Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qze431lLhzx0EWp5TBN_jd6e45Q.roa
File: Qze431lLhzx0EWp5TBN_jd6e45Q.roa (raw, json)
Hash identifier: x+SRZzTWTjOmVHoDXjnS4LrI7WMJtlSSPg5oAEl0s/E=
Subject key identifier: 43:37:B8:DF:59:4B:87:3C:74:11:6A:79:4C:13:7F:8D:DE:9E:E3:94
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29FDC186E8DF823C79185640C662D5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qze431lLhzx0EWp5TBN_jd6e45Q.roa
Signing time: Tue 02 Jan 2024 12:33:18 +0000
ROA not before: Tue 02 Jan 2024 12:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47966
IP address blocks: 95.46.47.0/24 maxlen: 24
95.47.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:fd:c1:86:e8:df:82:3c:79:18:56:40:c6:62:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4337b8df594b873c74116a794c137f8dde9ee394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:c0:e4:ba:8a:62:c2:39:73:2d:e2:01:17:
29:ed:ef:c5:e4:12:ac:da:d7:c0:df:44:e7:75:74:
c7:32:99:9a:38:56:27:d0:76:12:7b:9e:2b:6e:f6:
30:b3:e7:d0:ec:42:91:5c:56:51:d0:fd:b0:f6:4e:
29:7b:7b:59:2e:a9:e1:3f:73:b1:59:0e:e9:eb:dd:
6d:de:6e:21:bc:4b:48:69:13:f9:71:c9:87:d0:4b:
25:22:e4:0c:61:22:d7:1c:13:12:79:4b:33:25:b9:
2f:92:40:84:56:89:e6:81:c4:d7:95:19:92:d3:a5:
9f:08:ea:01:ea:07:f8:c6:97:e3:86:8a:8b:f5:a8:
28:1f:60:01:6a:76:57:aa:3a:64:28:2d:3d:0d:00:
2f:d9:7c:80:23:bf:02:86:89:4e:31:f3:29:53:01:
0a:1a:a8:93:c1:d8:58:73:8e:0e:82:c6:6b:a5:1e:
a5:d6:1a:d2:dc:6e:15:84:f4:0d:73:0f:6f:cd:25:
89:ad:5a:de:58:d4:ac:7d:35:1b:92:69:1b:34:b9:
0d:51:2a:fb:7c:e7:07:cd:69:2d:1f:09:9c:78:78:
ea:8c:89:56:b6:30:2a:41:37:4a:e4:d2:31:a5:5f:
45:b6:8a:b1:4b:e2:9b:89:c6:cc:f2:e2:21:98:d2:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:B8:DF:59:4B:87:3C:74:11:6A:79:4C:13:7F:8D:DE:9E:E3:94
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qze431lLhzx0EWp5TBN_jd6e45Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.47.0/24
95.47.237.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4e:d6:24:1f:bf:12:0a:35:dc:a7:ae:bc:02:b2:ad:2c:c9:
43:a1:05:96:4c:f6:98:b9:53:75:7c:df:b9:7a:33:65:e0:32:
d8:0c:72:ae:9d:a4:d6:a0:37:f5:b7:62:7e:9c:7f:b5:37:3f:
77:40:03:cd:2d:bd:b2:6b:09:0e:6e:26:11:68:54:f2:e4:f7:
ca:9e:d7:d4:89:0d:5e:02:a0:d0:e5:54:20:26:72:3a:4e:f4:
78:0f:fa:8e:fe:aa:ed:a5:ac:c2:f0:c3:c3:1b:ae:f0:41:65:
b3:fc:dd:c7:44:77:a8:81:9d:c3:87:86:82:66:a1:4b:00:9b:
0a:53:cd:a4:30:2b:ce:89:72:9a:39:9c:a8:3f:98:36:b3:1f:
17:44:64:8a:2d:0a:2a:39:9e:34:6b:41:f5:35:36:07:d9:ca:
60:e8:5f:92:a5:3b:9a:d7:9c:34:24:cb:a0:1a:c1:d3:41:cf:
6c:98:46:c4:74:6a:ec:0c:60:e3:dc:11:a7:8f:cd:d4:c0:9b:
41:1d:dc:bb:f7:79:29:9f:31:de:d3:5c:86:0d:6d:71:b7:ee:
3b:2e:6c:ee:7e:a3:dd:77:8a:83:99:a1:da:43:f8:fd:3e:b0:
13:94:f1:5a:39:cc:ff:31:e5:69:41:f6:f5:1c:c7:62:dc:24:
a9:c6:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:02 2024 by rpki-client on console-fra.rpki-client.org