Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z19g93BH8GZ4FDvG2EW0e52Y4B0.roa
File: z19g93BH8GZ4FDvG2EW0e52Y4B0.roa (raw, json)
Hash identifier: 1kre2XoGloNrgIaw7NQHMMz+7e5gbAvFGuqUAl2hrlU=
Subject key identifier: CF:5F:60:F7:70:47:F0:66:78:14:3B:C6:D8:45:B4:7B:9D:98:E0:1D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4F41891926A2A5B176D0D6FC2A7F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z19g93BH8GZ4FDvG2EW0e52Y4B0.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209595
IP address blocks: 93.170.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4f:41:89:19:26:a2:a5:b1:76:d0:d6:fc:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf5f60f77047f06678143bc6d845b47b9d98e01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:53:48:6e:8f:fa:ae:09:de:c4:48:e7:47:
98:d4:df:b9:57:3d:86:94:d7:2f:9b:ac:69:31:c5:
61:f2:f0:4b:fa:6a:98:59:98:0d:01:ae:db:c8:ac:
73:af:2d:31:d7:b1:2b:60:ae:54:3e:c0:f2:85:a4:
0a:64:63:16:0f:ce:60:a4:bf:f2:da:a7:01:35:dc:
a1:8b:20:82:f8:d1:04:b9:ce:41:28:bb:be:88:31:
24:63:ba:6a:9b:4b:e8:13:6f:0a:36:9f:25:a1:06:
85:60:67:3b:d5:ef:8a:86:ee:aa:ae:4f:f2:c7:f7:
15:bf:3f:b2:b5:bb:2d:11:65:b8:48:1a:49:6f:a6:
71:d8:b7:84:62:0c:15:07:96:d2:32:cd:58:e1:ae:
60:dd:39:19:2b:eb:6d:8d:27:62:c7:2d:0d:5d:e8:
30:a7:3d:48:db:7c:41:09:ef:d2:0c:d0:13:74:5e:
42:ad:fa:4f:fd:22:99:cd:ed:85:b8:c9:f9:e8:9d:
19:75:cf:d6:5c:e1:42:37:71:3a:d2:7d:b8:a1:31:
ff:f6:d0:04:68:93:c7:bf:fd:59:73:4a:41:5e:9a:
5c:04:4a:b9:fa:7e:31:f2:58:fd:74:56:6b:6a:85:
a9:46:1a:a9:a2:5a:92:0d:33:d9:31:b0:c1:fe:d8:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5F:60:F7:70:47:F0:66:78:14:3B:C6:D8:45:B4:7B:9D:98:E0:1D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z19g93BH8GZ4FDvG2EW0e52Y4B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.26.0/24
Signature Algorithm: sha256WithRSAEncryption
96:8f:10:8e:5e:ef:d2:de:65:b8:ff:e2:dc:1a:4b:1b:75:27:
ed:8f:77:3d:4a:98:a6:ba:4d:43:f1:cb:5f:ff:56:78:91:06:
98:f9:18:ac:71:67:e3:13:45:7c:e2:1d:64:99:da:97:de:52:
10:d2:ff:9c:c7:58:7c:eb:7c:b4:2a:06:ba:c6:3e:26:70:30:
09:82:b5:fa:0f:55:cf:46:1c:b6:91:41:7b:c6:c1:08:ba:aa:
9d:af:bb:6e:94:53:17:89:8c:b7:e1:c3:68:c6:c3:40:60:ba:
99:93:81:38:2f:81:fe:a2:cb:bd:68:ca:34:5a:e1:85:dd:0e:
39:89:ac:6b:cc:0a:8e:1a:75:1d:24:c9:1e:00:19:ee:d1:45:
da:ff:46:2c:06:dc:7d:04:06:5a:49:0d:67:bc:90:dc:ea:5e:
6d:3c:df:62:80:60:c0:94:47:21:02:cf:4e:f4:7c:0a:fa:99:
96:f8:be:1e:e5:25:ee:dc:3e:fd:f4:d9:1e:ab:1e:25:ba:81:
ad:29:b2:ca:bd:9d:4f:94:9f:41:f9:df:16:99:3f:49:f8:2e:
5c:a8:c8:64:78:ce:bd:d4:59:66:da:60:40:03:bc:02:85:90:
27:52:65:18:e9:14:75:c9:f2:89:59:4e:e6:72:87:0a:69:52:
20:dd:27:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKk9BiRkmoqWxdtDW/Cp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjVmNjBmNzcwNDdmMDY2NzgxNDNiYzZkODQ1YjQ3YjlkOThlMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPZTSG6P+q4J3sRI50eY1N+5Vz2G
lNcvm6xpMcVh8vBL+mqYWZgNAa7byKxzry0x17ErYK5UPsDyhaQKZGMWD85gpL/y
2qcBNdyhiyCC+NEEuc5BKLu+iDEkY7pqm0voE28KNp8loQaFYGc71e+Khu6qrk/y
x/cVvz+ytbstEWW4SBpJb6Zx2LeEYgwVB5bSMs1Y4a5g3TkZK+ttjSdixy0NXegw
pz1I23xBCe/SDNATdF5CrfpP/SKZze2FuMn56J0Zdc/WXOFCN3E60n24oTH/9tAE
aJPHv/1Zc0pBXppcBEq5+n4x8lj9dFZraoWpRhqpolqSDTPZMbDB/titRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9fYPdwR/BmeBQ7xthFtHudmOAdMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvejE5ZzkzQkg4R1o0RkR2RzJFVzBlNTJZNEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaoaMA0G
CSqGSIb3DQEBCwUAA4IBAQCWjxCOXu/S3mW4/+LcGksbdSftj3c9Spimuk1D8ctf
/1Z4kQaY+RiscWfjE0V84h1kmdqX3lIQ0v+cx1h863y0Kga6xj4mcDAJgrX6D1XP
Rhy2kUF7xsEIuqqdr7tulFMXiYy34cNoxsNAYLqZk4E4L4H+osu9aMo0WuGF3Q45
iaxrzAqOGnUdJMkeABnu0UXa/0YsBtx9BAZaSQ1nvJDc6l5tPN9igGDAlEchAs9O
9HwK+pmW+L4e5SXu3D799Nkeqx4luoGtKbLKvZ1PlJ9B+d8WmT9J+C5cqMhkeM69
1Flm2mBAA7wChZAnUmUY6RR1yfKJWU7mcocKaVIg3Sen
-----END CERTIFICATE-----
Generated at Wed May 29 07:59:56 2024 by rpki-client on console-ams.rpki-client.org