d:f7:08:92:52:a8:d7:39:
63:c0:df:67:2d:40:18:dc:8e:a4:79:18:5d:e2:96:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:7C:65:06:F0:1A:23:75:4D:37:8D:5C:B6:F3:01:C3:50:FF:EA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Kp98ZQbwGiN1TTeNXLbzAcNQ_-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.246.0/24
93.170.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2e:3f:54:db:09:1d:19:64:2b:8f:60:a6:b6:01:61:09:ba:
e2:99:4c:17:7d:f0:dc:a3:41:95:b6:d8:1c:a7:32:0b:57:a0:
d1:37:69:19:0e:a9:d4:6a:95:d2:b0:61:b4:b2:06:87:84:c2:
19:6c:54:27:b6:9a:72:84:cc:a1:d8:a2:de:66:4d:98:ca:3a:
0f:fe:46:7b:86:69:0a:81:e6:e7:74:ad:dd:57:d2:3a:b7:93:
5a:c6:83:3a:78:62:69:dd:4b:70:e0:48:e6:41:52:cb:1d:fc:
c4:e8:82:2c:46:d6:9d:08:df:78:2e:74:d2:28:de:d9:b2:6b:
44:11:5e:ea:66:13:2e:c5:b6:2b:ed:63:1d:94:d7:7a:bc:4a:
8b:3f:ee:62:c2:fe:6f:26:b3:13:95:4e:bc:81:ba:a1:18:9f:
26:7a:6c:87:2b:86:1d:37:74:c0:64:27:60:bf:ef:2a:13:58:
76:4a:2f:72:bd:32:81:34:52:aa:b2:45:33:20:ac:f1:e1:de:
74:21:fd:20:c8:85:71:2a:8f:0a:fa:62:7b:d6:0a:50:24:0d:
bc:97:8d:48:ec:35:35:d6:4a:1e:9b:fd:21:ad:88:ac:dd:ab:
22:0d:c4:1f:11:01:f1:66:42:42:7e:67:ab:1a:2e:89:34:f5:
1b:63:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:41 2024 by rpki-client on console-ams.rpki-client.org