Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cUGTcCwKVWkGmz0Y_hG0VBjWZ0s.roa
File: cUGTcCwKVWkGmz0Y_hG0VBjWZ0s.roa (raw, json)
Hash identifier: J1uuRdjd4o5Dfo3hwy6T4h0vR7aWYWRHzTQCMl7Y6Js=
Subject key identifier: 71:41:93:70:2C:0A:55:69:06:9B:3D:18:FE:11:B4:54:18:D6:67:4B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1ADE820B727C4AD70669F2289032
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cUGTcCwKVWkGmz0Y_hG0VBjWZ0s.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58254
IP address blocks: 95.47.153.0/24 maxlen: 24
146.120.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1a:de:82:0b:72:7c:4a:d7:06:69:f2:28:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=714193702c0a5569069b3d18fe11b45418d6674b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:4e:57:4e:ca:6d:e8:3d:e8:b5:fa:16:1c:
69:cb:2c:89:d3:ae:40:0a:4d:09:3b:9a:31:b5:8d:
68:0f:c7:9c:2d:dc:31:ae:0a:5a:da:8c:30:e8:2d:
c5:ac:4f:fb:70:67:00:87:f7:69:4e:41:c0:63:7f:
a2:77:a4:9e:eb:f7:e2:43:f0:8c:98:29:98:fd:64:
01:22:56:57:df:39:ed:2f:2d:b1:cb:e9:e2:35:1b:
9b:d8:51:e7:63:61:ac:b3:50:40:3f:50:b8:9b:65:
cc:c5:1c:38:0a:1c:df:25:1a:82:eb:e5:5c:87:e4:
d0:83:dd:37:45:31:75:d9:45:a5:50:ba:a1:bc:1a:
99:a2:a1:b1:2a:35:02:64:26:5f:5f:4a:45:59:f5:
a2:96:9d:38:07:50:bc:93:b2:d6:e7:c3:56:1a:5e:
6e:32:b8:8e:6d:dd:81:be:63:1a:8b:70:70:07:0b:
38:68:50:19:75:c9:1c:eb:d8:dd:cb:52:9d:8e:05:
5a:24:50:87:5a:ae:4f:e4:cf:e3:a1:70:15:42:5e:
3e:d1:46:00:aa:35:8a:94:2d:ba:8d:70:4f:e7:5f:
4f:5f:55:18:30:fb:67:85:21:78:5a:d8:94:90:17:
8a:ff:20:c1:1b:48:e8:73:eb:ec:f1:15:45:4f:a9:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:93:70:2C:0A:55:69:06:9B:3D:18:FE:11:B4:54:18:D6:67:4B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cUGTcCwKVWkGmz0Y_hG0VBjWZ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.153.0/24
146.120.16.0/22
Signature Algorithm: sha256WithRSAEncryption
40:b4:7c:96:15:d8:a7:3c:7c:2c:c7:e3:5d:bc:81:cf:90:5d:
c6:af:52:93:bf:0e:60:05:11:d9:c0:0f:e2:95:e0:da:f0:f8:
30:76:4f:e4:bb:9e:02:81:cc:f3:82:d8:5a:41:b2:f4:86:51:
04:a1:51:e7:a1:d9:6f:a2:54:08:b6:f9:51:f0:18:60:05:a8:
c5:fe:d8:0d:e0:1d:c9:b2:b2:6a:dc:06:ed:f8:e5:27:a8:c3:
29:55:bb:eb:c4:08:da:5f:0c:32:d1:4a:0a:17:d8:40:93:8d:
45:4c:9e:65:bb:20:41:06:96:63:16:c8:ef:4b:06:cf:7f:ec:
14:18:30:82:d9:c4:9d:53:ac:81:0b:56:89:3d:eb:76:7b:ab:
2c:ce:da:58:43:3c:ed:14:09:0f:e2:84:92:66:70:eb:84:fb:
81:39:95:b6:46:29:ce:a7:7d:95:6c:9d:f0:e8:13:55:4b:e6:
23:e5:a1:e6:28:f5:29:d0:0e:3a:81:f4:e4:bd:0d:f9:2e:d2:
6f:64:7b:b8:3a:62:67:e3:6c:49:38:62:34:7d:3a:0a:5f:9a:
49:ff:af:aa:d4:fb:74:f2:00:66:8d:ca:b4:c0:4b:b0:3a:ae:
ef:46:5f:1d:cb:1a:57:a7:aa:ad:f1:e8:5d:45:71:29:30:9e:
27:25:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org