Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/f6TuYy066_VDa5jlJQwL2vBeTRk.roa
File: f6TuYy066_VDa5jlJQwL2vBeTRk.roa (raw, json)
Hash identifier: /bHn0U8LdVn8tULisBOWMqMcRnB5i180ZEPVJcvjYtc=
Subject key identifier: 7F:A4:EE:63:2D:3A:EB:F5:43:6B:98:E5:25:0C:0B:DA:F0:5E:4D:19
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E127A358EDBD87FF60B99C507286
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/f6TuYy066_VDa5jlJQwL2vBeTRk.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9058
IP address blocks: 93.170.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e1:27:a3:58:ed:bd:87:ff:60:b9:9c:50:72:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fa4ee632d3aebf5436b98e5250c0bdaf05e4d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:cc:29:35:d3:cb:f0:d9:d2:a4:27:a0:0d:
b0:5a:de:44:a1:bf:a9:f4:9b:b9:51:9f:ca:d4:95:
03:be:0e:75:d4:0a:53:bc:f8:f2:1e:6a:e0:43:c4:
f7:f2:b9:39:de:6a:20:c3:57:a7:5e:28:94:99:64:
fc:df:4b:83:ce:9e:ea:1c:44:41:52:96:37:33:53:
db:97:ca:61:06:6f:fb:b5:4a:dc:c2:0a:c0:09:5d:
be:b9:75:e5:e5:0e:48:40:0c:0f:51:85:24:cb:95:
cf:72:7b:9b:2a:99:6a:1b:8e:80:8a:67:f9:a0:04:
f8:f4:6e:93:5a:6c:aa:51:96:d7:f4:71:3d:88:d6:
90:a4:35:33:47:2c:7a:14:56:b2:f9:39:0e:5f:bb:
0d:af:8b:70:b0:cb:b4:15:2d:0a:39:ff:a8:7a:18:
66:05:25:7c:2b:be:c6:27:3e:17:42:29:41:8d:8b:
0c:d4:b8:a2:77:57:4c:5c:84:0d:da:a2:c7:76:0b:
c6:dd:4d:8d:23:45:f0:fc:94:d9:c4:1e:56:97:a0:
e0:10:e2:a2:f5:e2:8a:ca:e5:47:42:58:77:07:3e:
ba:0b:f5:70:5f:95:7a:b1:ac:3a:73:8d:1c:57:ca:
f1:3d:44:e0:60:56:57:3e:4c:fd:70:42:19:4b:12:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:EE:63:2D:3A:EB:F5:43:6B:98:E5:25:0C:0B:DA:F0:5E:4D:19
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/f6TuYy066_VDa5jlJQwL2vBeTRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c8:94:62:8e:9b:5f:e8:ee:16:6e:9e:9d:13:ef:cf:38:7a:
b6:00:70:81:6d:e1:c6:90:8f:85:96:cb:3b:78:21:55:c5:02:
3e:f3:23:cf:6a:36:d4:88:96:a3:9a:13:e9:01:81:80:48:2f:
8f:61:f4:2f:b8:49:71:75:b5:9f:92:82:ae:fe:be:b9:ee:08:
55:16:33:60:39:bd:83:88:eb:01:c5:58:ed:de:a1:52:89:ec:
ed:6c:63:03:48:67:8e:29:b3:69:6d:15:9c:37:b3:20:7b:be:
b7:69:b4:ae:2e:29:9e:04:de:28:a3:08:93:59:f2:18:36:a3:
28:27:e8:6a:55:b7:74:ba:0f:39:fc:43:cb:75:f3:d3:ea:1b:
7a:6b:87:3b:06:27:d3:58:c2:71:f3:0e:94:cf:d8:dc:48:a8:
f5:35:ea:25:68:55:62:8a:e1:f1:e9:41:a5:51:31:ef:df:2b:
af:fd:5f:ab:ae:e9:83:72:1f:e9:b7:ce:4b:81:1e:92:5b:79:
a6:af:a1:e1:83:b4:7a:e3:17:22:8d:56:02:0c:3b:89:e6:fd:
95:ea:69:5a:05:a0:da:b9:6f:a9:65:6f:27:c5:d3:fe:d1:2e:
b6:1c:a0:9b:16:29:dc:12:cc:ef:f4:0d:3d:c2:45:c5:b5:94:
4e:e3:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:03 2024 by rpki-client on console-fra.rpki-client.org