Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_X_VI07MwXECOmXcXn5wsZ6fUWE.roa
File: _X_VI07MwXECOmXcXn5wsZ6fUWE.roa (raw, json)
Hash identifier: en0lTQ2HUWIkinO24uO6NKB//UET8jrIy3HTtAD6CW0=
Subject key identifier: FD:7F:D5:23:4E:CC:C1:71:02:3A:65:DC:5E:7E:70:B1:9E:9F:51:61
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A2238DE9F8DA5555BD0441C7ACBCB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_X_VI07MwXECOmXcXn5wsZ6fUWE.roa
Signing time: Tue 02 Jan 2024 12:33:27 +0000
ROA not before: Tue 02 Jan 2024 12:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60245
IP address blocks: 95.46.148.0/24 maxlen: 24
95.46.149.0/24 maxlen: 24
93.170.92.0/23 maxlen: 24
31.148.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:22:38:de:9f:8d:a5:55:5b:d0:44:1c:7a:cb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd7fd5234eccc171023a65dc5e7e70b19e9f5161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:b3:2f:b8:98:fd:28:af:5b:d2:3d:57:c7:
58:4b:a0:ba:ff:c6:a2:f8:27:b7:72:bf:26:e7:4a:
5c:aa:a2:a6:a5:56:b8:2e:f5:0f:5a:72:c6:a9:c6:
13:b7:70:20:1d:02:08:54:b6:ae:d1:10:49:8a:92:
d0:33:0c:1f:a5:f8:34:97:da:ca:9d:14:10:42:c0:
f1:12:51:5c:52:fe:79:c8:3a:5e:3a:1d:d3:78:88:
ce:68:27:3c:b8:34:d3:f6:19:7e:f0:ba:e6:0d:26:
7d:78:e6:5d:55:ce:a6:ad:29:2d:2b:2d:4a:25:95:
ad:f9:6a:a9:76:fe:ad:f0:04:4d:81:59:7b:41:58:
a0:69:c2:78:67:df:f4:8a:59:df:29:78:6a:da:65:
cd:55:52:25:d3:28:90:3a:c0:75:1a:e3:50:5e:ce:
a0:d2:d4:50:52:13:06:25:81:ee:33:bb:29:20:4b:
f5:fb:a4:c9:85:11:72:e0:3d:54:e5:90:cc:8a:6d:
39:22:d7:fa:f5:9b:0a:15:d1:f7:88:1d:2f:24:2e:
93:2e:cf:cc:04:25:ec:0b:2e:69:01:39:e9:44:64:
28:1a:8f:c6:2d:b2:6b:a9:42:02:19:ad:49:87:e3:
2f:64:db:20:13:c9:3c:3b:de:8f:4d:f5:63:69:e5:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7F:D5:23:4E:CC:C1:71:02:3A:65:DC:5E:7E:70:B1:9E:9F:51:61
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_X_VI07MwXECOmXcXn5wsZ6fUWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.172.0/23
93.170.92.0/23
95.46.148.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:04:3e:e0:bf:2f:80:cf:2e:de:a7:7e:4b:fe:4a:83:ff:b1:
b4:00:0a:4c:7d:d3:46:49:cf:47:6c:ce:23:0a:42:f4:18:d3:
31:c9:33:a7:20:1e:a1:09:83:37:de:53:45:60:18:77:69:42:
20:5a:ea:4a:7b:a5:60:b3:1c:19:58:6d:e6:65:cc:3a:5e:64:
d9:10:f4:1e:54:90:f8:bc:04:06:18:86:80:fc:29:d8:95:ea:
9c:15:7e:14:df:7d:79:6d:15:47:8e:14:0e:0b:6b:65:10:79:
9f:ad:54:97:96:63:01:41:9f:29:36:e3:4c:5c:8a:fc:93:90:
e8:84:36:f7:76:c2:bc:c2:a1:ee:c4:64:1e:49:cf:7d:0c:e9:
3e:68:44:34:96:c4:d6:1b:b0:52:3b:3b:ed:49:2c:58:05:6f:
0c:b8:e9:9b:d6:10:13:84:73:5e:a5:00:fe:f4:e6:79:8e:b9:
bc:bd:b3:ac:67:d5:80:54:19:98:41:bb:86:1c:aa:f5:fd:8f:
24:47:9c:ff:5e:c1:d9:37:45:77:9c:f7:15:32:b7:4d:21:6f:
d8:a9:9f:d1:a4:d0:25:eb:e1:ea:c8:47:fd:68:79:1d:88:26:
f5:76:8a:88:f8:21:9c:89:da:8a:49:d4:d6:b8:f5:62:84:fa:
a6:03:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:16:04 2024 by rpki-client on console-ams.rpki-client.org