Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tsRJ1M74J6BveYiCP3-nzokCj30.roa
File: tsRJ1M74J6BveYiCP3-nzokCj30.roa (raw, json)
Hash identifier: Ihdkoxg/nEPwt3bklnlbeBEFHziWnTmnXsJzQGeubgM=
Subject key identifier: B6:C4:49:D4:CE:F8:27:A0:6F:79:88:82:3F:7F:A7:CE:89:02:8F:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A03E9CA2E1F1A0585C9BC4ADB0E18
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tsRJ1M74J6BveYiCP3-nzokCj30.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49442
IP address blocks: 95.47.120.0/23 maxlen: 24
95.46.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:03:e9:ca:2e:1f:1a:05:85:c9:bc:4a:db:0e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c449d4cef827a06f7988823f7fa7ce89028f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:97:fb:b7:8a:b4:d1:75:6a:26:e9:a8:f6:
d2:b3:f1:50:b0:b0:f7:1f:2e:7a:94:7a:4b:e6:72:
19:43:e7:df:c3:90:fa:73:02:31:e4:c1:d9:5a:c0:
a1:ad:9d:7f:79:6a:79:c6:8e:81:a0:f4:72:92:90:
b6:60:56:04:91:25:7a:44:a6:e5:21:99:78:ae:3a:
42:ba:1a:e3:31:8e:12:a2:f7:13:44:98:75:56:e9:
fa:da:44:af:ea:b9:3f:a5:06:cb:5d:2a:13:68:23:
be:dd:94:be:e8:b1:31:8d:45:90:22:51:5f:9a:16:
8c:77:c1:cd:56:56:e9:47:db:07:1b:fa:7e:c5:c6:
de:88:a4:6f:2c:be:bb:1d:29:9e:91:c4:81:63:8a:
b8:3e:8e:93:65:3d:90:54:f1:62:7c:de:05:65:5b:
23:5d:6f:de:3f:b4:23:40:14:36:4a:b5:f5:c2:9c:
05:7f:8e:0f:19:e7:c6:6a:7c:7f:05:f1:2e:c1:29:
26:5e:22:eb:48:73:dd:70:65:39:13:2a:e6:fa:0e:
4a:f8:f5:26:bf:a4:b4:55:47:b9:41:ea:1f:29:14:
c5:19:f1:02:89:8f:ef:5e:29:8d:f8:94:37:fc:0b:
bf:5a:99:20:3b:a7:8b:28:16:74:3c:8b:bd:cf:ee:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C4:49:D4:CE:F8:27:A0:6F:79:88:82:3F:7F:A7:CE:89:02:8F:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tsRJ1M74J6BveYiCP3-nzokCj30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.100.0/22
95.47.120.0/23
Signature Algorithm: sha256WithRSAEncryption
91:ec:ba:f0:a8:0c:82:0d:7f:8c:24:f2:c1:b0:9c:98:0c:b7:
90:f5:cf:93:7b:00:3b:bc:64:a9:ab:5d:16:5c:66:c5:0f:47:
71:23:ef:b5:e3:ae:c2:d0:ce:7e:d3:a7:92:7d:90:a7:90:e0:
61:76:07:d3:7b:ea:92:6f:b7:4b:a5:ed:df:79:7f:25:a7:67:
11:e1:08:9f:ca:27:2b:59:5d:6f:d8:5a:89:25:5a:06:30:d9:
32:c8:69:73:b6:38:3e:43:d8:a4:04:b5:c9:e2:cb:b1:a4:e4:
f2:5e:94:81:79:36:bf:a2:ea:af:c9:cc:78:46:e8:e2:dd:7c:
ca:d3:51:e0:de:41:58:df:78:b0:bd:8a:85:05:b7:ec:aa:db:
22:f4:87:b9:e1:6a:41:ab:07:a4:fa:6d:5d:d0:74:ec:61:75:
70:1e:a9:f8:3e:2f:f6:e3:6b:28:3d:fa:dc:07:6e:c8:aa:8a:
d7:57:80:33:de:ff:21:49:ed:9b:4f:d6:44:38:2c:5b:17:88:
1f:cc:eb:3c:bf:53:b8:8e:09:50:bb:db:63:f5:e3:80:a8:69:
96:c5:1b:98:14:49:9d:e7:d8:5c:6a:1f:b9:f9:7c:5e:37:94:
75:aa:11:d0:46:35:59:75:a9:54:f0:33:c0:f3:37:98:e6:b7:
72:6c:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org