Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S5BtFOclHbaywRD3xVsu74MdbPU.roa
File: S5BtFOclHbaywRD3xVsu74MdbPU.roa (raw, json)
Hash identifier: fknQH7W/FTmFuDTkqQzUxQClQhn17JqSEa0xVxqRlII=
Subject key identifier: 4B:90:6D:14:E7:25:1D:B6:B2:C1:10:F7:C5:5B:2E:EF:83:1D:6C:F5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29EC1C5225519627741FDF25A742C4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S5BtFOclHbaywRD3xVsu74MdbPU.roa
Signing time: Tue 02 Jan 2024 12:33:14 +0000
ROA not before: Tue 02 Jan 2024 12:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41917
IP address blocks: 146.120.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ec:1c:52:25:51:96:27:74:1f:df:25:a7:42:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b906d14e7251db6b2c110f7c55b2eef831d6cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:a7:ce:29:3f:bd:88:a2:de:e3:61:6b:a7:
84:f1:8c:17:43:f8:db:37:13:48:c5:78:b5:ba:a0:
d1:dd:16:88:c2:a3:68:7d:25:b4:30:7a:3c:e9:6d:
b7:c3:70:c1:10:80:76:d9:9b:2d:78:9c:ba:31:33:
6b:bd:c9:08:a8:7b:22:ff:df:bb:76:d5:86:f1:57:
1b:31:e7:15:f1:6d:b6:78:eb:8e:7a:26:ca:cd:fe:
19:f5:2c:28:e0:ed:e9:ba:8c:eb:5c:df:a2:0a:a5:
f1:7d:b1:21:08:27:21:91:f4:f8:a4:e7:65:78:70:
88:7a:eb:f6:6b:73:07:49:7c:73:d8:28:52:44:29:
96:16:9d:64:55:a4:f5:ac:91:be:ae:18:80:97:62:
55:fd:5d:16:3f:84:f0:a8:fc:c2:63:91:84:7b:e8:
45:1b:ef:fd:82:52:4e:a3:c5:01:bb:da:8a:c3:03:
36:ab:28:06:56:ea:6c:15:c4:5b:78:43:d3:c2:19:
91:f1:06:1c:cc:fb:a0:8b:ba:70:09:da:3f:3b:43:
46:83:6a:ed:20:f6:c4:33:1a:14:d2:3d:94:db:49:
60:16:3f:c5:1a:42:d5:7b:bf:63:89:b6:a9:db:70:
73:d5:18:c0:5e:ba:87:7b:dc:f6:73:d4:aa:94:57:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:6D:14:E7:25:1D:B6:B2:C1:10:F7:C5:5B:2E:EF:83:1D:6C:F5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S5BtFOclHbaywRD3xVsu74MdbPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.101.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a7:d3:de:2f:72:37:77:7d:4f:c0:91:30:e1:30:8d:a2:f5:
22:39:81:e3:3e:7d:d6:f3:d0:16:07:e7:0d:7a:64:73:0c:03:
bf:42:9a:9b:cc:f2:03:bb:21:05:d5:ee:b6:9d:98:5f:31:78:
b7:45:9a:28:70:27:b1:c7:45:cd:cf:a2:43:4b:37:f1:d8:99:
3e:dc:ba:b6:f0:e8:18:19:19:3d:aa:3c:06:ed:62:7f:ff:35:
f0:60:29:1d:39:b1:df:6c:e8:6a:56:48:db:49:89:8b:c4:b5:
a7:cf:93:72:15:c5:b2:0e:3b:e3:e2:17:3b:8e:c5:e1:21:71:
9f:fa:53:bd:72:cf:c4:51:49:d4:6b:a2:e6:34:14:f6:1b:29:
26:0a:6c:eb:39:a5:b4:46:63:e0:56:2a:cf:ed:16:98:eb:1c:
6c:07:68:1f:28:75:e9:b6:25:00:69:7f:dc:e7:cc:13:5c:73:
8f:1b:e2:29:4c:b0:f4:1e:0b:2f:59:60:d0:32:25:56:fc:ee:
24:d0:10:17:b1:ef:41:51:57:a4:91:ce:9a:0e:a9:ed:85:cd:
36:d9:40:0a:ce:d4:ae:f7:5a:1f:a5:50:be:c4:47:af:fd:e2:
b3:bb:b4:62:d5:92:13:12:7f:5e:6f:2a:3d:26:39:da:e7:0b:
d1:1d:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org