Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-iPeSjjGb4pZh3LQtdJUsGaRxt0.roa
File: 1-iPeSjjGb4pZh3LQtdJUsGaRxt0.roa (raw, json)
Hash identifier: xFRhLGff5SxfChCv5iETxRfbtvuGwZvD9pI1BIwfUPc=
Subject key identifier: FA:23:DE:4A:38:C6:6F:8A:59:87:72:D0:B5:D2:54:B0:66:91:C6:DD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3CF6113A1FF754E92178533EB653
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-iPeSjjGb4pZh3LQtdJUsGaRxt0.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202668
IP address blocks: 146.158.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3c:f6:11:3a:1f:f7:54:e9:21:78:53:3e:b6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa23de4a38c66f8a598772d0b5d254b06691c6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:b1:a5:75:04:a2:dd:43:72:7a:cc:12:c9:
93:6b:0d:8e:f7:11:78:5f:a7:09:54:d9:2f:fe:1f:
15:f7:b2:a7:59:72:ee:29:7e:27:08:53:2d:fb:0e:
88:33:8c:8e:73:f0:67:7f:0b:03:90:ed:9c:b6:91:
3a:80:02:51:ef:a1:e0:dd:f0:e3:89:8f:26:d1:73:
ee:11:e7:fc:55:80:8f:c9:ca:1c:81:49:6f:04:2c:
6c:91:4a:b7:3f:ff:71:6c:c8:9b:b2:86:1b:a9:b2:
0b:a2:b5:69:a6:72:b7:ff:94:e1:db:84:c0:2d:8e:
65:e6:e5:c7:a8:45:ec:09:97:5c:45:bb:43:ef:f9:
6e:59:92:2e:87:ed:13:e7:e3:a1:c6:4f:b0:43:62:
80:e9:9c:b0:9f:14:be:be:2c:43:61:e7:85:8e:0b:
0d:6d:7f:2b:3b:c0:af:9b:cd:00:ca:ab:2c:3b:59:
be:4a:6b:cf:c5:6e:bc:94:f2:a3:3c:64:7f:17:0d:
78:a9:07:56:d5:be:62:db:ef:04:92:a4:37:5c:ec:
24:be:0c:8e:24:ea:5a:53:75:8d:f6:21:2b:df:41:
74:af:29:f5:08:d6:09:95:64:b5:fa:56:bf:45:00:
8b:51:ba:36:a4:13:73:e1:7d:24:20:60:92:30:25:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:DE:4A:38:C6:6F:8A:59:87:72:D0:B5:D2:54:B0:66:91:C6:DD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-iPeSjjGb4pZh3LQtdJUsGaRxt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.30.0/24
Signature Algorithm: sha256WithRSAEncryption
31:eb:b0:97:d2:93:fe:3a:72:e0:7e:a6:d4:15:c9:b0:1c:f1:
3d:f6:b3:63:56:d8:04:5c:f9:4e:aa:bd:b8:67:7f:31:91:65:
88:3e:20:53:3a:f3:b5:99:84:1b:05:4c:53:96:0a:6e:74:b6:
1f:fa:03:17:bd:6f:a3:47:bf:db:32:14:cc:47:65:bf:cc:a6:
1b:54:b2:84:da:af:e2:88:2b:1e:0b:f0:e4:a4:21:cf:74:b8:
f9:f5:44:e9:06:3f:1b:24:e1:cc:04:c0:ad:3d:bc:ec:ec:11:
14:ce:ae:bd:5d:bd:6d:1f:12:f3:f5:9c:54:af:d9:50:1c:6e:
a1:58:7c:b2:46:f9:ea:49:71:17:99:ff:36:60:c1:54:97:b5:
76:ef:4e:c2:4f:9e:28:89:5e:41:0d:49:52:7a:e6:c2:d5:ef:
6b:97:46:42:19:8d:6e:42:8f:50:8a:7d:91:71:b3:04:58:c1:
29:ba:8b:59:5d:5d:ec:9c:f7:40:b7:c9:c6:cd:a5:36:ab:c4:
70:80:d9:12:f0:1e:d1:b2:2d:39:e4:56:d4:9d:c1:b2:fc:9f:
b3:eb:0c:af:45:75:a1:86:d5:04:f3:04:74:5a:63:55:65:c6:
68:c6:12:a2:c1:cc:8d:de:0f:94:ad:fc:a8:eb:7d:23:d9:5e:
5f:b1:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org