Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FVgRPe_dl0w5MDDsUUqg_v_4E00.roa
File: FVgRPe_dl0w5MDDsUUqg_v_4E00.roa (raw, json)
Hash identifier: +tdcEsrhyTVMtGsuFBAQBo/wfJcgVFzuOwdwv/WbAB4=
Subject key identifier: 15:58:11:3D:EF:DD:97:4C:39:30:30:EC:51:4A:A0:FE:FF:F8:13:4D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A49A6FB3C565984192BFBE85CCC83
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FVgRPe_dl0w5MDDsUUqg_v_4E00.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208515
IP address blocks: 146.120.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:49:a6:fb:3c:56:59:84:19:2b:fb:e8:5c:cc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1558113defdd974c393030ec514aa0fefff8134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:89:a0:22:25:85:fe:55:c0:67:ba:53:a5:
04:55:9b:fa:21:17:e7:05:98:bd:97:a5:7e:6c:fe:
e9:75:e2:01:c0:cd:72:b4:f3:d4:e2:52:f1:be:84:
7b:6d:2e:23:58:f3:c7:86:be:b4:3f:c8:db:2c:35:
f6:19:a8:11:e5:96:eb:60:c7:36:3e:f4:00:28:9e:
9a:f4:c3:38:fc:31:f1:62:f4:b5:16:af:e3:52:57:
5e:dd:ee:68:7d:f4:a2:55:f7:96:f0:79:c3:cd:2a:
4b:d0:1c:5d:3b:f2:b9:38:34:9f:46:34:13:5d:c0:
b2:73:2d:26:e2:8e:b0:ff:41:fb:2a:44:d8:df:cc:
6d:54:0e:cf:84:bb:93:6c:9b:5a:15:82:6b:7f:45:
ca:ac:ee:76:43:2f:9b:aa:d6:9b:50:23:70:78:f5:
d7:c8:d5:51:b0:30:c6:66:7f:d5:3f:0c:73:69:87:
fe:8e:54:35:b6:26:81:e2:32:b9:61:53:dc:be:7a:
28:9f:37:da:02:4c:e9:7b:8a:ff:dc:0a:cc:85:0b:
0b:06:90:27:cd:e0:0d:82:27:44:b9:47:f3:70:04:
7d:f4:b3:2e:19:f6:53:a0:2e:8d:82:58:82:50:72:
67:ee:47:88:34:4f:6f:58:89:57:d3:96:64:39:3e:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:11:3D:EF:DD:97:4C:39:30:30:EC:51:4A:A0:FE:FF:F8:13:4D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FVgRPe_dl0w5MDDsUUqg_v_4E00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:12:1a:60:77:b3:58:0a:6d:85:d3:35:6d:59:16:b4:40:ef:
56:0d:87:68:a6:42:94:04:42:19:73:70:d4:34:72:da:51:31:
04:8c:70:f1:2e:27:8d:40:16:b7:46:e6:d4:62:37:10:83:24:
a1:29:95:e5:a0:25:fd:f9:c8:8d:88:e8:6d:11:9a:aa:60:ab:
1f:25:8d:26:66:71:7f:30:5d:2b:58:2b:ae:fc:16:4a:1e:84:
91:b7:15:fa:69:61:5e:86:ff:1e:41:02:50:85:a5:05:df:7e:
15:16:b5:84:80:df:da:91:42:e3:73:75:c2:38:9c:f0:f2:c7:
e2:dd:09:bc:ea:c6:e2:5a:9d:ad:ce:7a:f6:ee:ae:99:c9:62:
7c:f3:d2:46:4b:38:b9:7b:83:ff:02:73:c9:b9:e2:81:87:0b:
17:22:1f:9c:1c:f5:a9:05:a1:f6:e0:21:b7:40:4a:23:a2:3a:
b5:2a:b7:81:dd:ac:6c:7b:c7:43:d8:dd:f1:96:8f:47:de:c1:
2c:62:e8:37:98:74:a1:39:29:94:96:9f:2f:fd:43:08:fa:08:
7f:5d:df:32:e0:43:16:68:d5:5b:3b:78:59:2f:ca:8f:1e:12:
79:c9:06:07:26:4d:25:8a:12:0a:0b:dd:9a:9a:6b:2b:6c:d3:
ad:3c:46:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:02 2024 by rpki-client on console-fra.rpki-client.org