Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wW0O1CsU2Iz0B5Qq0y0M5mC3g00.roa
File: wW0O1CsU2Iz0B5Qq0y0M5mC3g00.roa (raw, json)
Hash identifier: o2oP07spUiREahmNnhA9Jlfh+gc2FTkVKYfTkE5x4fk=
Subject key identifier: C1:6D:0E:D4:2B:14:D8:8C:F4:07:94:2A:D3:2D:0C:E6:60:B7:83:4D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018FC5B19E41BB876016E20F27529278CF10
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wW0O1CsU2Iz0B5Qq0y0M5mC3g00.roa
Signing time: Wed 29 May 2024 18:51:43 +0000
ROA not before: Wed 29 May 2024 18:51:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207154
IP address blocks: 92.253.192.0/22 maxlen: 24
93.170.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:b1:9e:41:bb:87:60:16:e2:0f:27:52:92:78:cf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 29 18:51:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c16d0ed42b14d88cf407942ad32d0ce660b7834d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:5f:c8:e2:f5:81:a9:17:36:29:1a:3b:76:
71:33:dd:01:85:14:1a:31:2e:30:8a:ee:ef:c5:3a:
62:6b:74:99:3e:9b:b9:d1:f1:ef:4a:36:69:66:8b:
8b:dc:46:61:1e:e0:bf:5e:36:60:c9:28:bb:f2:f6:
ac:a9:a9:9f:19:fc:06:cf:9c:4c:50:fb:92:0e:24:
f0:c2:dc:7b:ee:64:56:0b:72:e8:9f:c6:47:08:72:
22:ce:d7:20:4c:09:70:99:02:f1:8d:bd:d9:8a:7e:
54:96:df:75:92:75:2e:28:ee:ba:63:a5:50:ab:98:
d1:49:19:43:ea:de:bb:e6:1c:01:39:fd:e7:d8:31:
7b:ce:4c:9a:02:74:af:19:4b:a9:a3:91:56:08:66:
9d:c2:99:ea:bf:61:d4:b2:cf:bb:7e:37:3f:0d:9d:
98:9b:a2:4b:88:82:36:e5:3b:df:53:6b:d1:cc:85:
85:b4:07:8a:80:ed:23:b1:3a:79:75:7e:79:ab:e9:
05:e4:eb:e6:19:1e:3d:8a:62:bd:8c:35:28:fb:8b:
5c:2b:05:2b:6e:9e:eb:16:f7:85:2e:26:78:b9:3d:
bc:df:25:c7:8d:6a:ad:3f:47:30:84:96:dc:e0:4a:
a1:72:e9:36:ae:b6:be:95:cc:c9:58:40:40:3f:f9:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:0E:D4:2B:14:D8:8C:F4:07:94:2A:D3:2D:0C:E6:60:B7:83:4D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wW0O1CsU2Iz0B5Qq0y0M5mC3g00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.192.0/22
93.170.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:e0:33:40:a1:2b:38:6f:33:31:47:f3:64:3f:6f:bd:79:b8:
03:74:f5:45:b0:0b:53:e2:92:59:d6:9c:8b:19:a8:12:14:fa:
0f:77:c5:48:3c:42:84:b0:20:a5:58:15:12:a3:44:5e:d1:73:
81:40:9b:86:c9:5d:7d:6e:28:eb:ae:93:a1:77:45:cc:aa:e0:
01:62:0b:b7:e5:e9:67:d3:43:d0:14:70:b8:4a:75:04:d9:17:
4c:36:ed:be:15:f6:05:d6:48:60:48:30:93:11:e8:d6:8f:8d:
b1:5b:fc:04:76:d0:47:f4:3f:53:12:6c:72:dc:be:f6:55:00:
34:d8:92:6b:cc:cd:1d:ed:cf:b2:33:96:8d:85:f2:35:5e:4b:
9e:31:b9:13:43:c2:47:25:cf:3b:c0:db:28:be:c0:76:7b:80:
5f:05:a7:1e:73:b9:30:fb:f1:34:e9:6b:b3:b5:40:19:86:1e:
62:ca:dc:cd:47:b7:84:c5:08:ec:ad:ec:a7:df:dd:cf:39:06:
29:9a:8f:3c:5e:8b:4a:d4:af:70:a3:25:d6:e4:00:a0:49:39:
bf:c8:90:10:0f:98:73:5c:0d:fd:49:14:63:07:ad:36:a2:4c:
1e:1f:e3:24:b9:89:2d:77:ef:47:f9:b2:fb:1c:79:00:7c:cc:
38:b9:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:04 2024 by rpki-client on console-ams.rpki-client.org