Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7F56GosvmSQI1HmPqGGyrMMeRso.roa
File: 7F56GosvmSQI1HmPqGGyrMMeRso.roa (raw, json)
Hash identifier: X8FeC1bbPlmThLGC854GIgV/UxaCscftwDPO0yuVkJc=
Subject key identifier: EC:5E:7A:1A:8B:2F:99:24:08:D4:79:8F:A8:61:B2:AC:C3:1E:46:CA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3CCDFF882EBDA9E088A8153931EB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7F56GosvmSQI1HmPqGGyrMMeRso.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202533
IP address blocks: 146.120.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3c:cd:ff:88:2e:bd:a9:e0:88:a8:15:39:31:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5e7a1a8b2f992408d4798fa861b2acc31e46ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:08:4e:0f:51:5b:ea:92:6e:ed:36:c8:95:
34:bd:f2:37:35:bc:ef:c4:b7:7d:e5:c5:67:26:83:
ba:10:dd:79:82:99:ec:3b:0a:d6:12:03:c4:d1:7e:
88:b5:91:93:94:22:68:b0:2d:e9:64:4b:7a:86:fc:
97:77:d7:23:8c:fb:83:cc:8d:6a:b5:b5:3d:ae:25:
68:6f:42:48:a1:28:dd:09:b7:f0:ed:44:18:8d:03:
fc:24:96:d9:63:36:a3:c4:94:dd:2e:f6:98:ec:2e:
04:4a:10:0c:3d:5c:5e:9d:38:d0:79:ee:17:f9:5c:
ea:6f:5e:d6:4e:5a:22:33:60:b0:95:c0:7d:1e:70:
d1:39:05:5a:53:0d:99:f4:19:df:85:68:2c:63:9a:
56:0a:17:89:a9:b9:bf:d8:70:52:9f:f0:90:4b:76:
7e:36:1a:bc:8c:67:c2:57:77:d3:a0:74:99:6d:7f:
02:91:37:2a:83:fe:f2:4d:0f:3b:68:58:4e:ef:43:
f8:15:9d:6a:5c:17:d7:52:77:23:ef:40:bc:9f:25:
48:e1:0d:ce:41:52:0d:d0:47:16:d7:ef:7e:02:fa:
d3:94:ab:e1:3f:00:84:2c:f2:13:87:98:e6:2b:96:
18:dc:cc:9e:05:7c:24:fe:78:3e:79:4a:91:e1:fc:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:7A:1A:8B:2F:99:24:08:D4:79:8F:A8:61:B2:AC:C3:1E:46:CA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7F56GosvmSQI1HmPqGGyrMMeRso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.20.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3b:c3:08:30:87:04:5c:18:e6:4c:4e:96:fe:cf:76:9b:d8:
65:80:f8:1e:50:f4:04:a4:7b:75:78:fc:31:44:ce:82:5b:fa:
e0:78:82:0b:dd:97:b9:1b:ba:68:a4:3a:de:4f:b5:e8:f6:e7:
fc:5f:d8:03:37:48:76:9f:3d:bf:93:53:d4:61:73:c7:8b:e2:
94:62:17:f8:12:85:96:7a:e7:9b:04:45:bf:06:47:d5:60:99:
6b:bf:06:63:bd:98:e6:9a:a4:30:5b:c4:42:22:0d:a5:df:ac:
3d:cc:a9:e6:6b:4a:50:ee:f0:8d:81:c3:09:23:26:c0:02:42:
29:55:49:5f:85:68:62:b9:31:3c:27:99:04:5a:ad:cd:6b:6e:
a2:a9:74:46:96:3b:6f:0e:62:c7:01:3d:e2:bf:8b:23:0e:6a:
a8:d8:a3:1a:d2:8c:bb:72:ca:15:0d:75:c1:14:b2:d3:2e:c2:
81:89:56:67:5e:8e:cb:1f:a3:c2:3d:8a:e4:73:30:c8:b8:c4:
7a:d2:5f:9b:ff:dd:92:95:26:6d:e5:9d:8c:b0:75:49:94:d3:
a8:a5:f9:6e:57:dc:0a:75:32:db:7c:37:36:c1:d6:5b:be:c4:
97:fc:e1:32:f8:32:90:7d:84:c5:b2:03:73:28:c7:0d:8b:c0:
99:32:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:10 2024 by rpki-client on console-fra.rpki-client.org