Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/di-Qzaxun1j59V_-khD-ajjI1lA.roa
File: di-Qzaxun1j59V_-khD-ajjI1lA.roa (raw, json)
Hash identifier: APp9QqSn610/5xd37ZAc+10wbycNuy8B4U8uS6p6/0o=
Subject key identifier: 76:2F:90:CD:AC:6E:9F:58:F9:F5:5F:FE:92:10:FE:6A:38:C8:D6:50
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01905DB2D3A74AE7DA7294771CE14CF6926D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/di-Qzaxun1j59V_-khD-ajjI1lA.roa
Signing time: Fri 28 Jun 2024 07:15:18 +0000
ROA not before: Fri 28 Jun 2024 07:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56428
IP address blocks: 93.171.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:b2:d3:a7:4a:e7:da:72:94:77:1c:e1:4c:f6:92:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 28 07:15:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=762f90cdac6e9f58f9f55ffe9210fe6a38c8d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:a9:14:5f:26:06:8d:6a:f4:12:ac:41:1a:
7b:68:e7:b4:d4:5c:a8:fa:ba:8a:da:43:2f:2c:48:
da:ff:a2:13:57:26:bf:92:a6:61:f5:21:e1:4a:c3:
6a:35:0b:2a:7b:97:74:6b:ac:87:64:49:1e:b5:61:
44:ee:64:1b:27:cb:75:87:7d:89:a4:f5:d7:5f:db:
f1:6f:0d:fa:49:ce:9d:c2:92:46:fd:d2:29:e1:4e:
a0:8a:63:39:07:3a:75:2c:db:49:2f:d0:87:1e:ae:
ba:49:18:8a:12:19:e6:c7:86:26:0c:ca:8c:c0:2e:
2c:fa:bc:a4:68:f0:b6:7e:ad:a2:49:22:d0:04:e5:
51:16:ab:b5:2d:4d:52:0e:51:ba:bc:5d:4c:39:62:
55:76:54:0a:47:37:d2:42:5d:3b:17:44:1c:1f:26:
05:4c:36:c5:0b:0a:d2:14:38:42:83:c1:82:be:6a:
74:ae:87:0e:cc:d9:47:16:41:87:98:75:ec:45:cb:
01:6a:7e:5d:22:4d:cf:9d:64:50:3b:14:47:c0:72:
8e:4e:c1:32:07:27:f4:a2:d0:a0:5b:da:7d:28:11:
31:29:48:52:d0:32:2d:5c:40:29:03:eb:a3:b9:69:
95:89:80:14:77:00:95:99:69:86:15:01:8b:0d:a0:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2F:90:CD:AC:6E:9F:58:F9:F5:5F:FE:92:10:FE:6A:38:C8:D6:50
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/di-Qzaxun1j59V_-khD-ajjI1lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.137.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e6:3e:b2:a2:7b:f0:e2:d4:e3:7e:aa:cd:f7:8a:68:cc:c8:
19:a8:0c:25:b1:bc:0f:d3:87:db:35:73:00:92:3f:da:ae:5a:
c0:23:e8:33:70:42:a6:c7:8d:9d:31:d6:6b:a9:a5:bd:bd:85:
de:76:d5:47:d5:e5:3b:39:86:cd:11:03:83:22:b7:e4:cd:be:
5b:bf:c1:8f:71:68:22:53:40:0f:d0:4a:33:73:23:23:7f:55:
24:41:58:b7:bc:e6:57:79:98:96:52:64:3f:24:71:bb:23:ec:
8a:c1:56:4a:1c:60:a4:0f:20:ec:22:30:49:77:5f:e7:36:15:
97:16:7a:12:fd:46:c2:3d:62:a7:2c:9a:62:c5:36:de:98:8b:
b0:ad:13:39:08:06:8e:f2:97:1d:83:fc:db:b5:dc:dd:95:cb:
bc:9b:3a:00:97:9f:bf:b1:3a:4f:78:37:cc:00:af:bb:66:56:
50:59:b9:79:92:b1:04:17:7d:b0:07:38:ad:cf:17:66:6e:2e:
04:58:19:45:bf:72:31:b3:ff:46:b7:41:d6:c6:06:4a:c4:b4:
6c:6b:fb:67:91:1c:13:03:f8:50:4c:cb:e4:f6:a2:a2:be:cb:
ce:93:f1:2c:8a:90:4c:12:ea:f7:4a:42:f0:89:d0:36:5f:57:
cc:8a:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org