Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YUfZSb6jtyJ2swe0ubxWMIpSm4Q.roa
File: YUfZSb6jtyJ2swe0ubxWMIpSm4Q.roa (raw, json)
Hash identifier: 3tWXu9gC6FnBTgTT+jI8ijqVxucFka3MX0rqnTLuN40=
Subject key identifier: 61:47:D9:49:BE:A3:B7:22:76:B3:07:B4:B9:BC:56:30:8A:52:9B:84
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A46CDE762E1A876C375D6929288A8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YUfZSb6jtyJ2swe0ubxWMIpSm4Q.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207340
IP address blocks: 93.171.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:46:cd:e7:62:e1:a8:76:c3:75:d6:92:92:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6147d949bea3b72276b307b4b9bc56308a529b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:67:74:df:dd:21:d1:12:41:92:89:28:38:
98:c3:5c:e3:4f:ab:a9:85:c8:56:e5:16:59:4e:50:
28:92:6e:b6:53:6c:50:96:71:22:7a:9a:8e:4e:a4:
ee:99:f8:00:78:f4:4d:e6:e2:e1:d2:8b:e4:0d:27:
86:58:52:ca:42:5f:34:47:37:b2:b0:6c:32:27:d9:
f8:3e:c6:c1:cd:dc:ba:9e:b2:97:f8:4a:af:c8:86:
4a:11:8e:b6:3f:75:f4:da:bc:db:7f:ea:c4:51:ac:
e8:24:3e:ac:19:f7:33:af:34:8f:e6:1a:ab:91:86:
70:37:b2:48:b9:30:f2:8e:f1:3d:ff:5a:7a:1a:d8:
dd:91:0e:ce:d0:1b:ec:bb:ba:94:e4:f2:b0:02:ee:
bb:25:ad:e4:bb:d0:90:0e:64:e4:00:93:94:50:fc:
9c:4f:fc:5f:30:a3:e9:a9:51:22:8c:5e:bc:cf:82:
b0:85:cd:26:47:32:4b:d1:98:ab:a1:23:aa:96:f4:
f0:2d:dc:e3:45:9a:23:a1:50:c3:99:36:6d:84:cd:
c5:5a:e7:98:83:02:c7:24:b6:e2:a7:0d:64:00:6f:
5b:91:ff:ed:57:9d:3f:a3:ac:a4:48:cb:5c:9e:16:
4e:ca:17:64:49:05:5e:2f:cc:21:f9:ef:60:55:f9:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:D9:49:BE:A3:B7:22:76:B3:07:B4:B9:BC:56:30:8A:52:9B:84
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YUfZSb6jtyJ2swe0ubxWMIpSm4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.2.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d0:96:38:77:fe:28:46:84:4f:6f:11:2e:e4:2c:c6:77:33:
e4:fc:44:b7:5a:18:fb:51:3d:19:39:3f:fd:9c:2a:8a:6b:54:
d0:a7:3f:a7:d2:85:c2:b7:bf:16:ca:83:5c:b1:ed:b3:eb:45:
e1:25:b0:a3:d3:45:fb:ce:2a:b9:09:20:a9:b2:9b:94:5f:19:
c9:d4:c8:f2:cb:98:e6:06:70:37:8b:3e:6a:2a:72:e1:e1:4e:
8c:d0:08:54:e5:1c:35:a8:9f:9e:94:07:2d:28:f5:e9:04:25:
91:e5:55:9f:a6:99:94:3a:e7:1f:78:61:f3:e1:cc:67:1d:0a:
f9:42:c0:3a:79:83:06:be:37:b8:1a:84:db:8f:36:a1:0f:91:
f6:fe:30:82:f1:b6:12:21:59:15:44:2f:a7:7b:21:47:34:9d:
8a:ed:2d:43:19:c6:d6:88:7d:e7:f7:0a:9d:54:ec:f6:d7:ab:
5d:a6:51:a1:eb:b6:10:17:b3:f7:e6:e2:48:05:f0:6c:96:a6:
16:f1:47:2c:b2:d4:52:ca:53:05:4a:37:a7:2c:71:4f:59:f0:
ab:18:af:e2:4e:c4:ce:7a:d4:4a:97:d6:64:62:01:df:44:53:
a1:63:06:71:70:39:84:b4:a0:f0:35:95:c6:9f:99:99:b8:8b:
d4:6d:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:03 2024 by rpki-client on console-fra.rpki-client.org