Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jbSfnUdwc3ZchHSJCa5srCeYrjc.roa
File: jbSfnUdwc3ZchHSJCa5srCeYrjc.roa (raw, json)
Hash identifier: 9mYEc7aOwbtaJg0TjK1JeHFqNLwhGzElf5d1XAKpdbY=
Subject key identifier: 8D:B4:9F:9D:47:70:73:76:5C:84:74:89:09:AE:6C:AC:27:98:AE:37
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0191463C766B47BBF600B590C0ED95E9DAFD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jbSfnUdwc3ZchHSJCa5srCeYrjc.roa
Signing time: Mon 12 Aug 2024 10:57:33 +0000
ROA not before: Mon 12 Aug 2024 10:57:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40983
IP address blocks: 93.170.216.0/24 maxlen: 24
93.171.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:3c:76:6b:47:bb:f6:00:b5:90:c0:ed:95:e9:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 12 10:57:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8db49f9d477073765c84748909ae6cac2798ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:45:04:36:02:d7:b8:01:f1:55:23:33:af:
a1:ac:d9:c5:c8:c1:0d:94:fb:6b:60:4a:1a:2f:53:
23:79:a3:79:d3:6c:9f:13:58:83:f9:82:3f:c6:d8:
32:63:d9:bb:cb:59:5c:43:ef:18:0d:4d:e1:32:2d:
74:11:bb:a8:fd:41:d3:ad:dc:b3:90:11:bb:55:8a:
b5:a7:35:7f:f5:9a:fc:c1:be:19:4a:60:3c:1e:9a:
8a:9d:a7:e7:e9:3b:d1:35:fe:2e:e2:4a:40:7f:60:
1d:0b:5f:4c:21:dc:c2:7e:e9:fa:8a:92:3c:82:c8:
cb:f4:b6:7e:dc:4d:42:f3:2d:22:25:c4:43:13:ed:
ea:0d:8d:5b:2f:33:cc:b4:40:69:8d:f6:44:71:1b:
50:8e:94:d8:99:99:e2:3a:b9:b6:a0:cf:05:08:bc:
a1:23:46:6f:ed:a6:45:ce:9b:d0:bd:d2:c5:d0:57:
bd:9e:68:20:35:e7:bb:29:5d:4d:72:04:8c:8f:a3:
9a:96:d2:64:c8:b7:d3:aa:18:77:9b:e8:e0:fc:3e:
83:b9:df:13:b5:8a:40:85:51:f3:7a:92:82:e1:d1:
b7:fc:ad:9e:8e:af:30:f0:c8:ad:98:cd:fa:16:15:
34:3a:fc:5b:7f:50:cf:c5:be:21:54:7c:59:54:36:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:9F:9D:47:70:73:76:5C:84:74:89:09:AE:6C:AC:27:98:AE:37
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jbSfnUdwc3ZchHSJCa5srCeYrjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.216.0/24
93.171.231.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0e:91:85:af:81:d2:b7:50:28:e1:da:3b:35:45:ae:b4:14:
c3:4f:b7:f5:ee:b2:b0:d7:13:bd:80:be:8a:f4:67:6f:b3:1b:
ed:ee:db:9f:f9:28:ad:43:90:c9:51:33:00:e0:5a:1f:48:62:
99:57:c2:fd:a1:5c:5a:d8:8f:b4:1d:e9:9f:c3:34:93:43:ea:
73:47:34:6d:c2:10:14:16:93:a0:e2:f1:43:ff:e6:10:7e:23:
a9:f5:0e:58:d0:0d:01:32:d2:ea:f2:a9:4c:03:d8:dc:a1:7d:
4e:76:ae:a8:33:1f:44:0d:38:97:28:4f:6e:0c:b0:81:c7:d3:
63:d2:3c:a4:ca:e1:b3:c0:00:13:3c:92:24:43:95:3f:5d:30:
9c:12:3e:44:e8:29:0c:7d:9e:17:b9:4a:71:f5:06:1a:88:07:
77:ce:05:88:83:7d:b6:03:9a:b9:a1:01:91:5b:5b:37:00:31:
05:a0:21:75:8e:29:ed:88:a5:e1:4f:62:f3:b0:eb:0c:0e:2e:
52:48:f3:8f:db:9c:ba:9f:29:8c:06:f8:b1:34:03:4a:8b:73:
da:52:84:99:b1:1e:a8:a8:30:9a:f2:8f:12:a7:27:6f:78:00:
cf:ae:bd:61:0b:d8:60:5c:bf:ef:d4:59:7c:71:8e:fb:59:69:
d0:d7:42:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFGPHZrR7v2ALWQwO2V6dr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwODEyMTA1NzMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGI0OWY5ZDQ3NzA3Mzc2NWM4NDc0ODkwOWFlNmNhYzI3OThhZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvotFBDYC17gB8VUjM6+hrNnFyMEN
lPtrYEoaL1MjeaN502yfE1iD+YI/xtgyY9m7y1lcQ+8YDU3hMi10Ebuo/UHTrdyz
kBG7VYq1pzV/9Zr8wb4ZSmA8HpqKnafn6TvRNf4u4kpAf2AdC19MIdzCfun6ipI8
gsjL9LZ+3E1C8y0iJcRDE+3qDY1bLzPMtEBpjfZEcRtQjpTYmZniOrm2oM8FCLyh
I0Zv7aZFzpvQvdLF0Fe9nmggNee7KV1NcgSMj6OaltJkyLfTqhh3m+jg/D6Dud8T
tYpAhVHzepKC4dG3/K2ejq8w8MitmM36FhU0Ovxbf1DPxb4hVHxZVDbunQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI20n51HcHN2XIR0iQmubKwnmK43MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvamJTZm5VZHdjM1pjaEhTSkNhNXNyQ2VZcmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXarYAwQA
XavnMA0GCSqGSIb3DQEBCwUAA4IBAQBIDpGFr4HSt1Ao4do7NUWutBTDT7f17rKw
1xO9gL6K9Gdvsxvt7tuf+SitQ5DJUTMA4FofSGKZV8L9oVxa2I+0HemfwzSTQ+pz
RzRtwhAUFpOg4vFD/+YQfiOp9Q5Y0A0BMtLq8qlMA9jcoX1Odq6oMx9EDTiXKE9u
DLCBx9Nj0jykyuGzwAATPJIkQ5U/XTCcEj5E6CkMfZ4XuUpx9QYaiAd3zgWIg322
A5q5oQGRW1s3ADEFoCF1jintiKXhT2LzsOsMDi5SSPOP25y6nymMBvixNANKi3Pa
UoSZsR6oqDCa8o8SpydveADPrr1hC9hgXL/v1Fl8cY77WWnQ10Kr
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:08 2024 by rpki-client on console-fra.rpki-client.org