Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_zxxDqWMW4kLPNAy7r3YTIiTHgQ.roa
File: _zxxDqWMW4kLPNAy7r3YTIiTHgQ.roa (raw, json)
Hash identifier: eybDA8+UdtrhXZRcQXHY834O6PaOyues9z2WfavcP04=
Subject key identifier: FF:3C:71:0E:A5:8C:5B:89:0B:3C:D0:32:EE:BD:D8:4C:88:93:1E:04
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A54C42CD582138B97F06D5BA90918
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_zxxDqWMW4kLPNAy7r3YTIiTHgQ.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211570
IP address blocks: 93.171.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:54:c4:2c:d5:82:13:8b:97:f0:6d:5b:a9:09:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff3c710ea58c5b890b3cd032eebdd84c88931e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:10:d4:86:b5:e3:83:72:ce:01:65:8f:25:
1b:59:28:8b:5b:f3:62:3e:6b:17:8f:b9:7d:0b:7f:
5b:c7:49:77:1e:29:7f:33:52:42:52:3f:f0:cf:87:
99:66:57:30:c5:73:ef:3e:dc:18:d3:5d:f4:4a:15:
0b:25:eb:19:93:61:06:d3:31:67:f7:df:a6:fd:a7:
03:dc:d0:7b:b6:cf:20:61:b2:d7:ef:c5:df:d6:b2:
9d:37:a7:3a:e9:c7:5d:c0:30:35:fe:4c:9a:63:f5:
4e:59:18:41:b5:00:f8:7a:b7:0d:35:84:a8:4f:3c:
b5:c5:96:8b:80:12:8e:85:75:60:36:86:4f:fe:d2:
48:b5:49:42:63:12:2d:96:d8:12:e6:68:b5:56:45:
e9:a0:28:96:f9:e3:85:84:2e:f1:8f:5c:d9:1b:01:
d2:e6:57:05:e7:8c:6a:4d:2f:3e:9c:32:1f:1b:ec:
46:4a:70:56:8a:c9:01:43:49:d5:3d:55:79:54:fe:
d8:fc:a2:f1:4e:b0:4f:bd:0e:8b:33:87:6b:f8:9d:
21:4e:8b:10:8d:18:28:63:08:e0:8d:50:bc:6c:1d:
0b:dc:f5:3f:a2:09:15:30:2b:9d:48:e5:ec:87:20:
63:d7:0d:66:67:95:2a:26:45:56:50:5f:88:b5:d6:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:71:0E:A5:8C:5B:89:0B:3C:D0:32:EE:BD:D8:4C:88:93:1E:04
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_zxxDqWMW4kLPNAy7r3YTIiTHgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.224.0/24
Signature Algorithm: sha256WithRSAEncryption
75:15:61:62:0b:13:3e:89:5e:d1:45:67:2c:de:0a:69:df:b1:
5a:96:d0:5e:1b:d6:91:fb:89:06:3e:d2:0d:15:db:3b:2f:09:
e9:40:39:d6:32:a7:f5:1c:42:53:6b:ba:18:85:e4:9c:86:91:
02:a7:5a:6d:83:44:24:11:e8:fa:77:91:b8:5f:11:45:3a:47:
b5:f7:8f:91:b2:1c:0b:2d:13:9f:00:20:c3:e8:cc:e2:12:e6:
6b:49:6f:13:4d:28:bb:9d:80:89:43:60:dd:86:f9:9d:08:16:
0e:a7:2f:97:8a:3d:ee:d0:5f:a0:25:84:7b:ef:63:9f:7e:90:
92:c3:f5:de:15:91:23:d6:e1:80:f7:a2:9d:4c:89:02:53:fa:
21:8a:bb:48:64:d0:c1:25:b8:e0:0c:97:f5:7a:cf:8d:64:85:
0f:2f:e3:43:83:2b:39:bf:c8:03:65:3e:eb:25:14:4a:22:37:
85:d7:5e:f3:4c:6d:c0:f1:18:21:e3:48:43:a0:a0:2e:ae:52:
e0:cc:99:73:a1:3b:4d:18:bc:9c:9c:59:e8:33:32:06:89:e8:
3d:24:f5:df:14:56:b5:94:52:71:89:c2:78:19:4e:54:94:aa:
06:18:64:b5:19:11:34:d1:47:38:fd:f4:45:1b:81:32:08:7e:
96:7f:30:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKlTELNWCE4uX8G1bqQkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjNjNzEwZWE1OGM1Yjg5MGIzY2QwMzJlZWJkZDg0Yzg4OTMxZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFYQ1Ia144NyzgFljyUbWSiLW/Ni
PmsXj7l9C39bx0l3Hil/M1JCUj/wz4eZZlcwxXPvPtwY0130ShULJesZk2EG0zFn
99+m/acD3NB7ts8gYbLX78Xf1rKdN6c66cddwDA1/kyaY/VOWRhBtQD4ercNNYSo
Tzy1xZaLgBKOhXVgNoZP/tJItUlCYxItltgS5mi1VkXpoCiW+eOFhC7xj1zZGwHS
5lcF54xqTS8+nDIfG+xGSnBWiskBQ0nVPVV5VP7Y/KLxTrBPvQ6LM4dr+J0hTosQ
jRgoYwjgjVC8bB0L3PU/ogkVMCudSOXshyBj1w1mZ5UqJkVWUF+ItdbWvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP88cQ6ljFuJCzzQMu692EyIkx4EMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvX3p4eERxV01XNGtMUE5BeTdyM1lUSWlUSGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavgMA0G
CSqGSIb3DQEBCwUAA4IBAQB1FWFiCxM+iV7RRWcs3gpp37FaltBeG9aR+4kGPtIN
Fds7LwnpQDnWMqf1HEJTa7oYheSchpECp1ptg0QkEej6d5G4XxFFOke194+RshwL
LROfACDD6MziEuZrSW8TTSi7nYCJQ2DdhvmdCBYOpy+Xij3u0F+gJYR772OffpCS
w/XeFZEj1uGA96KdTIkCU/ohirtIZNDBJbjgDJf1es+NZIUPL+NDgys5v8gDZT7r
JRRKIjeF117zTG3A8Rgh40hDoKAurlLgzJlzoTtNGLycnFnoMzIGieg9JPXfFFa1
lFJxicJ4GU5UlKoGGGS1GRE00Uc4/fRFG4EyCH6WfzBc
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org