Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bJZnpfSZNCrqQ2P3ehLgII1AGuQ.roa
File: bJZnpfSZNCrqQ2P3ehLgII1AGuQ.roa (raw, json)
Hash identifier: glOJ6h3MzijNaH+z3tM9pFJ4DAedWYnsIL61p7lJ4GI=
Subject key identifier: 6C:96:67:A5:F4:99:34:2A:EA:43:63:F7:7A:12:E0:20:8D:40:1A:E4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4AA0D6CFB25E3A17AC1A105CDE3B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bJZnpfSZNCrqQ2P3ehLgII1AGuQ.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208870
IP address blocks: 93.171.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4a:a0:d6:cf:b2:5e:3a:17:ac:1a:10:5c:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c9667a5f499342aea4363f77a12e0208d401ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:6a:3b:b1:61:54:d9:e1:10:06:b4:3a:ff:
01:46:5e:7b:98:14:f6:d8:8b:61:75:d2:ab:5d:dc:
4c:66:9d:ac:e6:03:b6:a0:75:ad:70:b8:4d:63:03:
89:87:05:b0:dd:0e:4e:54:7c:83:89:a2:ec:90:56:
6d:d2:04:df:f1:fd:25:b8:a5:3b:10:64:ba:26:f9:
c7:00:68:5c:f4:c4:bc:2b:83:5d:0c:dd:a1:c4:03:
c5:78:1c:f7:fe:23:49:12:df:4d:ee:70:a9:2e:cb:
28:9c:25:88:31:89:85:d8:50:30:4f:f2:f3:0d:a6:
80:07:ec:26:47:32:70:de:87:d3:03:f3:38:e7:a7:
64:a4:8c:9a:98:ad:c6:84:1d:20:a6:98:0b:9f:ee:
e3:6f:b2:64:b1:ac:c2:26:57:4a:9b:e0:34:98:72:
31:fc:8c:18:4a:64:3f:83:6b:a2:2d:4f:16:a0:65:
ce:61:b9:2c:e6:ad:7b:32:f6:41:77:d4:aa:29:83:
59:89:f8:b3:d0:6f:e4:f9:37:4f:34:a4:88:ea:ac:
c3:e2:95:5c:2e:84:7c:89:44:aa:1c:c0:18:f6:d5:
9a:e0:50:e2:40:0a:59:1a:f4:f0:a4:e1:ad:2f:c3:
97:13:8a:18:cb:3f:7c:0c:82:a2:ba:17:0d:bf:a1:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:67:A5:F4:99:34:2A:EA:43:63:F7:7A:12:E0:20:8D:40:1A:E4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bJZnpfSZNCrqQ2P3ehLgII1AGuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.238.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2f:8e:ec:2f:0f:26:a8:06:df:4c:52:c1:62:94:b2:36:f5:
48:a6:88:7b:06:f7:94:54:4a:a3:11:cf:76:55:c8:ed:3e:a6:
38:c7:d2:38:0a:6b:0f:f4:8f:3e:c2:e0:81:24:02:bd:8b:2f:
f4:1a:9b:f7:cf:64:90:a8:d2:ea:e5:38:76:53:00:10:52:54:
ca:2d:a6:3d:72:9e:ce:4d:8e:97:82:8c:10:32:76:cc:b9:6e:
01:72:67:51:2d:57:30:66:dc:0f:49:a3:66:c3:62:98:7f:a0:
c2:76:a2:e2:d5:4d:cf:1f:70:97:36:03:b4:3c:88:c5:42:93:
4a:77:7e:a8:58:70:de:b2:b3:18:a5:70:08:04:49:68:d1:fc:
a3:31:d5:81:ac:e2:42:9e:8e:5d:6d:65:98:5f:df:38:85:24:
3e:13:9c:e2:78:4a:a5:3b:3a:17:62:e6:18:69:e3:fd:39:71:
2f:ba:94:e1:38:3a:78:27:0e:43:10:b0:96:c7:69:2c:b3:47:
94:83:fb:9d:71:af:b3:c5:d6:20:c5:d3:af:c3:0d:39:95:37:
a5:7d:e7:91:37:96:2a:b6:17:5f:70:c4:98:72:66:10:02:ec:
33:e1:d5:8b:3b:d4:c9:d0:62:8a:dc:43:26:60:50:2c:4b:7e:
13:95:f5:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKkqg1s+yXjoXrBoQXN47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk2NjdhNWY0OTkzNDJhZWE0MzYzZjc3YTEyZTAyMDhkNDAxYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkalqO7FhVNnhEAa0Ov8BRl57mBT2
2IthddKrXdxMZp2s5gO2oHWtcLhNYwOJhwWw3Q5OVHyDiaLskFZt0gTf8f0luKU7
EGS6JvnHAGhc9MS8K4NdDN2hxAPFeBz3/iNJEt9N7nCpLssonCWIMYmF2FAwT/Lz
DaaAB+wmRzJw3ofTA/M456dkpIyamK3GhB0gppgLn+7jb7JksazCJldKm+A0mHIx
/IwYSmQ/g2uiLU8WoGXOYbks5q17MvZBd9SqKYNZifiz0G/k+TdPNKSI6qzD4pVc
LoR8iUSqHMAY9tWa4FDiQApZGvTwpOGtL8OXE4oYyz98DIKiuhcNv6FcowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyWZ6X0mTQq6kNj93oS4CCNQBrkMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYkpabnBmU1pOQ3JxUTJQM2VoTGdJSTFBR3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavuMA0G
CSqGSIb3DQEBCwUAA4IBAQCtL47sLw8mqAbfTFLBYpSyNvVIpoh7BveUVEqjEc92
VcjtPqY4x9I4CmsP9I8+wuCBJAK9iy/0Gpv3z2SQqNLq5Th2UwAQUlTKLaY9cp7O
TY6XgowQMnbMuW4BcmdRLVcwZtwPSaNmw2KYf6DCdqLi1U3PH3CXNgO0PIjFQpNK
d36oWHDesrMYpXAIBElo0fyjMdWBrOJCno5dbWWYX984hSQ+E5zieEqlOzoXYuYY
aeP9OXEvupThODp4Jw5DELCWx2kss0eUg/udca+zxdYgxdOvww05lTelfeeRN5Yq
thdfcMSYcmYQAuwz4dWLO9TJ0GKK3EMmYFAsS34TlfXp
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:08 2024 by rpki-client on console-fra.rpki-client.org