Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UIWFPYiwI5sc04kToV7KDJTs0Io.roa
File: UIWFPYiwI5sc04kToV7KDJTs0Io.roa (raw, json)
Hash identifier: oCxCl+te0M//BKGtmMAl6BPX2WPlLx1rok5FLkFUja8=
Subject key identifier: 50:85:85:3D:88:B0:23:9B:1C:D3:89:13:A1:5E:CA:0C:94:EC:D0:8A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A030A5488321F7DB25B0FBF7F2E1A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UIWFPYiwI5sc04kToV7KDJTs0Io.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49376
IP address blocks: 146.120.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:03:0a:54:88:32:1f:7d:b2:5b:0f:bf:7f:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5085853d88b0239b1cd38913a15eca0c94ecd08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:ac:4a:97:7a:4e:a9:a6:79:71:e2:d2:60:
ba:09:13:77:cb:92:d3:c7:a1:31:a3:1f:9f:5b:7e:
34:b8:d2:18:09:db:10:b5:1a:ce:fd:e6:82:a9:00:
f3:6b:22:b8:ee:6b:0a:8f:ea:aa:43:f4:51:ed:5a:
29:d2:2f:64:a7:51:49:2f:6a:72:c1:fc:74:3b:20:
29:3a:0a:f2:18:07:a3:1d:64:d2:30:ca:d7:aa:a8:
4f:3e:85:92:fe:72:f8:bc:fd:55:84:45:af:31:d2:
da:6e:75:61:21:44:dc:2a:7d:66:47:74:3e:e3:82:
cf:43:19:4d:61:db:df:7f:f3:a0:c9:c5:b0:bb:c3:
e9:ee:90:8d:d7:a4:91:5d:65:17:9a:22:c1:ba:96:
26:30:16:51:89:15:77:d9:1b:98:8a:2f:00:8e:81:
39:ab:b3:cb:4f:f7:cd:5b:79:eb:88:95:43:75:03:
23:4c:e1:01:e6:4e:6e:05:f4:d3:47:49:15:3f:d2:
7f:55:16:17:b5:6e:a8:08:f8:e4:5b:8d:96:1a:ae:
10:2b:ac:7c:97:f3:82:8a:e0:78:7a:b7:79:8d:7e:
3d:89:cc:52:ea:70:48:c9:78:fc:c0:5b:7f:08:5a:
d7:27:ae:fd:10:ed:91:9f:6a:f4:6c:a8:0e:5a:1b:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:85:3D:88:B0:23:9B:1C:D3:89:13:A1:5E:CA:0C:94:EC:D0:8A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UIWFPYiwI5sc04kToV7KDJTs0Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ff:c7:a4:fe:6c:ec:8c:6a:8f:e4:4d:e0:28:26:ce:5e:bc:
9a:ec:4a:de:34:f9:1d:e9:1a:42:98:8f:28:22:8f:96:2f:00:
82:ab:46:63:f8:ea:92:de:04:3a:48:2b:c3:a7:fc:ab:53:1f:
ae:50:f1:0d:fd:ff:be:43:81:c1:19:5c:c6:b5:bd:47:45:d6:
cb:86:f4:d3:3a:50:a2:33:02:6a:b1:f7:1f:71:62:59:ba:95:
54:a6:f1:f4:bb:ec:25:2a:c6:37:84:e0:74:43:c8:80:22:c0:
3e:90:75:29:aa:cd:62:bc:47:12:63:43:7e:4d:48:cd:38:23:
87:14:ae:ac:6d:72:f1:cb:44:25:0d:64:f9:84:d9:6e:cc:2b:
ea:84:79:fc:f0:8c:58:12:00:0a:6a:23:ae:80:92:c7:b8:be:
f9:fc:4d:86:84:b5:c0:6f:cc:99:e5:e6:7b:6d:aa:91:03:bf:
dc:e5:3f:d2:dd:77:3c:6a:65:cf:72:8a:40:10:64:c1:9d:ca:
a7:1a:bc:19:21:86:5a:ae:6a:92:89:1d:33:1e:6b:b2:78:1a:
48:42:24:da:59:af:94:8a:b9:8f:ae:bc:84:58:f5:62:72:7d:
4a:20:18:dd:b9:59:d0:52:39:23:66:8e:7d:8f:17:1b:f5:d0:
1e:8c:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:24:08 2024 by rpki-client on console-ams.rpki-client.org