Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E6xvKD-V7cMkPIpdlqgf3tJZNmo.roa
File: E6xvKD-V7cMkPIpdlqgf3tJZNmo.roa (raw, json)
Hash identifier: Jt6/rXNXVfWUdQZ2es1wh5NA9AFNQYfx3/WjdNppuRo=
Subject key identifier: 13:AC:6F:28:3F:95:ED:C3:24:3C:8A:5D:96:A8:1F:DE:D2:59:36:6A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E98C1D770D51AEAD1207B25EEE62
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E6xvKD-V7cMkPIpdlqgf3tJZNmo.roa
Signing time: Tue 02 Jan 2024 12:33:13 +0000
ROA not before: Tue 02 Jan 2024 12:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41177
IP address blocks: 146.120.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e9:8c:1d:77:0d:51:ae:ad:12:07:b2:5e:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13ac6f283f95edc3243c8a5d96a81fded259366a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:65:ec:51:92:0a:52:0c:5c:42:ad:27:26:
42:48:e6:02:6d:8f:c1:56:7f:e3:65:66:a5:b1:8b:
7e:1f:64:b9:b7:16:43:4d:63:c7:c0:7f:83:96:54:
fe:9a:a2:8d:6c:e1:ac:7b:ec:a7:9e:94:a7:d6:91:
62:2a:f5:e4:d0:a2:0e:f2:a8:d6:f3:4a:2b:68:6e:
93:e0:81:70:a2:a3:9e:67:89:e0:14:33:67:9b:e8:
1c:be:33:e1:28:e5:d3:ab:aa:ab:d0:24:eb:92:e7:
11:16:88:c1:80:6e:17:74:2e:58:bc:36:c7:96:1d:
d5:78:63:c4:2d:46:f3:f1:f8:87:80:9c:08:71:1d:
9a:2b:a3:8f:8d:6d:82:da:c1:a8:c7:70:48:10:8e:
05:76:a4:b2:e3:a1:7a:3b:35:0a:c5:24:03:c3:f0:
4e:2a:f9:27:5a:95:9a:4b:29:ad:4d:46:75:bb:97:
92:7a:72:3e:60:5e:9f:c8:61:f1:41:fa:a2:89:5c:
cb:f1:db:c0:d9:3a:1c:07:48:7b:39:5f:00:8c:1c:
d1:99:d1:1b:aa:4d:5a:91:7a:09:5a:82:a2:24:18:
be:68:6f:2a:0e:03:09:9b:6e:c3:8f:80:61:07:e0:
e2:89:14:ad:c3:13:a7:64:36:1f:cf:ad:10:85:ed:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:6F:28:3F:95:ED:C3:24:3C:8A:5D:96:A8:1F:DE:D2:59:36:6A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E6xvKD-V7cMkPIpdlqgf3tJZNmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.102.0/23
Signature Algorithm: sha256WithRSAEncryption
88:76:39:2b:54:7a:47:0d:4c:48:10:fb:13:86:5e:fe:56:04:
31:99:44:f9:e5:29:52:ef:b5:da:63:30:d4:1a:3b:17:67:44:
ef:a3:79:2c:42:8f:a8:34:e8:d6:7b:a5:68:1a:60:e1:1e:0a:
ba:5a:69:25:60:dd:84:46:cc:d1:93:65:11:b4:62:3c:f8:66:
a8:17:fa:49:53:ee:29:76:80:f7:d7:72:06:f1:86:7d:78:c5:
64:b1:3f:b6:75:a7:04:a6:b1:23:90:d0:e2:90:66:3c:11:5f:
b2:41:1f:1c:09:51:0b:a3:26:77:44:cf:ce:b2:f4:48:7f:4f:
a0:d9:b9:b8:16:97:92:e0:96:48:37:9c:55:18:26:8d:4a:de:
50:fc:68:63:e4:26:00:dd:02:82:55:75:5e:28:ba:48:75:74:
02:b0:1e:59:a1:6a:7c:c5:c9:2b:ea:92:d9:3b:19:62:e9:c3:
48:69:04:3e:60:cd:88:b8:61:7c:a2:0e:30:5e:d2:78:4e:7a:
78:de:95:a8:26:55:f6:2f:9d:b3:87:34:1c:00:8c:e1:1f:c2:
44:f3:bd:c6:23:b3:25:88:29:e2:20:c5:29:60:80:65:ad:55:
3e:17:f3:a5:f3:2e:87:37:b0:f2:74:93:65:43:cb:ac:f1:9e:
66:07:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:11 2024 by rpki-client on console-fra.rpki-client.org