Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/52p4KY6UEgsRSv8FebXLZuafdQs.roa
File: 52p4KY6UEgsRSv8FebXLZuafdQs.roa (raw, json)
Hash identifier: JhPDMax87yNgL8AVEEguqIhPzq1+qQxnCS/HlQWjXpM=
Subject key identifier: E7:6A:78:29:8E:94:12:0B:11:4A:FF:05:79:B5:CB:66:E6:9F:75:0B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1C7FB9AB4150F4853DC62DBE5208
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/52p4KY6UEgsRSv8FebXLZuafdQs.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59577
IP address blocks: 146.120.188.0/22 maxlen: 24
92.253.212.0/22 maxlen: 24
92.253.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1c:7f:b9:ab:41:50:f4:85:3d:c6:2d:be:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e76a78298e94120b114aff0579b5cb66e69f750b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:4a:83:59:d1:9e:e7:78:2f:3e:6d:15:65:
29:ee:ea:5d:d8:d8:84:9b:ea:4d:78:1d:b3:ca:45:
87:7d:6a:95:28:2b:93:6e:14:97:4b:97:c2:bd:ac:
c1:05:47:49:40:4a:09:a4:a7:9b:c3:41:fc:86:86:
48:a5:98:8c:85:7a:f1:2c:09:ad:ca:8c:ff:0c:fe:
a5:bf:23:db:ac:01:d0:69:0a:cb:f2:3c:75:d5:10:
18:45:bb:42:ca:55:39:be:20:73:5f:f3:06:3b:09:
ff:3d:92:97:b5:35:f7:8e:ee:40:b6:05:3c:cd:50:
f5:73:05:83:12:bf:1e:83:a0:7c:06:e0:19:7a:4c:
f5:96:98:5a:e2:e9:50:1d:a7:63:21:9d:c7:7f:5f:
c4:88:11:92:e4:0b:58:96:fb:8d:07:5d:ec:43:ff:
97:9e:0f:c2:30:79:0c:e7:dc:24:21:88:33:a7:9b:
54:1a:b8:cc:1d:4c:c8:a7:64:7f:c8:b4:92:79:c7:
64:6a:56:26:32:d6:8e:70:29:d0:4e:01:49:b8:a8:
25:5c:ac:ac:dd:e5:fd:36:23:b3:f6:da:ea:cd:4b:
95:75:d8:6d:04:8d:d7:d5:cf:e1:f1:89:8b:0b:30:
59:8d:d3:1c:92:f3:a7:88:ba:62:c5:0e:9c:09:61:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:78:29:8E:94:12:0B:11:4A:FF:05:79:B5:CB:66:E6:9F:75:0B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/52p4KY6UEgsRSv8FebXLZuafdQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.212.0/22
92.253.236.0/22
146.120.188.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f5:af:0a:90:d1:1b:09:aa:11:c2:fa:23:6d:b1:37:27:d1:
be:a5:98:0d:cd:b8:2c:dc:1d:26:a1:6d:61:e8:60:10:1a:0d:
75:48:8b:0e:b3:2f:40:4e:d5:d6:d1:47:be:40:ac:d2:43:59:
e5:ca:81:a4:1e:ec:48:aa:12:f7:33:a3:fd:a8:b7:69:d7:3f:
ad:4b:2e:c7:11:8d:3b:5b:87:d5:65:af:07:b9:b5:e4:4b:e1:
c5:b2:bb:b5:f3:02:db:df:b6:39:76:ed:8d:20:b8:0f:d9:10:
b4:5f:e5:26:9d:41:ef:fe:61:74:f6:50:85:65:bb:fb:e8:85:
bb:e8:2c:7b:f9:cd:f8:82:68:46:a7:fc:80:ea:e6:d5:af:3f:
40:a3:2c:c7:51:c5:a1:0a:dd:e1:9a:75:60:2c:9a:36:1b:92:
b7:1e:5d:7d:d7:da:27:ca:27:b9:ca:e1:d1:d4:2f:ca:99:3d:
0a:5f:f8:0c:ba:36:1a:10:ac:63:6c:ef:17:41:e0:a2:3e:62:
13:17:8b:35:92:b6:2b:94:11:cc:3d:17:51:1e:49:20:81:7b:
cb:f8:2c:75:dc:6c:33:61:82:19:63:db:f2:b9:bb:de:4c:e1:
1d:89:4a:fc:b5:c0:4b:eb:d7:c7:e0:fa:eb:98:14:1b:b3:ed:
84:9b:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:41 2024 by rpki-client on console-ams.rpki-client.org