Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z8mYsd854wcfq9ABBut0D9gtV30.roa
File: z8mYsd854wcfq9ABBut0D9gtV30.roa (raw, json)
Hash identifier: +npQ/s2k70frkF2uobpiHGDUYOJjM2bayr59xN5sS8A=
Subject key identifier: CF:C9:98:B1:DF:39:E3:07:1F:AB:D0:01:06:EB:74:0F:D8:2D:57:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E8DE425B5BE3C91ED3C677A405E2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z8mYsd854wcfq9ABBut0D9gtV30.roa
Signing time: Tue 02 Jan 2024 12:33:13 +0000
ROA not before: Tue 02 Jan 2024 12:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41119
IP address blocks: 93.170.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e8:de:42:5b:5b:e3:c9:1e:d3:c6:77:a4:05:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfc998b1df39e3071fabd00106eb740fd82d577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:3a:68:41:49:60:2c:5c:d1:c6:26:b4:10:
83:03:cc:49:67:68:60:65:d2:ca:ae:a9:02:31:87:
37:00:d5:d9:b3:f1:a2:1d:6e:79:65:6e:2f:be:b7:
c5:e4:28:cf:af:ad:82:d3:7d:35:9b:8e:7f:78:46:
82:fe:ac:e4:dd:9e:a1:0c:13:d6:36:a3:12:bd:af:
a1:c2:19:a9:1c:01:74:e4:0c:7c:74:74:77:9b:5b:
e4:1b:41:46:5e:63:8c:f5:c5:ad:62:ae:cc:6e:a9:
f5:4b:2a:b6:10:e7:7f:4a:e1:39:02:27:bb:78:52:
d1:56:d4:4e:d3:c6:3c:dc:c9:b5:6e:2e:d2:29:7f:
13:57:f3:de:65:9b:7b:b4:78:5b:f4:66:1d:dd:32:
ca:2a:24:27:f6:30:42:de:9e:bc:54:55:1d:e9:3b:
ce:23:d0:a3:c3:46:97:52:e3:af:48:b1:e3:b4:9f:
5e:47:6f:85:b9:66:27:fe:58:8f:28:17:44:3e:dc:
83:92:e9:33:f2:64:36:85:51:5b:80:d3:80:cd:43:
b3:0a:16:37:cf:48:4d:94:31:8a:80:49:6c:37:f6:
b6:27:f2:1c:2c:bc:e2:43:a1:f6:31:18:d5:a1:24:
5c:6c:ba:08:b5:40:a7:c9:7f:de:61:94:d8:f6:ce:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:98:B1:DF:39:E3:07:1F:AB:D0:01:06:EB:74:0F:D8:2D:57:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z8mYsd854wcfq9ABBut0D9gtV30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.219.0/24
Signature Algorithm: sha256WithRSAEncryption
38:22:95:89:85:93:4a:95:31:67:d5:18:69:b8:9a:f4:ff:f5:
9c:0d:c9:aa:1e:c8:2c:74:c5:df:60:2c:3e:71:a5:c4:f9:47:
33:91:df:e8:73:aa:6d:c7:f0:b6:33:be:bb:9b:8d:82:54:f8:
c8:76:1f:47:82:ae:ad:ad:f7:e2:5d:57:cd:ef:58:de:5f:f1:
b0:32:e7:17:b2:de:f1:d5:3b:e7:8c:8b:2e:7e:4f:1c:26:62:
af:b8:ec:f1:1e:5e:11:6d:cb:e7:1f:86:1a:99:ae:45:86:5e:
5a:6a:2b:e3:a1:d6:86:9c:84:31:f9:bf:2e:a6:a8:75:04:ff:
b1:ca:7b:01:c4:f5:01:51:d8:fe:06:41:3a:69:88:b8:22:61:
e7:b7:62:80:3a:a1:60:c9:03:ad:cc:f9:bc:bc:f3:a4:83:3a:
14:c9:c4:a3:5e:7f:57:b7:51:eb:d5:42:91:36:03:1a:2c:af:
0e:e8:d8:16:fd:e0:46:2a:c0:d5:65:bb:76:02:e0:46:b2:2f:
f1:1b:82:ef:96:3b:b1:9f:d8:0d:16:f9:79:96:9e:db:58:48:
c4:88:64:37:4b:cc:2d:60:32:ce:ca:9e:06:ab:0b:d6:f2:fe:
28:67:38:4c:2b:f4:ec:fb:ab:04:3f:af:61:68:fc:c4:04:54:
b0:95:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org