Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ar8sRcMp3a3S-k208vBPhoCLHkw.roa
File: ar8sRcMp3a3S-k208vBPhoCLHkw.roa (raw, json)
Hash identifier: xUT2hT7NwTz1v5VjGoLdYkV5G+drQV+5citqqNW5Cs4=
Subject key identifier: 6A:BF:2C:45:C3:29:DD:AD:D2:FA:4D:B4:F2:F0:4F:86:80:8B:1E:4C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29EF5C5077AE592A52F5A9021B707A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ar8sRcMp3a3S-k208vBPhoCLHkw.roa
Signing time: Tue 02 Jan 2024 12:33:15 +0000
ROA not before: Tue 02 Jan 2024 12:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42581
IP address blocks: 146.120.212.0/23 maxlen: 24
146.120.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ef:5c:50:77:ae:59:2a:52:f5:a9:02:1b:70:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6abf2c45c329ddadd2fa4db4f2f04f86808b1e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:0c:e9:08:f5:f5:4c:d5:e6:a4:aa:6c:0c:
2b:ad:5b:80:0e:b8:9d:99:f7:d3:8d:ac:0b:f9:a4:
72:2f:05:00:34:f1:a9:19:d3:04:0a:f3:b1:a0:ef:
96:19:cb:78:71:e2:71:77:e9:a0:01:49:b5:11:ee:
85:83:87:9c:45:72:ad:28:93:d1:fa:f9:61:0e:61:
7a:ba:f0:f9:9e:7b:40:b9:95:12:2d:6f:bf:12:86:
b7:43:12:5f:44:2b:44:6a:89:7d:7a:96:e5:7a:7a:
40:73:eb:84:79:fa:96:65:4e:69:8b:42:76:d9:74:
03:b3:a2:f9:e3:55:df:80:63:6d:25:70:36:73:44:
70:68:fc:96:ac:67:d5:68:b8:8e:ab:50:8d:88:ee:
c8:49:32:dc:b5:1e:d4:5f:13:40:b3:f5:c3:59:98:
9a:9b:3c:90:bc:69:36:ca:6e:20:9e:cd:da:f5:8b:
33:76:c3:e5:03:84:aa:46:85:bf:e0:cb:64:4e:94:
1b:69:15:51:af:9b:26:95:2a:b3:8f:e1:1f:72:bb:
2e:b7:cb:da:5c:9f:fa:6e:9f:7e:4f:2e:ba:11:49:
7f:21:fd:89:ca:1c:b8:3a:b2:05:0d:0b:b8:c4:57:
8a:46:29:5b:07:2a:24:51:04:37:1c:d2:0e:bc:ae:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:2C:45:C3:29:DD:AD:D2:FA:4D:B4:F2:F0:4F:86:80:8B:1E:4C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ar8sRcMp3a3S-k208vBPhoCLHkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.212.0/23
146.120.230.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:ea:ab:b4:55:4c:4a:8c:a0:e9:22:f4:85:83:86:fb:b6:be:
fb:a5:ad:1c:63:ad:76:2b:83:b4:73:34:c9:78:bc:60:5c:6d:
32:42:d4:ef:f9:77:c4:0a:29:11:f3:5e:95:ae:cf:82:3a:56:
ec:71:5b:ee:ff:45:2a:a6:6c:7f:00:b5:e1:eb:56:61:f3:9d:
4d:da:9c:e9:be:b2:b6:ac:38:30:d7:c0:f9:04:ab:02:78:25:
7a:d0:40:ec:6e:c9:f0:3b:e4:c7:21:fa:d0:bc:4a:ee:28:97:
b9:27:7f:ce:51:a2:c0:78:b4:c7:66:89:89:ca:c5:a6:db:ef:
79:a6:ce:de:f2:83:10:10:d8:96:64:0a:dd:26:37:ca:37:61:
3d:a9:94:38:b4:b5:98:2f:99:f0:82:b8:c9:cb:67:46:f0:53:
74:e2:dd:58:57:83:75:51:2d:a1:96:c3:40:bf:44:52:e5:3a:
9f:af:26:68:ae:9c:72:ad:83:09:06:99:56:f8:9a:f8:9d:bb:
1f:80:44:ca:45:2f:da:ec:66:65:89:3e:c5:e1:c1:99:17:41:
01:4e:16:d7:26:4a:73:80:fc:53:73:7b:0d:b3:98:c0:77:ff:
d4:7d:9a:21:a6:24:2d:0d:01:fc:51:89:54:d3:5c:d6:ea:7e:
06:2a:0b:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKe9cUHeuWSpS9akCG3B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWJmMmM0NWMzMjlkZGFkZDJmYTRkYjRmMmYwNGY4NjgwOGIxZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbkM6Qj19UzV5qSqbAwrrVuADrid
mffTjawL+aRyLwUANPGpGdMECvOxoO+WGct4ceJxd+mgAUm1Ee6Fg4ecRXKtKJPR
+vlhDmF6uvD5nntAuZUSLW+/Eoa3QxJfRCtEaol9epblenpAc+uEefqWZU5pi0J2
2XQDs6L541XfgGNtJXA2c0RwaPyWrGfVaLiOq1CNiO7ISTLctR7UXxNAs/XDWZia
mzyQvGk2ym4gns3a9YszdsPlA4SqRoW/4MtkTpQbaRVRr5smlSqzj+Efcrsut8va
XJ/6bp9+Ty66EUl/If2Jyhy4OrIFDQu4xFeKRilbByokUQQ3HNIOvK6Q1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGq/LEXDKd2t0vpNtPLwT4aAix5MMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYXI4c1JjTXAzYTNTLWsyMDh2QlBob0NMSGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBknjUAwQB
knjmMA0GCSqGSIb3DQEBCwUAA4IBAQAL6qu0VUxKjKDpIvSFg4b7tr77pa0cY612
K4O0czTJeLxgXG0yQtTv+XfECikR816Vrs+COlbscVvu/0Uqpmx/ALXh61Zh851N
2pzpvrK2rDgw18D5BKsCeCV60EDsbsnwO+THIfrQvEruKJe5J3/OUaLAeLTHZomJ
ysWm2+95ps7e8oMQENiWZArdJjfKN2E9qZQ4tLWYL5nwgrjJy2dG8FN04t1YV4N1
US2hlsNAv0RS5TqfryZorpxyrYMJBplW+Jr4nbsfgETKRS/a7GZliT7F4cGZF0EB
ThbXJkpzgPxTc3sNs5jAd//UfZohpiQtDQH8UYlU01zW6n4GKgss
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org