Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-sUSIFIiQ7hk84KDV0tubqTDg-U.roa
File: 1-sUSIFIiQ7hk84KDV0tubqTDg-U.roa (raw, json)
Hash identifier: MH3Abesi2FfKZ8XWPGkhAzGI95BIUowjLMeu9njVp38=
Subject key identifier: FA:C5:12:20:52:22:43:B8:64:F3:82:83:57:4B:6E:6E:A4:C3:83:E5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4050CEE723155C120866F181832A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-sUSIFIiQ7hk84KDV0tubqTDg-U.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204532
IP address blocks: 146.120.206.0/24 maxlen: 24
95.47.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:40:50:ce:e7:23:15:5c:12:08:66:f1:81:83:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fac51220522243b864f38283574b6e6ea4c383e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:1e:02:fa:ac:d7:c4:27:73:af:88:5b:1f:
6c:93:d7:cf:a1:64:82:a0:0a:6f:03:e9:d2:e7:24:
c7:90:b1:69:29:d4:5a:1b:57:c1:47:13:39:ed:0e:
0f:64:9c:bb:14:5c:05:76:5e:02:6d:8d:60:99:9d:
d3:56:a0:6b:32:85:c2:85:ee:35:d1:3c:41:af:2d:
0c:b4:35:18:97:6d:23:8e:12:0a:96:bf:97:12:bf:
38:f2:ed:e8:7a:c3:72:f2:89:77:da:88:1b:a1:55:
17:e4:ba:08:a2:95:72:c8:97:60:08:0f:bc:d5:53:
94:0a:bd:31:49:1e:4b:8f:b0:8e:ed:bd:c5:d6:37:
01:c0:e2:d7:06:cb:f9:f2:30:53:b8:4b:75:5f:dd:
d6:58:54:bf:0e:79:70:8f:0d:30:88:93:56:71:aa:
2a:bb:30:5e:3c:e6:50:86:3c:ed:43:a8:13:f6:0d:
b5:d6:b9:04:2e:19:37:35:0a:6f:33:a4:d2:94:cd:
80:7b:2f:d8:64:1e:50:50:15:fe:3f:81:05:5c:fb:
e5:52:b6:8f:85:e0:fa:6f:2f:dc:e7:ef:a6:d3:35:
24:4c:6a:88:a9:95:e0:15:0f:6f:1e:35:c6:3e:a1:
b2:63:6a:5f:9b:28:d3:c4:c0:82:25:44:ee:8c:38:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C5:12:20:52:22:43:B8:64:F3:82:83:57:4B:6E:6E:A4:C3:83:E5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-sUSIFIiQ7hk84KDV0tubqTDg-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.168.0/23
146.120.206.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7e:6c:79:be:1c:95:e6:17:04:c3:2b:1a:eb:5a:f0:66:92:
fb:67:53:8a:fc:88:7f:12:f0:ed:cc:78:d1:5b:9d:3a:66:c9:
b5:86:99:57:35:12:6d:aa:ae:53:01:c7:1c:22:39:1b:e1:6c:
4e:42:9e:61:42:46:14:34:3c:ae:1a:68:28:55:99:3e:dc:b4:
e6:b9:d9:38:0d:71:fd:62:40:a1:c6:89:50:f7:90:ef:66:e4:
6f:61:aa:3c:6b:c3:21:ea:ea:47:44:12:f6:9e:8a:73:a0:4f:
9d:92:e2:27:1d:97:88:ae:2e:b5:37:ec:64:b6:ea:4a:4b:42:
8f:ce:eb:05:fc:45:9b:a6:1f:84:c1:a5:9b:61:1d:36:26:e3:
fd:33:11:06:69:b8:1c:b9:8a:22:1f:16:23:bb:46:f1:94:52:
da:15:4a:82:ca:5f:63:0f:5f:5e:07:a2:06:d1:7f:ac:58:a7:
0f:eb:f8:fe:4c:34:75:19:6d:cb:52:73:3d:fc:0b:94:e1:3a:
fa:b9:eb:a5:5d:2a:14:6d:ed:9c:c8:ff:56:10:43:6b:85:f0:
c0:85:ca:70:f5:e8:d8:ad:98:5b:ef:c1:d8:9a:8b:3b:7f:10:
41:d6:cd:4c:6a:77:b0:bb:d5:bd:2b:40:0b:58:0e:23:da:33:
54:f1:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org