Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wnBQbzkGEaFjd3ByNZ6ooVG054A.roa
File: wnBQbzkGEaFjd3ByNZ6ooVG054A.roa (raw, json)
Hash identifier: mVvhoEDpY0hL+suKrgAVVzcBo/tu/NMmyAJHFM/pO8o=
Subject key identifier: C2:70:50:6F:39:06:11:A1:63:77:70:72:35:9E:A8:A1:51:B4:E7:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A56764C0932F95D80999013FAD047
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wnBQbzkGEaFjd3ByNZ6ooVG054A.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212210
IP address blocks: 93.170.94.0/23 maxlen: 24
95.47.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:56:76:4c:09:32:f9:5d:80:99:90:13:fa:d0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c270506f390611a163777072359ea8a151b4e780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:61:bf:01:77:26:82:72:8d:ab:20:9c:96:
9d:2d:bb:24:88:42:bd:ed:08:c5:b8:f3:de:05:0b:
f3:da:9c:aa:08:17:9f:bc:e9:74:35:55:02:91:ba:
79:e4:e6:48:d7:30:2e:e0:d0:8f:8f:4f:82:e5:a5:
11:d3:47:d5:91:79:37:3e:e5:9c:d6:53:ac:29:00:
01:a0:d0:96:08:b8:70:03:8d:3f:ae:78:81:ce:32:
0c:49:de:f3:d9:12:9f:2d:fe:cd:6e:07:10:c5:b4:
99:ac:f6:9c:5b:8d:2b:12:d3:f3:74:99:6a:cc:b1:
36:d4:8f:c6:8f:04:e1:15:d4:6d:98:7e:f5:b3:11:
c8:4f:84:c6:df:6b:53:94:1a:24:fd:99:2b:b5:e8:
59:0d:3d:ec:54:3f:4b:1e:f5:03:79:b3:cd:34:bf:
89:d9:64:a7:cc:ff:3b:37:23:4b:5b:18:10:80:31:
f4:cd:28:87:53:f9:03:c3:3a:e8:50:6d:c9:1b:09:
e3:44:04:0a:38:db:14:ba:71:94:48:1b:e4:6f:5f:
29:03:8b:6a:58:5b:70:c4:b0:54:88:4a:9a:2d:e9:
b3:66:83:8a:da:5d:b7:65:35:a1:0f:43:01:27:f2:
8a:e9:dc:0c:13:7b:48:50:cf:ba:99:b2:c3:b5:35:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:50:6F:39:06:11:A1:63:77:70:72:35:9E:A8:A1:51:B4:E7:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wnBQbzkGEaFjd3ByNZ6ooVG054A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.94.0/23
95.47.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ca:b3:2b:cf:9c:a1:f1:33:f3:cf:9b:cf:c8:52:1e:d5:34:
5c:66:42:80:cb:a3:f5:c0:bf:d3:75:5a:5c:7c:ef:1f:14:25:
d7:8f:7a:bb:40:e2:aa:8e:93:6a:dc:6e:5a:52:12:5e:fd:14:
be:25:64:55:20:a6:9b:7b:a5:4b:da:03:db:5d:ba:a7:25:11:
d7:77:03:fc:13:65:64:e2:0a:0a:ab:11:bb:bd:a1:02:56:bd:
8f:c7:bb:e3:8a:6d:95:05:b0:00:97:01:c4:02:7c:07:71:02:
62:74:01:1b:48:4a:de:00:12:00:db:14:ea:07:f9:b8:33:7b:
0a:6a:0f:52:95:70:98:9e:1e:2c:b7:bb:ef:25:bb:ec:82:3d:
19:28:3b:1f:d9:85:a9:a7:2a:d5:63:8f:d7:4e:43:3d:cc:8e:
27:23:fe:1d:38:02:85:ae:3a:1e:6f:d4:05:65:e0:a0:48:03:
4f:08:6f:bc:ea:83:7c:00:98:d3:6a:00:f5:98:b6:3b:e7:2a:
4f:4b:20:7e:b0:57:c0:79:79:69:dc:c8:06:4b:9a:f8:97:77:
34:a0:26:cd:f9:ae:3d:bd:d4:22:a9:fe:56:b5:b4:72:a3:e9:
71:f9:bf:eb:2c:7d:87:ef:e3:71:f9:8a:0e:58:d9:3b:bd:90:
c2:09:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 19:33:11 2024 by rpki-client on console-fra.rpki-client.org