Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aPjJlhiq0pXAro5cB8zzJNC5dHc.roa
File: aPjJlhiq0pXAro5cB8zzJNC5dHc.roa (raw, json)
Hash identifier: WhClSnIGXWbOXJL+zTcwGwPmkPY9BdqzJKv8nNsI5O8=
Subject key identifier: 68:F8:C9:96:18:AA:D2:95:C0:AE:8E:5C:07:CC:F3:24:D0:B9:74:77
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3469C07255713EADC63261520D3A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aPjJlhiq0pXAro5cB8zzJNC5dHc.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197971
IP address blocks: 92.38.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:34:69:c0:72:55:71:3e:ad:c6:32:61:52:0d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68f8c99618aad295c0ae8e5c07ccf324d0b97477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:d7:84:52:d6:db:ea:ba:4b:7a:ac:2f:6b:
45:ff:0d:8c:b1:86:fe:93:3c:36:40:6e:a9:10:a6:
50:21:b8:33:5f:b3:29:99:f5:47:b2:36:47:ed:83:
9a:bb:89:4f:c5:da:05:74:46:9f:34:e4:33:a2:80:
92:0e:5d:d0:70:39:28:7f:6d:cf:dd:cd:a2:7c:2f:
25:c5:f5:03:3e:19:62:e0:d7:c6:46:e4:64:d5:ba:
98:46:54:f5:94:47:75:11:af:96:c2:96:63:65:60:
8c:4d:fe:98:f3:9d:cd:3f:39:43:01:d9:a3:59:e8:
cc:a6:dc:9a:56:c0:c7:7c:95:3c:3e:f4:5f:fc:ec:
d1:25:18:e3:60:53:9c:37:8c:41:4a:b0:6e:c2:10:
a9:f1:f4:4b:02:ab:e6:87:90:f0:88:15:14:ab:84:
e7:03:d4:f5:07:e3:41:0c:1a:a2:86:46:bf:f0:bc:
15:38:28:ea:4c:f1:e7:c9:9b:64:16:04:08:10:14:
1e:7d:06:22:d2:ae:45:5c:60:e1:41:c1:3f:58:f7:
3e:73:62:1b:70:17:bf:d7:b6:33:81:c1:f5:4c:9c:
05:38:be:29:40:eb:57:a2:ee:e8:5d:c3:c3:93:88:
88:65:88:d4:db:66:88:b7:4d:28:be:9f:8c:53:d8:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:C9:96:18:AA:D2:95:C0:AE:8E:5C:07:CC:F3:24:D0:B9:74:77
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aPjJlhiq0pXAro5cB8zzJNC5dHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.86.0/23
Signature Algorithm: sha256WithRSAEncryption
47:48:8d:fe:64:c1:a4:86:1b:07:2d:33:2d:55:52:01:33:26:
7d:53:6c:59:4a:03:bc:9f:af:71:00:b2:e0:8f:b9:0c:56:99:
4c:e2:a5:6a:88:94:46:fc:df:3e:39:0c:e2:d8:6f:a2:dc:47:
14:d8:7e:e2:11:a5:4f:26:c8:3f:a2:91:22:2b:ef:65:a2:0d:
48:97:41:c4:d2:b9:dd:fc:95:6c:a0:b2:5b:e0:08:3a:b4:e1:
3e:c7:c3:ae:a3:62:4c:73:04:65:c9:a3:14:bb:b3:ad:ab:f0:
15:43:5b:a7:db:5f:eb:96:de:51:cd:93:a3:5c:98:7d:ca:9d:
ba:f2:3f:8d:60:d8:ea:ac:6a:36:e3:a8:29:ea:c8:89:f9:0d:
63:fb:55:a5:03:5a:af:a7:84:cf:f8:65:7f:3f:a2:fb:56:eb:
dc:49:6e:02:9c:d1:85:1e:bf:01:97:0c:aa:aa:18:13:c2:0a:
8d:64:55:da:f0:18:8f:55:56:88:68:56:df:be:69:e3:9b:f5:
c6:40:9c:26:73:00:b6:7a:0d:75:95:74:81:44:a3:b0:53:9f:
27:26:4c:42:96:ce:55:08:9c:c9:60:dd:74:af:65:28:91:b2:
9e:9c:65:36:59:97:c0:61:8f:09:e5:38:a6:15:04:3d:56:ad:
8f:7e:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:03 2024 by rpki-client on console-fra.rpki-client.org