Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t1QsJNtYWSw6uzWzW2jJVnaxyXM.roa
File: t1QsJNtYWSw6uzWzW2jJVnaxyXM.roa (raw, json)
Hash identifier: UcLHGq2++Iv72GpacHXo1/bHhzb4gIzPHmC3NtZwTes=
Subject key identifier: B7:54:2C:24:DB:58:59:2C:3A:BB:35:B3:5B:68:C9:56:76:B1:C9:73
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A5B0D79932CECBD309B7687AD4A67
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t1QsJNtYWSw6uzWzW2jJVnaxyXM.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215851
IP address blocks: 95.47.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5b:0d:79:93:2c:ec:bd:30:9b:76:87:ad:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7542c24db58592c3abb35b35b68c95676b1c973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:9b:5b:62:67:26:ac:3d:bd:3a:96:b1:79:
fb:6a:2a:ab:87:8b:3d:9a:82:8e:5e:aa:49:7a:ab:
06:2b:ce:0c:db:60:0b:c8:9d:a8:3f:56:fc:da:5a:
b1:ea:a9:a9:d5:2a:1f:7f:84:bb:1e:42:ce:a8:b4:
9d:9b:4b:62:ea:8d:eb:0a:59:21:e2:a1:f7:8b:6e:
9c:14:cb:04:b4:a0:34:51:79:69:22:84:56:d2:09:
56:70:ad:2c:b2:e2:2f:60:df:b1:7b:d9:2e:e7:6a:
c7:70:7f:7b:af:70:2d:e4:37:3d:60:38:cb:82:91:
0f:4e:f8:31:42:fd:4e:91:eb:60:80:d7:98:95:f5:
f1:ce:6e:c9:7a:f7:71:c8:b9:18:3f:a8:12:f3:8e:
49:e7:23:3d:7a:78:02:3b:e6:5b:bb:28:5b:74:fa:
2c:0f:b3:cb:da:ca:dc:3c:82:92:d9:10:77:73:f4:
6a:65:80:ad:88:b6:1c:12:e6:a2:9e:ad:a2:53:fe:
c3:8b:4f:2d:40:51:3d:f6:27:b0:07:5a:25:a3:11:
64:ce:61:24:09:e1:0c:15:df:18:13:ec:a2:25:63:
8e:54:96:e5:7d:3b:27:b8:ed:07:6e:48:55:d0:f9:
73:29:e5:a7:43:3f:71:f6:a7:1f:22:93:5e:a3:0f:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:54:2C:24:DB:58:59:2C:3A:BB:35:B3:5B:68:C9:56:76:B1:C9:73
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t1QsJNtYWSw6uzWzW2jJVnaxyXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.63.0/24
Signature Algorithm: sha256WithRSAEncryption
44:59:24:c9:3c:15:30:7c:b1:10:6d:d9:49:03:bf:02:81:62:
7d:f8:98:1e:14:53:54:40:3d:25:8f:dd:87:05:f1:28:70:98:
d7:a3:0d:68:25:e3:94:0b:ba:b9:8d:c1:36:39:39:38:f9:cc:
65:cf:1e:66:c2:c8:49:51:9a:26:ee:40:0c:18:63:9f:57:4e:
3f:74:4f:e6:74:1d:8d:0a:70:c8:02:97:98:bb:29:69:96:d3:
61:47:f7:28:b6:3f:1a:f4:ad:46:51:dd:42:bf:c9:42:98:a3:
b2:7e:91:ce:81:10:d5:3d:61:79:77:8c:36:99:b6:bf:8a:d4:
34:0c:6d:7f:ef:fe:65:8f:31:6c:71:89:d7:40:65:fa:79:a8:
dc:3b:7c:ee:f3:c2:4a:4f:b1:35:86:36:00:ab:4f:7f:b3:b8:
2c:b6:9f:03:9a:79:bf:8d:ac:6c:26:dd:e5:5f:3e:a7:ef:0d:
fa:7a:a6:fe:51:f3:d6:55:9e:bf:94:c5:f7:32:13:52:ad:6f:
db:f7:a0:b9:83:0a:2a:98:0f:8b:29:a7:6a:21:e1:1d:fa:8e:
31:ce:e0:0d:c6:27:bc:76:d4:7f:ed:93:77:20:2a:9c:8f:a5:
f6:32:41:ee:04:2e:b9:cc:c8:d8:a2:f2:4c:18:2a:7e:c7:c1:
fb:04:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 19:46:48 2024 by rpki-client on console-ams.rpki-client.org