Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y5yc4AXt_i85bvlKwTFRhYQyvH4.roa
File: Y5yc4AXt_i85bvlKwTFRhYQyvH4.roa (raw, json)
Hash identifier: fpNb0wQio0p2fS/ObxS/M3LS5vPXQkwA3bQZTZL22LM=
Subject key identifier: 63:9C:9C:E0:05:ED:FE:2F:39:6E:F9:4A:C1:31:51:85:84:32:BC:7E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A56E212BBAB0B2A38CF6B445959BF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y5yc4AXt_i85bvlKwTFRhYQyvH4.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212303
IP address blocks: 93.170.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:56:e2:12:bb:ab:0b:2a:38:cf:6b:44:59:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=639c9ce005edfe2f396ef94ac13151858432bc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:1e:5e:0a:3f:c9:d4:07:7a:5f:8a:0f:3a:
1b:2d:a9:37:2f:f4:9d:ae:e8:76:19:73:8c:a2:ce:
91:be:c6:15:cc:f0:f8:e5:5e:e2:8a:3e:52:f5:df:
43:74:e6:f0:8f:de:9e:af:c5:83:d2:b9:df:6f:54:
73:7d:2c:f7:8f:e5:f4:7e:16:de:e8:12:c4:72:f9:
d4:65:14:9a:c2:a1:fa:9b:dd:21:f9:1b:67:b7:de:
15:1a:70:02:ba:53:01:68:8c:02:6d:4e:39:b7:6a:
da:83:c9:ce:e6:3b:92:8f:84:76:0f:7f:39:23:8e:
3f:ac:ed:04:b2:68:dd:fd:d6:04:71:e9:e2:ab:b8:
ec:bd:b1:c9:fa:89:88:0f:94:c4:6d:9f:63:b5:27:
48:c2:cb:62:6e:2d:dc:fc:52:30:34:91:3a:87:69:
50:da:ae:6f:57:7d:98:7a:44:1a:64:20:1a:49:b9:
85:da:f7:8d:22:f3:39:e3:b4:1a:18:30:d4:41:17:
f1:55:cb:a1:23:65:be:d1:5f:a8:ef:98:bf:fc:dc:
fd:3a:c3:f2:de:bb:8b:be:66:e9:5c:0c:6d:63:8d:
5f:9c:ba:58:30:74:90:8d:6e:68:4b:46:37:5c:d2:
f9:5d:3e:8f:a2:22:3b:6b:84:7e:6e:97:62:6a:c1:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:9C:E0:05:ED:FE:2F:39:6E:F9:4A:C1:31:51:85:84:32:BC:7E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y5yc4AXt_i85bvlKwTFRhYQyvH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1c:d7:04:af:de:c2:6d:1f:7d:7d:81:65:37:b4:5f:bf:39:
b7:c6:81:10:dc:67:5b:fb:e1:e1:11:9f:a7:3d:80:f5:4c:02:
32:91:88:8d:fc:ad:b3:3a:80:99:a6:99:a8:a3:bc:be:81:de:
9a:52:e1:24:40:82:c8:58:4d:a2:83:77:6a:83:4e:e3:99:7a:
af:44:70:2c:43:46:8b:86:8c:b8:48:a4:fe:ca:df:63:a3:15:
3e:c7:b2:e3:73:c3:bf:b6:16:14:cf:77:58:49:9b:aa:ff:b6:
c7:42:98:c2:38:45:ab:6e:b2:96:b7:b0:d8:e0:9e:ec:28:00:
e9:78:e2:8c:68:28:68:a9:31:ac:86:12:e6:f5:d1:34:c1:30:
81:5c:b8:2a:dd:2c:3a:3d:b9:ab:f1:ca:02:9b:30:16:ac:88:
2c:d3:b2:15:e0:d1:05:e3:a2:ad:18:92:f6:9f:a6:78:44:ae:
52:5b:69:dc:84:1d:88:60:57:7c:07:19:32:8a:dc:3a:5f:0b:
34:f3:53:aa:00:fd:1e:8b:2a:32:c2:6e:d7:73:82:d6:81:5c:
f7:7c:30:e0:38:60:10:fe:80:cc:25:43:cb:d1:19:15:15:b5:
b8:59:de:1b:eb:c7:52:40:e3:cc:6d:38:a7:a2:12:0e:26:f0:
07:38:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 19:33:11 2024 by rpki-client on console-fra.rpki-client.org