Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zTfJUnbrciijhzv5zHxij_Oj21Q.roa
File: zTfJUnbrciijhzv5zHxij_Oj21Q.roa (raw, json)
Hash identifier: AmSneRU6xW/eSYfYCJ0HBJMBJ7+4j8x+SvDlK0KQJ5Y=
Subject key identifier: CD:37:C9:52:76:EB:72:28:A3:87:3B:F9:CC:7C:62:8F:F3:A3:DB:54
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A59230005879B74BC3639905FEEF1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zTfJUnbrciijhzv5zHxij_Oj21Q.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212999
IP address blocks: 95.46.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 07:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:59:23:00:05:87:9b:74:bc:36:39:90:5f:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd37c95276eb7228a3873bf9cc7c628ff3a3db54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:70:6c:9a:a1:e7:66:a4:73:be:5b:5b:84:d4:
db:8d:50:66:7b:c1:55:75:8d:59:92:19:c3:7a:a4:
65:14:37:9c:64:a6:1c:35:52:c7:e4:a0:84:72:24:
ae:d5:dc:bd:83:db:19:47:3c:69:ae:9b:74:41:44:
46:86:e5:08:47:3b:8e:a2:62:ba:00:cd:41:16:02:
25:72:78:bf:cb:5c:bf:23:3e:a2:04:73:ff:dc:b7:
64:64:aa:28:9d:f5:e6:6f:b3:1b:84:21:99:26:35:
3f:3b:6f:47:59:71:10:5c:b3:3a:bb:49:09:0e:5b:
4f:f2:b4:e5:ea:54:54:6c:52:a4:2c:5c:eb:55:68:
f6:4c:4f:23:9d:4f:2d:da:1c:4d:64:1f:4d:ed:2b:
c5:16:9f:b6:81:47:2f:4d:01:68:5c:8e:52:e1:32:
d1:90:2a:f1:d3:3f:d6:05:40:76:5f:09:f7:0e:4d:
9e:d9:b7:db:65:ac:49:a6:8f:07:98:95:13:c2:f3:
64:34:b9:b6:f7:63:f6:4d:96:ca:01:0d:9c:6f:a2:
65:72:31:7c:a9:86:91:c9:c0:f1:e1:4f:f9:32:85:
25:aa:87:41:68:5b:f0:a0:21:0c:31:19:8c:6e:11:
55:83:6f:44:ac:5e:72:d5:94:ba:85:60:71:64:15:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:C9:52:76:EB:72:28:A3:87:3B:F9:CC:7C:62:8F:F3:A3:DB:54
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zTfJUnbrciijhzv5zHxij_Oj21Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:af:b4:b4:22:55:7e:fd:99:4c:c5:6c:38:ea:7f:25:3e:b2:
51:bf:70:96:d3:ee:b5:33:63:12:30:42:8c:11:a7:92:ef:6e:
dd:f9:36:1a:cc:93:0e:52:ef:cf:94:35:d0:46:08:23:7b:c3:
a9:c4:01:21:1a:35:86:30:a8:46:b3:86:86:8d:7b:9b:50:bb:
de:b6:90:1e:a5:d5:91:21:a0:cf:c2:5b:fb:88:82:89:2c:dd:
96:20:dd:88:18:d4:fa:dd:4e:8e:7c:5d:d8:26:fb:6b:05:19:
e2:1c:0b:a2:27:20:54:5e:d3:b5:5e:1d:32:d8:4e:da:8b:3d:
05:3a:70:c2:59:51:87:54:1d:ff:83:9b:98:46:a2:ee:bf:b1:
3a:60:4c:ab:69:eb:c0:98:21:bd:3e:34:4d:9d:f1:e2:5b:8b:
87:d4:f0:05:f1:47:40:02:fb:0e:a9:8f:a4:b9:17:b3:49:d4:
e5:df:2d:47:9b:e2:f8:25:b8:95:b3:4a:8f:02:a2:3e:74:31:
a2:c3:f5:43:a4:18:a2:20:a1:c9:22:1c:2c:61:76:b7:72:d8:
fc:d1:94:61:7b:ab:14:6c:7d:72:25:c5:40:79:0c:e1:26:85:
a4:82:b0:b6:78:b7:1c:75:b2:17:40:71:c0:dd:e6:6f:9f:88:
4b:c5:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 10:21:51 2024 by rpki-client on console-ams.rpki-client.org