Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qFbXYAgDg7aW5QjkFSaxnuxenwg.roa
File: qFbXYAgDg7aW5QjkFSaxnuxenwg.roa (raw, json)
Hash identifier: BDNilN7jYYfHIb8NRNdUWbdCQzQpOWNXQ4t2B3dkLKw=
Subject key identifier: A8:56:D7:60:08:03:83:B6:96:E5:08:E4:15:26:B1:9E:EC:5E:9F:08
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01910E3BCB90F2C22C16F71792E4D69396E9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qFbXYAgDg7aW5QjkFSaxnuxenwg.roa
Signing time: Thu 01 Aug 2024 13:58:05 +0000
ROA not before: Thu 01 Aug 2024 13:58:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58330
IP address blocks: 95.46.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:3b:cb:90:f2:c2:2c:16:f7:17:92:e4:d6:93:96:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 1 13:58:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a856d760080383b696e508e41526b19eec5e9f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:24:e6:f6:98:b7:13:b6:f7:af:bd:47:0a:
4a:2e:49:38:81:ac:fc:8f:e5:72:db:c1:fe:ba:e8:
60:f7:05:8a:8c:af:42:c5:56:77:85:63:1d:ee:08:
62:cc:69:24:0e:90:55:7e:d6:c5:12:c4:4d:f7:45:
1c:ca:f5:ab:d6:7e:9b:fb:a1:c9:5e:92:92:8d:a3:
d8:8b:6d:2e:43:05:89:55:b6:99:c4:41:26:9b:47:
0a:19:de:c9:ea:af:84:bf:e2:8d:31:03:17:8a:24:
7f:2d:39:e3:cb:f4:73:9b:4a:e8:23:33:35:6c:72:
ab:5f:f3:37:90:59:45:8e:52:6a:72:ee:0b:b0:55:
d9:3f:28:81:aa:85:8a:31:b9:9a:41:47:9f:03:12:
29:f0:19:68:40:1e:a1:6c:92:d2:9b:78:40:5d:80:
7f:1e:0b:17:0a:51:4f:9c:8e:e2:fd:a3:98:ff:8d:
59:31:b7:29:20:b5:a1:df:56:e6:ab:01:0f:17:1b:
d9:e5:fd:45:f1:c0:3c:28:cf:68:27:22:b8:71:f1:
0d:5d:1a:1e:ee:26:38:c6:e5:b0:b2:36:3b:c9:14:
5b:7a:c5:e6:54:56:82:8d:17:35:58:4f:88:e3:1a:
64:80:c8:f5:7c:c1:37:52:0e:cd:77:a4:05:fb:01:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:D7:60:08:03:83:B6:96:E5:08:E4:15:26:B1:9E:EC:5E:9F:08
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qFbXYAgDg7aW5QjkFSaxnuxenwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.160.0/22
Signature Algorithm: sha256WithRSAEncryption
44:f4:6e:aa:ac:cc:af:cf:72:6b:82:27:b3:4d:ff:46:70:6b:
0b:5e:23:2d:40:62:8f:6a:c6:c9:fd:18:e3:a6:38:27:92:ff:
e2:76:9d:44:08:b7:57:96:0f:c7:06:d3:02:cb:73:29:8b:b5:
5a:31:97:d8:43:4b:18:b8:e6:86:86:40:2c:b7:55:9f:ad:db:
fd:1a:27:50:7a:bc:f3:87:66:9d:e5:5c:ff:0f:6d:52:d2:76:
3f:93:10:a0:6c:d9:f0:8e:6b:df:84:8d:d4:49:f1:c1:4f:0c:
2b:ef:66:5d:10:69:e4:b3:fa:56:92:13:eb:79:9a:11:14:03:
4e:f2:f6:b1:3f:77:f8:5a:ac:c3:d8:ab:93:13:3d:c4:55:3c:
17:d8:29:08:18:42:95:04:c1:e2:6d:25:cd:97:75:0f:21:b0:
10:83:f6:3b:3c:42:c1:2c:ae:2a:9c:9f:3f:f4:fa:9a:a1:9f:
d7:bb:44:c7:be:9d:54:47:fa:ae:1e:fc:b7:a2:cf:95:7b:f6:
33:4b:dc:e7:01:7d:37:37:c8:9a:83:02:a0:23:b6:a7:e7:9b:
36:9d:c1:85:e5:d5:b2:3d:4d:34:db:25:aa:a6:6f:ab:f8:84:
e3:07:8f:fd:9d:25:54:21:a2:98:55:ed:d7:5b:6e:74:28:56:
c8:85:24:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEOO8uQ8sIsFvcXkuTWk5bpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwODAxMTM1ODA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODU2ZDc2MDA4MDM4M2I2OTZlNTA4ZTQxNTI2YjE5ZWVjNWU5ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIsk5vaYtxO296+9RwpKLkk4gaz8
j+Vy28H+uuhg9wWKjK9CxVZ3hWMd7ghizGkkDpBVftbFEsRN90UcyvWr1n6b+6HJ
XpKSjaPYi20uQwWJVbaZxEEmm0cKGd7J6q+Ev+KNMQMXiiR/LTnjy/Rzm0roIzM1
bHKrX/M3kFlFjlJqcu4LsFXZPyiBqoWKMbmaQUefAxIp8BloQB6hbJLSm3hAXYB/
HgsXClFPnI7i/aOY/41ZMbcpILWh31bmqwEPFxvZ5f1F8cA8KM9oJyK4cfENXRoe
7iY4xuWwsjY7yRRbesXmVFaCjRc1WE+I4xpkgMj1fME3Ug7Nd6QF+wE/ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhW12AIA4O2luUI5BUmsZ7sXp8IMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvcUZiWFlBZ0RnN2FXNVFqa0ZTYXhudXhlbndnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXy6gMA0G
CSqGSIb3DQEBCwUAA4IBAQBE9G6qrMyvz3JrgiezTf9GcGsLXiMtQGKPasbJ/Rjj
pjgnkv/idp1ECLdXlg/HBtMCy3Mpi7VaMZfYQ0sYuOaGhkAst1Wfrdv9GidQerzz
h2ad5Vz/D21S0nY/kxCgbNnwjmvfhI3USfHBTwwr72ZdEGnks/pWkhPreZoRFANO
8vaxP3f4WqzD2KuTEz3EVTwX2CkIGEKVBMHibSXNl3UPIbAQg/Y7PELBLK4qnJ8/
9PqaoZ/Xu0THvp1UR/quHvy3os+Ve/YzS9znAX03N8iagwKgI7an55s2ncGF5dWy
PU002yWqpm+r+ITjB4/9nSVUIaKYVe3XW250KFbIhSQP
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org