Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M0D_gJZqLERotKCX0Zfq-c2m0Jg.roa
File: M0D_gJZqLERotKCX0Zfq-c2m0Jg.roa (raw, json)
Hash identifier: rdLCDzBl5Cfvg5TpEUNQXShResBln1MkgIo02H3Sgv4=
Subject key identifier: 33:40:FF:80:96:6A:2C:44:68:B4:A0:97:D1:97:EA:F9:CD:A6:D0:98
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29FE5659119A423141D92B80BFCFE7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M0D_gJZqLERotKCX0Zfq-c2m0Jg.roa
Signing time: Tue 02 Jan 2024 12:33:18 +0000
ROA not before: Tue 02 Jan 2024 12:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48172
IP address blocks: 146.120.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:fe:56:59:11:9a:42:31:41:d9:2b:80:bf:cf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3340ff80966a2c4468b4a097d197eaf9cda6d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:09:34:b4:31:87:4a:89:69:86:90:23:59:
79:d8:65:2a:21:6e:89:f1:93:e1:d8:38:58:7e:d9:
3a:ed:7d:2b:8d:79:89:be:49:9e:ce:fd:7f:66:c3:
91:e4:59:6d:ec:5f:07:c0:1a:5b:41:3d:97:49:63:
45:04:00:9d:76:f4:70:5c:56:a5:53:06:04:df:24:
7d:50:bc:66:bd:9b:f6:f2:e8:f9:64:2a:dc:a6:bf:
66:77:5e:da:16:46:9e:0a:b8:24:53:c3:26:c1:b4:
8f:91:39:b3:7b:01:aa:19:0e:3b:96:69:b8:de:45:
b6:e3:93:03:e1:2f:80:e3:d5:78:a3:7d:bf:e6:46:
b3:d9:81:1e:a2:00:44:39:38:65:b1:a5:1f:b2:84:
b8:90:cd:ab:39:56:7c:c0:fd:1f:d4:54:fb:84:76:
19:97:84:47:60:7e:dd:bd:7a:c1:7c:34:f2:d4:6d:
85:a8:fc:7b:a2:61:36:a6:74:01:58:90:f6:75:4a:
ad:14:3a:a8:07:31:62:b3:13:12:54:60:b8:31:6e:
80:a9:d3:c7:8d:ff:41:a6:02:ec:1f:dd:68:4a:f4:
1e:40:68:8d:0e:33:f9:66:ea:0f:11:37:ab:2f:25:
de:b9:c6:e0:5e:24:65:52:d4:29:79:e3:ff:a4:f5:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:FF:80:96:6A:2C:44:68:B4:A0:97:D1:97:EA:F9:CD:A6:D0:98
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M0D_gJZqLERotKCX0Zfq-c2m0Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:4e:20:75:10:16:79:aa:0b:ec:ef:3b:c0:38:66:6d:35:7c:
b6:fe:ce:c8:0d:9d:26:e4:cc:ba:95:ff:ff:34:f6:b6:bb:a6:
68:0f:b2:a9:fa:25:74:bb:e9:bf:84:71:be:30:6d:fb:cb:ea:
23:6b:2a:63:47:38:cd:74:a4:a2:da:52:75:7d:d0:2b:9a:4b:
6d:22:1e:04:fb:57:55:f0:5b:52:40:b2:3c:58:53:7f:2a:a6:
2f:bb:06:3f:b2:0d:bc:3c:8f:7f:0b:27:33:57:db:86:19:01:
45:01:0f:3a:c5:4f:59:7d:ec:64:51:a0:cc:64:8b:e3:e1:f5:
7f:76:5a:9c:7a:90:df:8b:ac:66:e3:bd:06:54:74:46:3c:19:
63:01:ed:d7:c7:ba:88:fb:4c:9d:ee:57:0d:d8:1a:37:5f:1d:
61:1e:9f:49:a2:05:37:1c:48:91:8a:19:06:c7:9c:1b:9e:5e:
27:56:41:b2:06:2c:d0:74:6d:2c:4c:da:69:d2:25:bf:5f:51:
c0:93:ac:33:63:f7:18:3b:ff:cc:a0:b9:7c:5b:b1:b0:21:d7:
ca:cb:83:2d:30:fd:68:74:a3:1e:7a:7a:c9:a3:1b:f4:02:d7:
47:76:ee:50:71:76:18:2a:17:44:1e:e6:43:3b:5d:7d:c8:1e:
5c:3c:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:41 2024 by rpki-client on console-ams.rpki-client.org