Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aSKlKeTUhsg1cxj-giyHPJhGI_o.roa
File: aSKlKeTUhsg1cxj-giyHPJhGI_o.roa (raw, json)
Hash identifier: Jao3kmzcEhF1/BwItG4754eXAMGg30b5tfGh2p/TfK0=
Subject key identifier: 69:22:A5:29:E4:D4:86:C8:35:73:18:FE:82:2C:87:3C:98:46:23:FA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A18DACEE05A4BC71248F2EED578E9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aSKlKeTUhsg1cxj-giyHPJhGI_o.roa
Signing time: Tue 02 Jan 2024 12:33:25 +0000
ROA not before: Tue 02 Jan 2024 12:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57764
IP address blocks: 95.46.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:18:da:ce:e0:5a:4b:c7:12:48:f2:ee:d5:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6922a529e4d486c8357318fe822c873c984623fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:7d:b9:74:5c:56:94:e0:62:45:bd:d2:db:
5d:71:1b:85:83:51:67:e3:f2:57:be:e8:56:de:97:
05:29:a5:2e:83:de:f6:30:df:3c:d0:60:01:96:93:
07:92:d5:67:8f:aa:92:be:35:ea:90:a7:89:fd:f1:
34:32:0c:59:8d:b2:07:eb:ee:68:c3:8f:ff:31:92:
db:ae:3f:06:cf:63:52:78:8b:41:11:24:6f:7e:1e:
32:0f:12:c6:09:f0:a5:1f:69:3e:75:01:45:eb:88:
e3:ed:2a:c6:0f:b3:82:2c:c2:3a:66:a5:fa:76:d9:
27:99:e4:93:8c:97:df:d7:3a:ec:a4:90:9d:79:5c:
b9:c9:53:2a:31:d2:58:c1:71:7c:a7:a1:70:7c:59:
3d:74:bc:38:ed:8e:2b:48:3d:1b:6d:f8:46:82:37:
52:be:26:1a:18:a5:91:64:8b:70:fe:15:36:83:93:
a9:e2:ae:af:a5:1b:df:ea:67:d9:ce:44:98:4e:2f:
be:91:46:1f:fa:ed:91:11:7c:02:e7:0f:3c:1b:3a:
3e:20:0b:90:4e:6f:bf:69:c1:c4:ef:e8:d0:e3:b2:
31:9f:2b:43:31:7e:be:50:bd:c5:4c:d0:86:b2:7a:
1e:52:b4:7f:93:40:1c:fa:60:10:8c:b7:bb:42:ab:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:A5:29:E4:D4:86:C8:35:73:18:FE:82:2C:87:3C:98:46:23:FA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aSKlKeTUhsg1cxj-giyHPJhGI_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.64.0/21
Signature Algorithm: sha256WithRSAEncryption
47:9c:8c:78:26:ee:6b:d8:22:a3:08:e5:8f:62:97:05:00:92:
21:d2:c4:1f:71:69:7a:a8:13:b8:6e:8b:dc:e0:74:5f:d3:d7:
bf:fc:3c:f6:82:59:53:99:88:4f:4f:1f:ea:1b:1a:a9:3f:cb:
57:46:93:69:d2:01:d7:7c:da:cc:25:2b:c9:6b:87:bc:ae:57:
39:59:a9:bd:18:46:d7:e8:5f:9d:bb:d7:31:87:95:a8:87:c1:
73:eb:c8:38:41:77:05:34:71:70:46:9f:fd:f3:ae:51:57:27:
00:1a:d0:2e:31:ea:6d:8d:8d:15:68:1e:60:26:70:34:08:2e:
b0:e5:3e:ae:61:31:32:3b:26:8d:31:7e:ea:1d:b1:9b:14:73:
fe:f6:e8:e4:a0:36:4d:63:f4:be:c5:45:a9:ad:8f:ce:af:a6:
a3:a8:48:34:ab:43:fb:e5:72:3c:3c:bd:1a:59:9f:04:43:46:
e5:77:22:f4:27:27:f9:1a:27:db:9e:42:ed:bc:d4:d3:d0:1d:
38:b7:b3:f8:2d:34:f5:d6:31:d8:16:d7:80:68:2a:a0:a6:4e:
8b:e8:12:c9:0d:bf:59:d9:60:02:da:85:63:8e:d3:bc:cb:04:
a5:58:8f:14:19:1e:5f:f4:24:a3:79:8f:7b:0f:79:d4:9c:4b:
9a:41:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:58:25 2024 by rpki-client on console-fra.rpki-client.org