Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8LuVe8VgvJ5GivV9-ln_1SkH5mM.roa
File: 8LuVe8VgvJ5GivV9-ln_1SkH5mM.roa (raw, json)
Hash identifier: PzWGQ7UuhvA4uUv9Mb1Xy6t5oezYZdGTq1WAVugPiRc=
Subject key identifier: F0:BB:95:7B:C5:60:BC:9E:46:8A:F5:7D:FA:59:FF:D5:29:07:E6:63
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F45E0271C7ACD1B5F5F644E7FD66
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8LuVe8VgvJ5GivV9-ln_1SkH5mM.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43849
IP address blocks: 146.158.0.0/21 maxlen: 24
146.158.8.0/23 maxlen: 24
2a02:128:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f4:5e:02:71:c7:ac:d1:b5:f5:f6:44:e7:fd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0bb957bc560bc9e468af57dfa59ffd52907e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:43:20:59:3c:7c:bd:4b:7a:7a:15:74:89:
4e:90:42:6e:5b:b5:9e:5a:e1:16:94:42:86:4e:6d:
0e:b3:09:19:15:bb:bb:59:10:26:5b:7f:30:4a:d5:
23:f7:a1:17:2c:ba:61:a4:15:2e:5a:7d:e2:a8:cd:
be:fc:f1:c4:c7:b5:78:97:f5:44:3a:cc:5d:ea:6f:
86:32:f7:7c:83:ca:64:31:13:95:36:c2:2a:53:ee:
aa:40:31:8b:ef:2e:f3:f0:11:a0:7d:0c:87:b4:f4:
b3:dc:b8:48:29:07:f4:be:ff:11:a6:16:c2:dd:ce:
70:e1:db:35:d1:9e:f2:f5:6a:96:6b:d9:8a:84:a9:
ff:e2:33:42:6c:a8:38:4d:1e:2e:d6:cd:12:e6:6b:
88:0a:03:d7:af:0c:e7:55:98:65:a0:23:b4:25:36:
23:9e:8d:6f:2b:7c:57:5a:fe:f1:2d:2d:da:3e:e0:
7f:a8:b7:b5:d1:05:e0:e3:52:b0:6d:24:a3:31:4f:
da:24:4f:99:2c:67:3d:aa:97:fc:9a:f5:c5:86:5b:
43:52:e6:d7:d9:0c:c4:65:f3:ac:5f:00:dd:77:78:
72:4d:08:6b:20:f5:43:7f:73:08:c8:98:b7:b8:50:
11:81:e0:a7:70:a4:00:2c:d9:6d:f7:25:91:61:ef:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:95:7B:C5:60:BC:9E:46:8A:F5:7D:FA:59:FF:D5:29:07:E6:63
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8LuVe8VgvJ5GivV9-ln_1SkH5mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.0.0-146.158.9.255
IPv6:
2a02:128:17::/48
Signature Algorithm: sha256WithRSAEncryption
5f:89:1e:de:e9:c6:e4:97:c1:6d:d0:24:11:92:54:61:b5:de:
ff:72:1f:e8:77:dd:68:1b:df:d9:1c:fa:20:74:1c:af:e9:e2:
4b:b0:26:d3:e6:6c:6a:7d:1e:67:5a:20:08:fd:ed:02:c8:4d:
58:dc:76:c5:7f:b0:ba:b6:d2:cb:5b:f9:48:95:2c:c6:e0:a0:
d7:f2:5e:69:6b:3c:de:14:b4:e0:6a:5a:b9:44:33:f5:f1:3b:
db:c1:8f:d9:61:a6:64:c7:45:51:64:a4:f6:85:c2:1e:cc:fc:
0a:dc:76:dc:ac:33:c1:4c:7c:2f:8c:73:dc:af:ff:03:8d:b7:
9f:46:81:b6:1c:0a:1c:50:ec:5c:94:8c:72:e7:d8:20:51:4d:
aa:c1:48:b5:88:94:04:8f:a2:75:49:c6:e6:bf:e4:b7:c5:e9:
52:19:b5:ad:69:63:a4:f5:12:51:f9:60:11:bd:85:25:9e:3e:
92:3a:c9:46:c5:99:65:bb:cf:24:52:b4:93:d0:32:3d:38:dc:
13:f2:e4:07:39:b6:e7:95:cc:74:c0:01:48:42:25:b5:4e:8e:
31:fd:cd:1e:49:8a:64:ec:99:80:14:4d:ef:7c:7d:2b:33:b1:
25:2c:7c:5c:b2:41:9a:d5:09:2d:5b:af:33:15:a6:9b:14:4c:
f1:97:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:11 2024 by rpki-client on console-fra.rpki-client.org