Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2g78iUOyr9vlGxZIINPE4rvw2qU.roa
File: 2g78iUOyr9vlGxZIINPE4rvw2qU.roa (raw, json)
Hash identifier: GfRmCi0X4df8dopHwc2cSKRh5cd2029qPVde3cdDUUc=
Subject key identifier: DA:0E:FC:89:43:B2:AF:DB:E5:1B:16:48:20:D3:C4:E2:BB:F0:DA:A5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29EECD5D6F8A78583BCF8D6E92C0AE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2g78iUOyr9vlGxZIINPE4rvw2qU.roa
Signing time: Tue 02 Jan 2024 12:33:14 +0000
ROA not before: Tue 02 Jan 2024 12:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42489
IP address blocks: 146.120.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ee:cd:5d:6f:8a:78:58:3b:cf:8d:6e:92:c0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da0efc8943b2afdbe51b164820d3c4e2bbf0daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:dc:a4:08:22:97:37:f1:2f:71:78:7e:91:
5f:65:f7:c5:ef:fd:cf:56:29:a2:a5:25:5a:25:10:
0c:6f:a1:4e:f8:d0:98:13:f6:25:eb:5f:31:0e:9a:
20:4f:7f:1e:28:0a:16:f7:7a:26:82:df:39:1c:3b:
7c:f7:b4:ee:03:26:59:25:6e:b2:25:dc:96:5d:f4:
cb:1b:e3:aa:9b:ad:7b:84:53:bb:e3:38:53:f8:12:
5e:33:74:a4:32:28:e8:82:f4:ba:da:c0:12:15:20:
be:15:99:e5:22:e4:43:eb:e3:2d:6c:22:41:c0:d7:
b5:b8:1a:38:de:dd:dd:4b:1f:6f:6f:fe:cf:ac:84:
7c:39:21:ce:2a:d6:43:6e:4a:4a:12:5c:2b:41:2d:
b2:9b:0a:ea:d2:07:88:f4:fb:d2:a8:41:79:be:5e:
c3:74:21:8d:33:66:13:9a:75:eb:3d:9b:9c:12:56:
02:a9:ec:bf:0a:28:57:f6:02:d5:d6:58:82:ff:78:
e5:f9:62:0d:c8:f7:2c:61:5d:ec:d8:30:e3:54:ba:
c4:89:08:0d:74:6a:8d:59:cb:64:28:0c:2e:1b:f1:
f8:9c:46:60:df:a0:17:bf:53:90:af:1e:14:0b:40:
89:3a:73:c9:e4:09:19:4a:31:96:60:fd:3a:dc:12:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:FC:89:43:B2:AF:DB:E5:1B:16:48:20:D3:C4:E2:BB:F0:DA:A5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2g78iUOyr9vlGxZIINPE4rvw2qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.222.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e8:ec:77:f1:db:73:3f:50:1a:ec:fa:7d:58:c6:df:6e:6a:
3f:62:65:e5:f0:48:d2:85:2b:81:93:58:8c:36:d5:77:74:f3:
44:67:40:a0:6c:e6:3d:2d:bc:e2:08:a1:10:ef:e0:72:b6:72:
49:0c:10:e0:8a:30:b7:0c:e2:03:60:3d:5f:f0:90:67:bd:70:
c4:e2:9a:fe:8f:69:33:05:1d:a0:45:e4:ae:f6:2a:57:aa:70:
0f:8c:54:85:65:99:dc:28:9b:aa:61:83:81:94:25:fc:10:04:
c5:71:fe:37:96:32:a9:c0:3d:ee:e9:dd:98:2a:fb:e3:dc:4b:
0d:69:19:86:06:7a:2a:5c:cd:c4:9d:e2:c2:c5:19:6d:77:77:
9c:dc:33:13:20:af:be:56:07:b8:55:b8:b8:13:3f:64:cf:c6:
33:20:bf:20:50:12:88:28:33:c8:ba:c9:35:e8:5d:12:85:ba:
55:e1:cb:de:b8:25:b5:e3:d7:a7:8a:94:ca:16:72:ed:88:5f:
ab:79:24:ce:06:b3:ef:be:f5:e0:b9:50:9a:a3:e1:5c:4e:a0:
e9:f4:89:55:e9:24:89:1a:be:dd:9d:d7:36:ab:73:2c:c9:78:
00:82:54:67:07:e5:16:e5:6b:ab:84:a2:9f:90:0f:e2:e9:c2:
1b:cf:3e:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKe7NXW+KeFg7z41uksCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTBlZmM4OTQzYjJhZmRiZTUxYjE2NDgyMGQzYzRlMmJiZjBkYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubvcpAgilzfxL3F4fpFfZffF7/3P
VimipSVaJRAMb6FO+NCYE/Yl618xDpogT38eKAoW93omgt85HDt897TuAyZZJW6y
JdyWXfTLG+Oqm617hFO74zhT+BJeM3SkMijogvS62sASFSC+FZnlIuRD6+MtbCJB
wNe1uBo43t3dSx9vb/7PrIR8OSHOKtZDbkpKElwrQS2ymwrq0geI9PvSqEF5vl7D
dCGNM2YTmnXrPZucElYCqey/CihX9gLV1liC/3jl+WINyPcsYV3s2DDjVLrEiQgN
dGqNWctkKAwuG/H4nEZg36AXv1OQrx4UC0CJOnPJ5AkZSjGWYP063BI13wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNoO/IlDsq/b5RsWSCDTxOK78NqlMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMmc3OGlVT3lyOXZsR3haSUlOUEU0cnZ3MnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknjeMA0G
CSqGSIb3DQEBCwUAA4IBAQCS6Ox38dtzP1Aa7Pp9WMbfbmo/YmXl8EjShSuBk1iM
NtV3dPNEZ0CgbOY9LbziCKEQ7+BytnJJDBDgijC3DOIDYD1f8JBnvXDE4pr+j2kz
BR2gReSu9ipXqnAPjFSFZZncKJuqYYOBlCX8EATFcf43ljKpwD3u6d2YKvvj3EsN
aRmGBnoqXM3EneLCxRltd3ec3DMTIK++Vge4Vbi4Ez9kz8YzIL8gUBKIKDPIusk1
6F0ShbpV4cveuCW149enipTKFnLtiF+reSTOBrPvvvXguVCao+FcTqDp9IlV6SSJ
Gr7dndc2q3MsyXgAglRnB+UW5WurhKKfkA/i6cIbzz4l
-----END CERTIFICATE-----
Generated at Wed May 29 07:36:50 2024 by rpki-client on console-fra.rpki-client.org