Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tFufOMnEwzegyFR08bOpr_uL9AY.roa
File: tFufOMnEwzegyFR08bOpr_uL9AY.roa (raw, json)
Hash identifier: JiU0M+810EyV2f9w0BX5PO9uvcD7R8AbvLGp/nfOCLY=
Subject key identifier: B4:5B:9F:38:C9:C4:C3:37:A0:C8:54:74:F1:B3:A9:AF:FB:8B:F4:06
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A43FA632EC4AEE1C2E88CB4C9DAF4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tFufOMnEwzegyFR08bOpr_uL9AY.roa
Signing time: Tue 02 Jan 2024 12:33:36 +0000
ROA not before: Tue 02 Jan 2024 12:33:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204929
IP address blocks: 95.47.200.0/23 maxlen: 24
95.47.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:43:fa:63:2e:c4:ae:e1:c2:e8:8c:b4:c9:da:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b45b9f38c9c4c337a0c85474f1b3a9affb8bf406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:0f:9e:45:f9:68:d3:ec:14:5d:24:06:70:
a7:08:20:72:77:cf:cf:0a:89:be:1a:68:60:63:2e:
76:f9:ff:b8:66:48:3d:5c:a5:f0:af:3b:16:03:70:
19:16:cb:aa:e1:08:d1:ef:6b:d7:20:ca:1d:c3:4b:
2f:7c:a3:96:0f:a6:27:e5:41:ce:d8:1b:25:bc:78:
9c:58:0d:0d:df:c1:b3:36:c1:6b:52:24:9a:5b:e3:
4b:97:39:30:74:88:30:8b:7c:81:b9:30:91:ad:72:
65:bf:fc:cd:e9:05:93:ed:b9:d0:15:2c:c3:83:9a:
84:2c:18:8e:86:12:48:e7:51:0c:01:f8:b6:49:0d:
d1:5a:ca:a6:19:4a:30:ac:6d:0a:c1:d2:8e:25:09:
66:f0:67:97:7f:7d:4d:2c:c2:5c:46:ef:05:ac:3b:
1d:58:3d:11:01:7c:50:07:d4:c5:ab:9c:4e:79:84:
f4:3a:0a:49:1f:86:cd:6f:a8:af:a7:0a:d7:e1:4c:
a2:23:8c:4a:dd:f3:3f:15:89:d5:10:6a:4d:10:d2:
a7:b6:36:7f:f1:0f:43:0c:45:f4:0c:73:b5:cb:1f:
8c:b8:ca:4b:98:ed:3b:a7:9b:31:1d:34:e3:f5:41:
c9:a8:9e:c0:5e:08:c2:50:8b:37:b6:2d:75:1b:12:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:9F:38:C9:C4:C3:37:A0:C8:54:74:F1:B3:A9:AF:FB:8B:F4:06
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tFufOMnEwzegyFR08bOpr_uL9AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.200.0/23
95.47.248.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:4f:01:ca:2c:e2:b8:e4:03:81:f8:62:c1:fd:04:58:bd:c6:
56:61:fb:77:f5:cf:df:4f:9b:2b:24:33:c3:fd:bd:e3:fe:e6:
9a:91:c2:31:e1:53:69:a9:91:6f:61:2e:fc:00:8d:e3:b3:1c:
d0:f7:3d:c9:3e:fe:f8:b1:9e:58:1f:fc:dc:8c:d5:cb:e9:2f:
0f:3a:a2:24:83:e7:4b:09:d1:d1:fb:f9:47:23:30:24:49:20:
0f:2b:f0:77:55:4c:a8:a7:82:4a:4f:a9:15:c0:9b:71:1d:37:
6f:d4:09:0a:11:14:7d:96:25:d6:99:96:70:77:c2:b8:51:71:
ae:e6:c7:f5:41:1c:c0:96:7f:81:16:e2:79:1c:51:de:e4:22:
60:f1:84:d7:69:d9:f3:97:49:0f:b1:56:b5:12:9e:15:e1:0c:
74:d2:51:97:e6:df:2a:73:e1:08:45:ff:0b:c8:f1:c7:13:de:
43:44:0f:d8:d9:76:b2:75:45:37:fb:39:b2:53:ee:43:18:11:
3b:fd:7e:81:b1:c6:1c:19:e7:6f:eb:9b:69:24:7c:e3:99:1c:
19:67:79:d8:a2:df:18:91:a5:e1:27:a7:77:d3:50:b0:39:b7:
8b:aa:97:27:46:1d:6e:73:8e:f4:db:3b:41:17:6a:97:92:ff:
a7:2e:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 04:53:29 2024 by rpki-client on console-ams.rpki-client.org