Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gy6gDXgw1YZmLjXYzTPXnmW2quI.roa
File: gy6gDXgw1YZmLjXYzTPXnmW2quI.roa (raw, json)
Hash identifier: 8GTjy4RKj5eI401X/0i+tQMno0Z6gVCW5HmvVMB2bJQ=
Subject key identifier: 83:2E:A0:0D:78:30:D5:86:66:2E:35:D8:CD:33:D7:9E:65:B6:AA:E2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1B38380F535965C26C4139D587D9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gy6gDXgw1YZmLjXYzTPXnmW2quI.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59430
IP address blocks: 93.170.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1b:38:38:0f:53:59:65:c2:6c:41:39:d5:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=832ea00d7830d586662e35d8cd33d79e65b6aae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:b8:2a:f3:d3:e5:25:84:f9:b6:27:ec:60:
c9:2e:b5:4e:fe:96:07:87:1b:78:e1:ee:ca:f8:04:
7a:e1:d7:94:b1:8b:42:fc:e3:5b:30:32:e1:17:08:
e7:12:be:4c:15:87:73:c6:88:42:51:51:ff:1e:1f:
70:3d:8d:8d:b0:30:1a:f4:d1:57:9b:a1:7d:82:fe:
8f:95:16:68:2e:5d:0d:8b:55:c1:c1:c1:90:5a:c8:
92:a9:97:a2:35:ff:28:61:f5:d4:38:43:61:68:eb:
d0:c9:24:d3:11:a1:52:5e:a9:92:1d:2f:74:24:0b:
e4:5e:9d:02:93:e5:da:6f:f1:db:5a:38:4b:24:2e:
25:1e:e0:a4:c0:80:7c:82:13:d9:94:82:15:ab:62:
ca:f9:02:92:b8:f4:05:14:00:c3:c1:f8:2c:bc:ed:
f1:e6:8b:62:03:f7:a8:a1:ab:f5:13:98:bf:23:14:
88:b6:44:95:ce:7a:00:fd:7a:ae:23:fe:1a:82:f7:
a4:13:60:aa:c0:34:89:10:5f:5a:1d:39:25:7f:dc:
69:ec:5f:de:af:15:01:8a:90:68:50:c9:83:77:4a:
b5:c7:53:49:8a:84:3b:bf:7d:1d:26:28:9c:29:70:
cc:df:32:9b:7d:3e:03:43:3c:e0:00:5c:43:49:38:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2E:A0:0D:78:30:D5:86:66:2E:35:D8:CD:33:D7:9E:65:B6:AA:E2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gy6gDXgw1YZmLjXYzTPXnmW2quI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.8.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a7:f0:73:bf:24:60:e9:fc:f6:41:e3:61:64:bb:48:61:3d:
2e:92:89:f3:8c:d6:90:06:89:b5:65:f3:0e:d6:7a:72:11:e7:
9c:fd:3d:2c:47:15:01:b9:34:87:3e:97:61:33:46:a6:15:69:
fe:73:a8:5e:e3:57:07:bf:2f:e6:84:f8:23:a3:df:5b:2c:f3:
02:8b:4b:b7:8e:9d:25:87:ed:b3:9e:f1:de:32:4e:ae:1a:5f:
37:b1:ce:7d:c6:09:6b:e0:91:d3:7d:a7:66:2c:5d:15:f8:19:
db:e5:2b:4e:06:ad:1a:c9:fb:e9:85:fa:51:b1:85:be:e0:be:
5a:92:f3:76:c9:42:98:d8:28:d3:7a:e6:c1:90:96:64:bc:61:
14:1a:c6:80:9a:f1:d0:c8:49:44:ab:3f:1a:42:76:4a:ca:65:
e9:f8:cb:d8:d4:16:ff:89:d4:03:f1:09:4e:d3:72:b5:cd:63:
19:2a:c1:74:a6:4b:e4:9c:7c:72:fd:70:d6:cd:9e:9b:55:b5:
fa:4d:dc:60:93:12:cf:cc:a1:bb:0d:bb:b1:31:cb:05:04:4c:
97:08:3a:f1:9a:85:b3:ff:63:d4:e6:a0:62:87:3f:37:1d:ff:
44:79:51:3e:3e:4f:96:f6:1f:e3:fd:93:a6:2b:e2:46:f8:a8:
a7:28:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 17:00:20 2024 by rpki-client on console-ams.rpki-client.org