Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dwqs3n_j8NWf1hWCvnu3HdyoShI.roa
File: dwqs3n_j8NWf1hWCvnu3HdyoShI.roa (raw, json)
Hash identifier: aDJW16o0322G7IXj+yddlEYqKWD2PLxVflg0jjWtZ+g=
Subject key identifier: 77:0A:AC:DE:7F:E3:F0:D5:9F:D6:15:82:BE:7B:B7:1D:DC:A8:4A:12
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E41BF64957AD13BF3C5FC01C09EE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dwqs3n_j8NWf1hWCvnu3HdyoShI.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25015
IP address blocks: 93.170.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e4:1b:f6:49:57:ad:13:bf:3c:5f:c0:1c:09:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=770aacde7fe3f0d59fd61582be7bb71ddca84a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:04:ad:4f:ea:9c:68:3b:4d:d1:eb:db:4d:
28:8c:ad:c8:6d:9c:0f:ba:cb:35:9a:7e:9a:76:53:
7d:74:32:91:b0:a2:51:ba:34:21:9c:16:f2:e8:b8:
44:c6:3c:bc:41:a7:7f:b7:0f:4d:a3:5d:2f:4b:a0:
da:46:84:3f:94:7c:50:be:b5:bd:66:d7:c0:ad:26:
12:b4:ff:9e:69:c8:f6:67:23:e1:e5:50:33:2c:71:
9f:88:5d:af:97:1b:7c:57:ca:94:8a:93:ac:00:85:
66:00:59:75:96:b6:38:7b:b3:61:87:f6:7b:57:d3:
a7:56:e6:58:26:7f:18:65:1f:c4:30:0d:ca:0a:7a:
b8:fa:66:da:cb:66:b5:03:7a:ad:3f:22:5e:84:fc:
52:dd:2c:ca:4f:40:a2:2e:a3:da:3f:63:2f:a8:ca:
b7:8d:b4:1f:25:f9:fe:81:6e:0c:34:0f:65:67:88:
85:17:e6:c7:de:5a:bb:84:c9:c1:29:35:b4:a1:f1:
b7:53:e1:29:59:42:d0:cf:69:f4:78:8c:f6:0d:3f:
0b:e4:bc:9f:bd:2e:26:c8:7e:e3:a2:a5:6d:80:9c:
68:aa:50:3c:dd:b0:99:a6:02:e4:f0:45:ba:ee:e4:
03:e2:ee:1b:92:e8:86:54:4c:4f:36:bd:ab:af:63:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:AC:DE:7F:E3:F0:D5:9F:D6:15:82:BE:7B:B7:1D:DC:A8:4A:12
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dwqs3n_j8NWf1hWCvnu3HdyoShI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:db:ad:c7:51:46:25:f5:84:2e:5d:8c:3e:35:2e:19:36:26:
3b:2d:b0:67:72:06:5b:6e:c5:f6:b8:73:e8:71:99:8b:1b:75:
3f:5a:95:a8:a9:bf:b0:d4:dd:71:11:dd:fe:f3:43:3b:73:69:
94:4a:f1:68:f5:c0:5e:24:ba:34:a7:6d:e8:6f:9b:16:c6:84:
42:b6:ba:21:38:d1:e4:78:f2:3a:6a:b7:1d:35:11:f6:06:20:
05:b5:18:1d:7b:32:94:3d:cd:38:95:79:ee:6c:04:d8:51:8a:
bc:92:31:ca:16:ad:96:e1:9f:b6:66:89:a2:83:b9:e8:de:53:
bf:a5:fa:3f:38:79:e7:09:6f:dd:a6:a7:7e:da:2b:a5:54:8a:
69:fd:bd:b2:23:ae:27:7f:00:66:fa:8a:79:f1:b2:a1:1d:82:
11:a6:fc:38:ac:ec:8e:a2:4e:52:2c:f6:6c:06:ef:f3:1f:39:
38:b1:ee:28:10:d2:13:e1:c1:69:94:fa:d4:f7:e9:f5:ca:86:
61:61:11:34:85:3e:6c:8e:87:fa:46:2f:74:52:e2:ed:3f:63:
c2:44:e2:d3:eb:ed:72:c6:dc:20:63:7c:45:03:68:9e:48:7c:
39:d3:67:be:6a:01:49:a9:1d:3b:06:50:c7:24:0e:cf:21:96:
c3:60:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org