Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g5ZaxgM7fdc3h-rRJj2vjY9RnEE.roa
File: g5ZaxgM7fdc3h-rRJj2vjY9RnEE.roa (raw, json)
Hash identifier: b0Qth+eeeDkndhCaiHTtFDUMoL8Pkwja+pXHx2rdqr4=
Subject key identifier: 83:96:5A:C6:03:3B:7D:D7:37:87:EA:D1:26:3D:AF:8D:8F:51:9C:41
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4291F37C13BFEDC4092B4848317C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g5ZaxgM7fdc3h-rRJj2vjY9RnEE.roa
Signing time: Tue 02 Jan 2024 12:33:36 +0000
ROA not before: Tue 02 Jan 2024 12:33:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204720
IP address blocks: 93.171.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:42:91:f3:7c:13:bf:ed:c4:09:2b:48:48:31:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83965ac6033b7dd73787ead1263daf8d8f519c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:4b:98:20:67:72:cc:15:38:b9:9d:33:20:
e2:e8:65:09:ad:d0:ec:3a:d1:64:be:3c:fd:be:78:
0f:8e:80:b7:bd:f4:c6:08:fb:b8:8c:5f:71:bb:0b:
ac:ca:50:2a:a4:fa:a9:d0:09:e9:31:c9:bb:64:f7:
99:d0:a3:11:b4:ed:3e:be:1f:bb:cf:f5:65:89:72:
48:0e:7f:e4:41:f2:ff:a0:76:d6:24:5f:a3:23:a0:
3f:ea:a7:79:1d:15:2d:5a:bc:e6:ec:1e:4f:af:02:
70:91:0d:52:c5:90:e7:5e:b7:e3:e1:83:49:df:b5:
d9:ec:c1:e8:2a:e5:6c:87:82:7a:64:a7:c6:e9:c4:
af:0d:b7:e3:4c:52:fe:9e:c6:48:aa:09:c4:5f:df:
98:3c:9e:f0:69:cf:f2:50:d5:e3:0b:1a:a8:9f:94:
36:7e:98:18:1f:d2:f7:f0:98:f2:92:31:18:0a:1f:
e6:c9:c1:fe:8f:46:fb:ff:60:0e:96:28:9e:87:f5:
df:5b:e4:5b:8a:fe:1f:29:32:92:09:79:80:aa:be:
87:b2:1b:31:6c:dc:7b:49:12:1d:d8:9b:fc:c8:2c:
f8:0b:a6:a0:b2:3b:25:81:5a:00:eb:61:57:02:4a:
0b:40:5b:69:60:fa:5e:69:18:c1:9a:c5:76:7d:7a:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:96:5A:C6:03:3B:7D:D7:37:87:EA:D1:26:3D:AF:8D:8F:51:9C:41
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g5ZaxgM7fdc3h-rRJj2vjY9RnEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.230.0/24
Signature Algorithm: sha256WithRSAEncryption
80:77:21:a5:a3:08:dd:7f:7f:4e:20:ff:f3:51:68:f9:c5:00:
7c:a5:8b:9e:12:b8:58:4f:c6:4b:3c:7a:cb:04:c7:32:29:3d:
37:f2:01:3d:7e:c0:04:f9:60:48:e9:84:28:f0:8b:56:9b:5d:
b7:f0:7e:29:89:e3:c3:8e:99:36:7b:dc:3b:67:16:f2:92:f4:
9f:76:01:89:d5:2d:46:1a:6b:e5:3b:1d:fc:3a:3d:66:21:de:
e4:e1:de:2a:e1:61:f1:3d:59:82:53:eb:ce:7b:1d:d3:81:18:
1d:7e:48:d8:d3:c0:2a:67:68:78:06:4a:30:cf:0e:c0:01:93:
5d:8e:f3:60:94:ea:74:f0:3f:ca:5c:6f:71:ca:66:51:78:10:
46:1b:4a:50:0f:88:3b:c7:37:76:04:c2:ee:69:12:69:6c:e1:
9f:9e:c6:e3:e3:d1:0c:d6:b9:1e:d6:2b:78:89:9d:14:93:23:
a3:23:c1:7f:9b:a4:e7:26:7f:e7:4d:59:f1:c2:24:b7:75:39:
c6:a3:fe:1a:5b:b2:32:36:d1:7c:c0:7b:58:6f:06:6e:87:1a:
bf:c2:3b:92:9e:84:fa:d2:f0:68:b6:34:be:b3:59:99:48:21:
0d:2e:8a:3b:4a:74:41:47:ab:bb:bf:cf:47:59:17:52:8e:52:
e2:7c:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:16:04 2024 by rpki-client on console-ams.rpki-client.org