Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fKIlaSoxtqBNbsRbzDzc6LQd76c.roa
File: fKIlaSoxtqBNbsRbzDzc6LQd76c.roa (raw, json)
Hash identifier: 80gd1jfV1KgdV8KJHwMI+Xsgi29mLXee8uYs85TGtts=
Subject key identifier: 7C:A2:25:69:2A:31:B6:A0:4D:6E:C4:5B:CC:3C:DC:E8:B4:1D:EF:A7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A46117548D73ECB4AB8797AF5A479
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fKIlaSoxtqBNbsRbzDzc6LQd76c.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207154
IP address blocks: 93.170.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:46:11:75:48:d7:3e:cb:4a:b8:79:7a:f5:a4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ca225692a31b6a04d6ec45bcc3cdce8b41defa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:6d:e9:3d:b8:bb:d0:ef:43:52:2e:d8:ac:
ee:6c:82:f5:00:93:33:cf:89:15:8d:dc:99:87:32:
24:0b:89:0b:28:99:81:47:8c:6b:29:1f:35:b4:96:
40:a8:50:7b:a2:cb:1e:26:88:09:eb:6f:40:fa:52:
04:ea:fd:80:79:8c:f3:a9:ab:91:0e:7b:fb:08:76:
66:0e:fa:fa:33:4d:27:c2:e3:3c:10:47:4a:4a:63:
f3:3a:3a:98:cf:44:ad:04:17:f7:d0:5b:2d:c0:58:
d4:6c:13:24:e9:29:e0:98:3b:bf:da:af:64:d4:e5:
31:a9:70:aa:8c:a8:63:93:43:54:d6:98:20:2e:a9:
ab:2d:77:4b:a6:c7:19:af:be:2b:d4:0a:42:df:83:
cd:5d:d2:d9:39:7a:e0:71:40:db:43:5f:a2:8f:20:
43:af:63:b7:4d:e0:4e:c9:29:c2:47:1f:ec:68:ec:
9d:9d:fc:e5:4d:c0:0c:39:4d:02:8d:5d:11:c2:cc:
83:7b:b0:8d:75:28:49:89:47:35:d4:d8:36:2f:c3:
fb:a9:91:74:a4:c2:f6:76:e1:12:c5:c3:6c:0e:92:
a4:cd:76:9b:f2:1b:ba:13:14:d1:ce:a4:09:ea:6e:
8e:ee:9e:ed:17:ac:ad:7d:8b:71:5c:4b:55:0e:6d:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A2:25:69:2A:31:B6:A0:4D:6E:C4:5B:CC:3C:DC:E8:B4:1D:EF:A7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fKIlaSoxtqBNbsRbzDzc6LQd76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:0a:04:c3:2b:57:9a:93:b7:a2:00:1f:2d:c1:54:5c:37:79:
87:1a:90:a2:df:0f:e2:08:41:69:74:5b:db:42:61:23:1d:44:
b9:6a:a2:f2:98:67:84:3f:57:9d:ba:ab:de:8b:73:73:24:4d:
e8:0d:25:ad:40:aa:10:2e:37:4c:de:57:15:2c:c0:15:e2:1f:
d7:22:9b:67:51:b5:8f:d1:86:27:a0:ba:48:27:32:ec:5e:70:
85:ca:b5:e6:11:53:f7:36:51:0f:b1:d6:95:0f:11:30:39:a2:
fb:f0:7b:bd:c9:34:52:45:1f:25:06:fd:c6:d2:00:3f:5e:a0:
4f:5f:ec:67:aa:c9:6f:38:13:64:38:0d:89:04:52:eb:f9:44:
d8:ce:50:fd:c2:22:67:5b:ce:e2:07:ab:d9:76:b4:d9:c8:72:
0f:fa:8e:f5:11:53:ab:27:4a:69:72:6b:cc:f8:c6:e3:49:99:
55:74:c1:8f:4b:8a:fc:94:d2:0c:32:e7:df:21:97:f6:36:48:
80:44:16:8d:0c:36:c1:d5:77:b3:3b:f3:3b:2a:f0:8e:45:13:
44:b9:9f:1d:88:73:24:c3:c9:04:8a:75:f8:82:81:6f:a2:1e:
90:ba:80:0f:a6:b7:6a:9f:6d:3d:f5:73:69:67:01:fb:9e:82:
8e:69:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:36:50 2024 by rpki-client on console-fra.rpki-client.org