Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6lc7DRO46ZNjAuOckODtPBm-5I.roa
File: P6lc7DRO46ZNjAuOckODtPBm-5I.roa (raw, json)
Hash identifier: wRMY1Ueu6SAQiVvQUljIcT7fVtM+r+tTE67XJOX/Jqs=
Subject key identifier: 3F:A9:5C:EC:34:4E:E3:A6:4D:8C:0B:8E:72:43:83:B4:F0:66:FB:92
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A5755546391844833D41F5525084B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6lc7DRO46ZNjAuOckODtPBm-5I.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212432
IP address blocks: 93.170.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:57:55:54:63:91:84:48:33:d4:1f:55:25:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fa95cec344ee3a64d8c0b8e724383b4f066fb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:6d:db:c2:a4:1b:f5:2f:e1:1e:e1:53:85:
0b:4e:ba:1e:d6:06:fd:07:0e:43:89:04:ae:9d:19:
4f:82:a3:cb:f2:78:2a:f1:fc:d2:11:66:b3:d9:c9:
33:87:2f:32:2f:42:3f:bd:0b:1f:73:05:dc:36:94:
20:11:25:15:c5:d6:75:38:b0:f1:0f:44:86:bb:bf:
5f:6d:89:9e:00:33:0e:5d:b7:99:ef:93:e3:5e:55:
e1:d1:25:61:9e:61:f7:0a:94:9c:c8:37:3f:da:3e:
f5:64:22:f1:3c:bc:e3:21:8a:41:d5:c1:29:04:9b:
84:d2:e6:cc:82:b5:b8:75:74:9a:5d:1c:55:73:ee:
11:f6:5d:9b:c9:76:5d:53:35:dd:c1:ce:85:87:14:
6e:51:bf:0e:7a:1f:25:78:2d:20:50:0f:63:b3:40:
dd:ea:fd:4b:25:86:9b:1d:be:07:31:6d:f1:91:71:
b9:39:b6:7b:5b:b5:6f:b8:6a:6f:e6:5f:32:1a:33:
26:16:cc:de:9b:49:81:57:74:a0:48:4c:a1:57:a9:
3d:8a:73:d3:7e:48:ec:f7:e4:69:a5:a2:78:4e:fd:
98:66:48:db:a0:a6:e1:11:97:be:dd:5d:f3:21:1f:
a7:15:3f:e7:53:1e:32:23:c0:8c:5f:04:27:86:a7:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:5C:EC:34:4E:E3:A6:4D:8C:0B:8E:72:43:83:B4:F0:66:FB:92
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6lc7DRO46ZNjAuOckODtPBm-5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9f:a8:d1:35:6c:0c:80:a1:6b:d0:f8:c4:f0:21:ac:7b:c5:
25:ed:92:74:b7:18:79:06:2b:46:a9:6d:82:89:f5:3f:7a:10:
de:6b:13:de:92:bc:5e:98:90:ee:64:88:9a:7c:bd:81:a3:d7:
43:99:c1:7c:f0:aa:bb:ed:81:2d:59:ce:48:a1:dd:e8:27:2a:
61:0a:2b:e2:c2:2f:37:6e:63:8d:ea:6f:a9:c1:e1:8a:0c:5c:
cc:47:91:20:01:5d:af:11:be:92:8a:e3:f3:96:14:5c:18:40:
29:e3:4c:8a:25:90:0b:e6:84:6f:40:bb:ae:50:72:07:94:8e:
97:d3:23:58:03:70:71:88:67:74:90:a5:b5:43:3d:eb:78:43:
52:52:fa:62:8d:4f:fd:8c:80:d9:9c:01:27:55:13:39:c4:bc:
d1:4c:b8:9b:53:dd:9b:3d:78:a7:aa:79:37:c9:23:37:ba:71:
31:2d:9d:57:a5:2f:d3:ef:7f:9d:9a:dd:de:d5:8e:ec:5a:df:
8f:ce:67:88:50:83:d5:7f:bf:f4:89:29:1f:86:1a:41:0d:03:
a0:59:98:b2:63:29:0e:4e:bf:f1:c3:db:cf:00:0a:03:7e:fd:
8c:88:3c:48:02:dc:d0:65:ee:5c:2c:f7:0d:24:86:79:54:82:
c1:c3:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:59:55 2024 by rpki-client on console-ams.rpki-client.org