Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/knHh5u1k4T06Ww-EPG9255xWxaA.roa
File: knHh5u1k4T06Ww-EPG9255xWxaA.roa (raw, json)
Hash identifier: F8kJhinCQiaZcO8jw++CUvyD/PDVp04OsjP8ymsvHJY=
Subject key identifier: 92:71:E1:E6:ED:64:E1:3D:3A:5B:0F:84:3C:6F:76:E7:9C:56:C5:A0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A05571CC010F2877814702045E68E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/knHh5u1k4T06Ww-EPG9255xWxaA.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49502
IP address blocks: 93.171.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:05:57:1c:c0:10:f2:87:78:14:70:20:45:e6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9271e1e6ed64e13d3a5b0f843c6f76e79c56c5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:13:20:3d:e4:2d:14:52:0c:9e:d0:07:7b:
0c:f5:6f:00:fe:26:1c:9d:8e:02:ba:b7:b6:fa:fe:
70:da:a1:bc:86:cc:5b:12:b4:13:08:48:1e:f3:02:
5a:d7:d9:ea:66:57:3b:29:b5:d3:3b:f8:e3:c3:b2:
e2:b4:42:ce:00:31:8f:80:06:36:c2:c3:7f:c4:9b:
5a:4f:9f:c7:33:c5:e5:24:be:96:9e:7f:b0:ae:f9:
9f:50:97:1d:87:9a:b2:84:cb:40:23:40:4b:7e:12:
df:e6:1c:0d:0d:c4:1b:a6:c8:a5:5b:af:b0:64:6f:
06:6b:ef:3b:c5:29:b4:5d:61:5f:01:08:17:d2:04:
64:36:9c:fb:ad:fd:83:e0:c6:52:81:7d:cd:b6:55:
79:6b:b1:4a:38:c4:c7:43:07:77:7c:c1:18:c7:bd:
7e:0d:4f:21:f3:02:be:55:9c:b6:27:77:90:2c:0e:
85:8c:4b:08:75:0f:1e:2b:9b:7d:a3:3e:bf:9e:05:
3f:61:d3:8c:8a:9a:77:cb:52:39:bd:7b:d5:29:c4:
ee:4b:42:e0:cb:a6:4c:31:b5:6a:8c:f7:87:33:90:
1d:47:39:c3:ad:46:a4:50:78:26:8d:c7:0e:22:90:
d2:76:f3:6b:52:50:3f:31:b0:9a:05:1d:ef:ce:15:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:71:E1:E6:ED:64:E1:3D:3A:5B:0F:84:3C:6F:76:E7:9C:56:C5:A0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/knHh5u1k4T06Ww-EPG9255xWxaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:de:dd:9a:b6:c0:84:6d:f2:41:21:c2:d3:21:cf:e5:6d:61:
6e:c4:0d:63:8b:8c:43:a0:33:d1:dc:45:44:c0:4a:ce:28:b9:
ea:c5:c8:35:ca:c8:98:c8:f3:6e:cf:75:af:8b:24:a7:5a:2f:
89:21:95:5e:90:6f:9e:83:fa:cb:fa:ee:e0:9d:41:fb:f9:75:
84:4e:fe:57:c7:c9:4d:6b:54:60:b6:c3:56:19:5f:b4:fc:94:
55:52:ba:9a:a2:0a:01:0a:bc:aa:9a:72:54:9b:61:f9:08:f5:
09:20:5a:59:4a:f1:c1:64:08:c0:89:4c:29:4a:c6:b6:22:de:
09:76:ad:e3:c6:26:09:16:00:d2:25:17:b1:90:5d:b2:2a:ff:
94:35:f3:78:32:14:44:50:ce:0d:10:6d:9d:37:11:29:5a:70:
b4:69:28:31:16:a5:52:18:a3:05:b2:35:dc:7b:a2:c0:47:a0:
9c:01:1a:73:a7:3e:74:20:67:67:7d:e6:c5:2b:b4:79:5f:b1:
b2:16:38:1d:08:e1:bc:9c:9d:49:f3:c2:cc:14:ad:37:60:70:
5c:0c:0f:48:8f:87:3f:ff:f3:37:21:5a:64:e5:77:dd:3e:5c:
77:2b:e3:ae:54:0c:7a:f8:32:90:77:22:26:0b:db:79:3f:9a:
e7:83:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:36:51 2024 by rpki-client on console-fra.rpki-client.org