Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zy46Viobr_2VmWjpPDaDS9a493g.roa
File: zy46Viobr_2VmWjpPDaDS9a493g.roa (raw, json)
Hash identifier: zCF7VsgFIv8dQ2CdZpny/jkaG6zAmBqBRwGwhoLEWEQ=
Subject key identifier: CF:2E:3A:56:2A:1B:AF:FD:95:99:68:E9:3C:36:83:4B:D6:B8:F7:78
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A25D4BD3BC57C898A442C1C3AE1A7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zy46Viobr_2VmWjpPDaDS9a493g.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61123
IP address blocks: 93.171.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:25:d4:bd:3b:c5:7c:89:8a:44:2c:1c:3a:e1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf2e3a562a1baffd959968e93c36834bd6b8f778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:ed:0f:e3:01:a8:4e:57:3f:74:83:68:30:
78:4f:f3:0b:f0:e8:30:0b:5f:90:38:3a:c3:20:83:
70:15:c9:19:fb:7c:62:8e:2c:0d:7c:10:14:39:f8:
da:ed:12:7d:3f:96:9d:02:ea:74:74:6a:c1:2f:b3:
a9:e6:45:3b:11:6f:bd:66:69:0b:c3:5f:6b:3d:da:
90:e7:53:1a:25:d8:8e:f1:ad:30:7a:b4:18:7d:ae:
22:0b:9a:db:fe:20:fb:5e:56:e3:a1:da:4c:4a:90:
93:be:4b:69:b4:06:b0:de:09:80:b5:d7:78:16:4b:
1f:65:22:09:19:a5:1a:d3:19:1a:de:2e:65:c7:b1:
36:48:2f:d0:99:d9:cd:59:9b:91:2a:87:c6:bb:03:
ad:d9:d8:5a:e3:d0:8a:f2:62:59:1a:12:5c:e1:13:
b3:50:c2:0a:62:36:c5:f3:64:a7:b4:99:6c:6a:f1:
ed:36:36:b6:e7:69:c6:8d:98:1d:4a:50:3d:52:59:
57:6c:ad:47:e3:2e:b5:13:95:99:ab:43:f0:bf:b5:
7d:8b:cb:3b:0e:ee:ce:45:8b:c3:ae:f8:54:29:17:
9c:6e:b3:bc:26:4f:00:5d:7c:a7:1c:fc:a5:7f:25:
50:88:9f:8b:34:c7:98:b1:c5:dc:91:87:c5:3b:7a:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:3A:56:2A:1B:AF:FD:95:99:68:E9:3C:36:83:4B:D6:B8:F7:78
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zy46Viobr_2VmWjpPDaDS9a493g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a9:0b:f3:ad:59:2c:37:5f:71:ed:46:c6:53:7a:fc:d6:be:
a3:71:f5:73:2b:39:8e:04:f3:f0:9c:eb:86:6c:f4:c4:c4:c1:
12:bc:74:26:c1:35:21:77:f9:4d:b0:67:99:f3:be:44:a7:3d:
e1:62:99:4a:14:c4:a5:11:28:89:0a:93:35:ba:7e:12:d1:3d:
2d:a7:78:bd:8f:82:63:12:15:be:e9:18:9d:8e:1d:d3:29:a5:
cf:1b:b5:3f:92:20:22:c6:20:d6:ff:d5:1e:66:3d:11:8e:5a:
b3:83:47:80:cf:16:06:d6:24:1e:72:dd:0d:e2:74:7b:80:97:
23:18:02:32:d7:95:59:cc:96:0e:24:9e:c4:7d:80:27:08:10:
07:9e:a0:4e:bf:54:e6:75:1f:69:b1:93:67:f7:57:15:9f:d3:
3a:4d:2a:b5:bf:97:1c:30:71:6a:15:e8:47:71:07:3e:13:e4:
28:9f:49:e2:ee:d1:66:60:ca:4a:6f:03:03:94:34:3d:63:b0:
0e:81:9a:ae:45:66:94:78:1c:34:f6:2f:63:87:43:7d:0f:db:
f2:cf:e6:c7:85:9d:31:67:72:21:32:8f:04:79:38:29:d5:de:
4f:01:c6:8d:35:47:f2:a1:7f:9d:4d:bf:4c:d3:0f:6a:ec:95:
3c:52:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org