Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jnB3V1qRbEY-Cx_fEq94Qc-eY2c.roa
File: jnB3V1qRbEY-Cx_fEq94Qc-eY2c.roa (raw, json)
Hash identifier: WmSBXBDIZu0hSyouQZSuNa44oY88Umra+Gouh+7cMzA=
Subject key identifier: 8E:70:77:57:5A:91:6C:46:3E:0B:1F:DF:12:AF:78:41:CF:9E:63:67
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0193215AAC49B7FB7ABAF06FCB1C33823052
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jnB3V1qRbEY-Cx_fEq94Qc-eY2c.roa
Signing time: Tue 12 Nov 2024 17:10:10 +0000
ROA not before: Tue 12 Nov 2024 17:10:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25548
IP address blocks: 93.170.36.0/22 maxlen: 24
95.47.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:5a:ac:49:b7:fb:7a:ba:f0:6f:cb:1c:33:82:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 12 17:10:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e7077575a916c463e0b1fdf12af7841cf9e6367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:34:ba:d3:a0:13:33:0a:d5:96:b5:a6:59:
b7:ac:f3:b4:e9:ff:11:e5:91:d6:94:c2:50:f7:17:
66:2b:c8:b7:2c:b6:44:1b:a1:15:fd:45:1f:87:0a:
c1:ea:9a:26:93:33:9d:d4:c9:77:c1:b7:82:46:9d:
c6:9b:3c:54:c7:bb:e2:56:9e:60:4c:16:1e:d9:f9:
31:9f:89:08:99:f5:a1:06:80:89:47:28:00:86:fc:
91:f8:ef:77:9a:8a:21:ba:a3:8c:b5:72:55:10:c4:
a9:7d:a7:5e:b1:c4:e5:f9:71:59:d3:b3:fb:d3:73:
ec:1d:3f:a2:69:67:cc:02:5c:10:ea:1e:19:26:18:
1f:51:d6:a6:a2:f2:44:6d:29:d2:41:e5:62:80:c5:
70:7d:29:4f:4f:5d:50:12:9a:08:1e:86:1d:66:62:
1a:2b:82:33:2e:8b:f8:25:20:84:0c:d5:01:fd:75:
31:5a:4b:b7:34:27:a0:06:98:d0:77:0a:d6:67:eb:
d1:30:64:6a:9f:c3:64:3c:da:74:a1:80:14:90:43:
29:f1:4a:c0:3b:9c:e6:a5:7d:8e:03:9a:33:ae:37:
b9:02:ab:c2:1e:f6:4e:69:79:91:c3:be:5d:f1:04:
b0:44:2d:51:bc:e0:50:07:ad:6e:64:96:ec:c3:f4:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:77:57:5A:91:6C:46:3E:0B:1F:DF:12:AF:78:41:CF:9E:63:67
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jnB3V1qRbEY-Cx_fEq94Qc-eY2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.36.0/22
95.47.186.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:c7:62:5e:6c:d9:d8:2d:dd:23:89:76:2c:d2:d2:ce:5c:94:
7a:b8:51:7b:73:38:79:56:b1:d5:1c:35:d6:83:3b:b2:57:60:
cc:4a:c4:38:7e:d7:06:a2:03:c7:da:33:f4:a8:f6:58:a0:2f:
73:4a:67:5d:74:0b:75:9d:3c:ad:dd:a1:60:aa:66:14:f9:04:
fe:de:c0:c6:be:45:29:b1:97:4d:c9:79:a1:d9:21:f4:c4:23:
1c:1e:0e:a9:79:46:51:02:b1:aa:57:dd:b3:f8:4c:df:bb:9f:
a2:e1:31:2d:09:3e:b9:4a:f7:a4:40:00:fb:ec:34:f7:29:5d:
04:bc:83:31:13:29:0e:43:c5:11:d7:80:be:60:f8:d9:65:ac:
1d:bc:a9:8e:cb:af:4c:75:06:85:c8:b7:c1:68:03:3a:4b:e7:
de:bc:82:06:53:64:10:ed:1b:f3:3e:57:5a:22:5a:4f:cb:d6:
f6:c0:4f:28:23:84:6b:c6:db:79:76:18:e9:36:3b:13:5b:03:
8c:0d:ae:b1:de:c2:3b:35:b7:9f:58:a7:57:3c:20:93:30:ee:
3f:08:b7:bb:fd:ef:3f:55:29:20:cf:cc:4f:14:91:99:fe:f7:
ca:c4:ab:68:29:5e:6a:ab:b6:11:a8:b3:d7:bc:d9:50:d2:cb:
57:c3:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org