Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XZuB0cYnEuk0kulhkcTy0lr8H74.roa
File: XZuB0cYnEuk0kulhkcTy0lr8H74.roa (raw, json)
Hash identifier: 6m2A01oc0Zpcc1yAlK/goqpMGHYoJlJ3JXcOw1uNlbo=
Subject key identifier: 5D:9B:81:D1:C6:27:12:E9:34:92:E9:61:91:C4:F2:D2:5A:FC:1F:BE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A22F34B53E75122E3DC94FDC4E446
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XZuB0cYnEuk0kulhkcTy0lr8H74.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60313
IP address blocks: 95.47.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:22:f3:4b:53:e7:51:22:e3:dc:94:fd:c4:e4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d9b81d1c62712e93492e96191c4f2d25afc1fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:4d:5a:c2:49:20:1c:63:70:b8:43:29:65:
70:42:f7:7b:4d:69:d0:d9:4b:c5:09:7e:4d:d9:91:
eb:08:b1:a3:ba:ca:2a:d1:d3:5c:94:4d:00:a4:82:
87:c4:5b:4c:50:17:2d:8f:ac:1c:22:49:1b:06:4a:
b3:40:72:6c:60:75:a0:96:df:3f:a6:ff:34:16:c9:
98:40:d1:f3:95:6a:16:50:fa:d4:53:4f:4d:35:48:
1e:4a:72:92:a2:70:ce:80:8e:cf:16:75:87:cb:eb:
37:20:28:b3:d8:26:b7:2d:ca:d7:98:5f:31:4b:ba:
43:68:7d:a1:8a:8a:d5:e0:55:56:67:51:71:38:84:
b1:f6:8b:6c:bd:7b:18:ec:1b:d2:60:90:31:ff:4f:
fc:46:b4:71:67:38:e5:b5:39:fe:b9:94:f5:5d:67:
5a:24:e0:e6:b4:36:36:d7:b5:52:2b:f7:d0:b7:29:
06:19:2c:fc:ea:2f:45:85:e3:b5:a0:5e:fe:be:11:
c6:f7:b3:1c:71:c0:1d:56:78:e7:f2:f8:a4:69:ea:
7d:39:5b:0e:aa:4b:42:db:c2:f2:a5:9a:c6:a4:ba:
44:14:31:4b:9a:c2:1c:d1:fc:3b:59:93:a2:a3:35:
70:db:dc:f0:59:c7:bc:d2:52:65:a8:ee:6c:d2:5c:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:81:D1:C6:27:12:E9:34:92:E9:61:91:C4:F2:D2:5A:FC:1F:BE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XZuB0cYnEuk0kulhkcTy0lr8H74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.163.0/24
Signature Algorithm: sha256WithRSAEncryption
29:21:16:61:eb:4f:ab:70:02:3b:96:df:fc:af:53:66:3a:e6:
55:8a:6f:c9:80:2d:ba:6f:63:9d:19:3a:1a:ae:7e:8c:64:7a:
5c:d1:35:52:34:4b:fb:8b:39:5c:da:77:4e:08:64:0d:27:b6:
26:db:7f:bf:36:29:d0:9e:2a:ff:3e:df:fb:54:30:3a:40:b3:
84:dd:40:46:91:35:62:f6:5a:3c:26:bc:c0:3a:ac:85:4b:d8:
1c:d0:97:63:bf:54:9d:5e:63:bf:3d:5d:e5:80:71:df:77:1e:
19:60:ac:2f:4a:12:b4:4b:4b:66:9a:d1:bc:74:83:cb:b7:64:
a0:f9:d6:8b:c3:49:e6:4e:6c:ab:93:61:dd:5c:72:15:90:2c:
06:03:d9:6e:67:81:67:d6:fe:a8:a9:07:d5:b4:e1:d0:ac:57:
bc:dd:4b:cf:a0:b2:de:98:1a:77:91:f0:af:6c:6b:d4:3d:b5:
90:fc:c1:8b:6f:30:3e:12:71:40:1f:94:74:79:ba:d7:c0:33:
68:1b:ce:6e:b6:0e:53:be:5f:8f:47:d9:90:c9:fd:b9:7f:ee:
e3:48:fb:30:6f:79:7a:ba:6e:51:f4:27:2c:7a:eb:a1:32:f3:
43:49:20:86:59:da:a1:5a:a8:3b:00:4a:d0:f0:cb:63:9b:b7:
e6:c3:fd:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKiLzS1PnUSLj3JT9xORGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDliODFkMWM2MjcxMmU5MzQ5MmU5NjE5MWM0ZjJkMjVhZmMxZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJNWsJJIBxjcLhDKWVwQvd7TWnQ
2UvFCX5N2ZHrCLGjusoq0dNclE0ApIKHxFtMUBctj6wcIkkbBkqzQHJsYHWglt8/
pv80FsmYQNHzlWoWUPrUU09NNUgeSnKSonDOgI7PFnWHy+s3ICiz2Ca3LcrXmF8x
S7pDaH2hiorV4FVWZ1FxOISx9otsvXsY7BvSYJAx/0/8RrRxZzjltTn+uZT1XWda
JODmtDY217VSK/fQtykGGSz86i9FheO1oF7+vhHG97McccAdVnjn8vikaep9OVsO
qktC28LypZrGpLpEFDFLmsIc0fw7WZOiozVw29zwWce80lJlqO5s0lxXDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2bgdHGJxLpNJLpYZHE8tJa/B++MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWFp1QjBjWW5FdWswa3VsaGtjVHkwbHI4SDc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy+jMA0G
CSqGSIb3DQEBCwUAA4IBAQApIRZh60+rcAI7lt/8r1NmOuZVim/JgC26b2OdGToa
rn6MZHpc0TVSNEv7izlc2ndOCGQNJ7Ym23+/NinQnir/Pt/7VDA6QLOE3UBGkTVi
9lo8JrzAOqyFS9gc0Jdjv1SdXmO/PV3lgHHfdx4ZYKwvShK0S0tmmtG8dIPLt2Sg
+daLw0nmTmyrk2HdXHIVkCwGA9luZ4Fn1v6oqQfVtOHQrFe83UvPoLLemBp3kfCv
bGvUPbWQ/MGLbzA+EnFAH5R0ebrXwDNoG85utg5Tvl+PR9mQyf25f+7jSPswb3l6
um5R9CcseuuhMvNDSSCGWdqhWqg7AErQ8Mtjm7fmw/2/
-----END CERTIFICATE-----
Generated at Wed May 29 07:59:55 2024 by rpki-client on console-ams.rpki-client.org