Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aN5w9JgOwSSTzXIE4TTyUybMy1A.roa
File: aN5w9JgOwSSTzXIE4TTyUybMy1A.roa (raw, json)
Hash identifier: /QebEsjqlwseKg8lVPR1Zs1eg/+uMeE99jreTwnIB/I=
Subject key identifier: 68:DE:70:F4:98:0E:C1:24:93:CD:72:04:E1:34:F2:53:26:CC:CB:50
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A315A4DD41C61D3626A64D4D7DAA8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aN5w9JgOwSSTzXIE4TTyUybMy1A.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62330
IP address blocks: 93.171.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:31:5a:4d:d4:1c:61:d3:62:6a:64:d4:d7:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68de70f4980ec12493cd7204e134f25326cccb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:41:50:60:24:30:da:42:39:b2:e7:99:6a:76:
5c:7b:6d:81:d8:82:c8:1b:20:87:79:e9:91:49:01:
36:13:6c:47:83:ed:1c:6f:ac:32:77:29:33:1e:1b:
99:a8:32:95:33:a4:b2:5b:fd:5d:41:1e:15:85:42:
5e:14:16:4b:6d:95:fb:4d:37:01:4b:5d:f2:32:81:
f6:ed:97:d9:61:a7:14:d8:5b:5c:0c:18:87:b0:e1:
b4:03:66:97:c4:f6:a5:af:94:4d:c7:fb:c7:d3:d2:
ec:ad:88:47:b4:dc:f6:e6:64:d7:1d:d0:eb:01:1d:
ba:c7:6c:dd:60:19:70:8d:74:f1:25:d7:2c:2a:ee:
66:ba:1f:79:7f:8a:07:f7:9a:61:13:40:56:f1:24:
3b:ad:ad:f8:ae:17:37:b0:fb:4d:de:c2:8b:23:07:
86:ae:a8:27:23:49:4e:e9:f8:e6:b2:1b:de:11:aa:
2a:3f:41:6f:97:58:6a:57:1d:02:07:b0:9d:e3:c1:
8a:24:f4:44:13:14:9d:29:be:8c:4a:d9:b8:82:97:
6d:88:6c:29:70:9d:00:d0:2f:86:91:4c:8e:07:be:
47:84:ac:51:69:e8:1c:7f:e2:b3:23:1e:87:90:61:
e3:97:3f:fb:e3:9a:21:09:b2:9d:15:8b:9f:c1:7f:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:70:F4:98:0E:C1:24:93:CD:72:04:E1:34:F2:53:26:CC:CB:50
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aN5w9JgOwSSTzXIE4TTyUybMy1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:48:b8:e1:99:70:a5:6b:5a:b4:40:1f:53:d9:06:6a:ea:69:
06:89:7d:a1:70:98:d9:64:aa:e1:fc:8f:70:1b:9d:b3:25:c9:
41:39:1f:51:5c:c5:9c:4d:ce:ff:35:62:ce:8d:09:ae:0d:0e:
8d:9b:18:a8:f6:a3:4f:8c:ab:09:2b:5c:5a:d2:44:a6:1f:05:
32:b1:2e:f4:be:96:90:f4:a4:37:e2:d0:67:a7:10:e8:cd:94:
8f:ad:ca:ae:86:d2:7f:c5:76:1c:36:a5:dd:da:03:63:91:47:
f7:65:53:5d:9f:90:cb:b2:8c:01:37:32:8c:40:a6:74:db:c6:
25:2c:45:40:01:1a:29:1b:28:d6:e2:5f:57:d3:81:ac:a3:4a:
08:c7:b7:84:64:60:7f:e7:a2:ae:f3:57:c2:31:d6:1b:89:6e:
b4:e1:32:33:e2:b5:ae:f5:9b:59:b8:81:ac:e5:93:b0:41:08:
0b:87:64:da:f7:76:e5:f8:df:fe:42:e6:c4:1d:1a:ff:8e:dc:
ad:aa:d5:e0:7b:fb:6a:18:e6:7c:a5:b0:d0:b8:5e:74:c2:6f:
ae:83:86:5b:2e:19:0f:15:05:0f:d5:bf:57:b6:c7:a3:69:a7:
df:cd:bb:1f:32:1d:a5:27:0a:68:7c:d1:68:cb:0a:3c:8c:75:
f9:6d:d1:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKjFaTdQcYdNiamTU19qoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGRlNzBmNDk4MGVjMTI0OTNjZDcyMDRlMTM0ZjI1MzI2Y2NjYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUFQYCQw2kI5sueZanZce22B2ILI
GyCHeemRSQE2E2xHg+0cb6wydykzHhuZqDKVM6SyW/1dQR4VhUJeFBZLbZX7TTcB
S13yMoH27ZfZYacU2FtcDBiHsOG0A2aXxPalr5RNx/vH09LsrYhHtNz25mTXHdDr
AR26x2zdYBlwjXTxJdcsKu5muh95f4oH95phE0BW8SQ7ra34rhc3sPtN3sKLIweG
rqgnI0lO6fjmshveEaoqP0Fvl1hqVx0CB7Cd48GKJPREExSdKb6MStm4gpdtiGwp
cJ0A0C+GkUyOB75HhKxRaegcf+KzIx6HkGHjlz/745ohCbKdFYufwX9P9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGjecPSYDsEkk81yBOE08lMmzMtQMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYU41dzlKZ093U1NUelhJRTRUVHlVeWJNeTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXauGMA0G
CSqGSIb3DQEBCwUAA4IBAQAcSLjhmXCla1q0QB9T2QZq6mkGiX2hcJjZZKrh/I9w
G52zJclBOR9RXMWcTc7/NWLOjQmuDQ6Nmxio9qNPjKsJK1xa0kSmHwUysS70vpaQ
9KQ34tBnpxDozZSPrcquhtJ/xXYcNqXd2gNjkUf3ZVNdn5DLsowBNzKMQKZ028Yl
LEVAARopGyjW4l9X04Gso0oIx7eEZGB/56Ku81fCMdYbiW604TIz4rWu9ZtZuIGs
5ZOwQQgLh2Ta93bl+N/+QubEHRr/jtytqtXge/tqGOZ8pbDQuF50wm+ug4ZbLhkP
FQUP1b9XtsejaaffzbsfMh2lJwpofNFoywo8jHX5bdFN
-----END CERTIFICATE-----
Generated at Wed May 29 09:37:03 2024 by rpki-client on console-fra.rpki-client.org