Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cR7aegj5B7jTJds3v-SYBcLrPbQ.roa
File: cR7aegj5B7jTJds3v-SYBcLrPbQ.roa (raw, json)
Hash identifier: OQ0J1rGzL4uz+SpkAUHGdLETROXqpUKd3MjqWfdAN7M=
Subject key identifier: 71:1E:DA:7A:08:F9:07:B8:D3:25:DB:37:BF:E4:98:05:C2:EB:3D:B4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A24B83AA6C25F8509968112F2999B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cR7aegj5B7jTJds3v-SYBcLrPbQ.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60754
IP address blocks: 146.120.166.0/24 maxlen: 24
146.120.160.0/22 maxlen: 24
146.120.164.0/23 maxlen: 24
146.158.58.0/24 maxlen: 24
146.158.58.0/23 maxlen: 24
93.170.1.0/24 maxlen: 24
146.158.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:24:b8:3a:a6:c2:5f:85:09:96:81:12:f2:99:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=711eda7a08f907b8d325db37bfe49805c2eb3db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:db:22:d5:f1:dd:e6:64:3d:8c:19:fb:84:
7c:75:4f:0b:a3:23:83:b1:34:29:23:85:31:53:25:
81:69:26:d4:e0:7c:b5:11:ae:3e:3d:f2:34:a4:2d:
25:13:f7:1c:b8:21:27:50:85:d6:dd:52:e2:9d:36:
aa:80:d9:95:0c:93:4f:94:d7:92:a1:3e:8f:4c:8b:
08:c5:db:12:4e:22:aa:7b:00:69:a7:31:fb:80:df:
6e:5c:fd:2c:e7:b2:ea:00:2a:d7:49:a7:e1:28:c4:
70:37:6b:54:5f:24:3d:a9:90:8d:be:ba:c5:c0:cf:
26:31:b7:0d:8f:61:ca:bf:bb:f9:53:12:70:8a:dd:
e9:5d:de:53:e0:f9:9c:06:9b:a1:f1:ed:cf:3d:7e:
4e:2d:da:7f:3e:f7:54:75:20:1c:5c:41:5c:e3:8b:
a9:61:25:cb:04:d4:e5:a4:a3:c8:47:83:b9:ae:7a:
a5:65:ec:fe:db:d7:90:b5:96:39:e0:9d:18:0d:80:
b4:a3:9f:a3:fa:27:36:4d:4c:2f:16:e3:58:5a:63:
d6:40:f8:60:d1:d5:33:42:9e:9a:d4:7a:55:b5:23:
e8:d6:80:fd:21:84:5a:82:ef:e4:8f:5b:a9:4c:b5:
96:01:26:52:cf:07:6e:d7:7b:ae:c9:60:ae:a3:af:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1E:DA:7A:08:F9:07:B8:D3:25:DB:37:BF:E4:98:05:C2:EB:3D:B4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cR7aegj5B7jTJds3v-SYBcLrPbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.1.0/24
146.120.160.0-146.120.166.255
146.158.58.0/23
Signature Algorithm: sha256WithRSAEncryption
25:40:6a:a8:cd:e9:f3:26:fc:16:57:c6:77:af:c7:38:2e:1f:
c8:e3:0d:00:e7:b4:c0:ed:12:54:27:2a:ee:fd:7d:0b:ca:b2:
7d:ed:8c:a5:8c:ed:df:86:c3:16:e7:24:b9:5e:ca:72:ef:e1:
6c:c9:ea:68:0c:fb:f6:e1:26:ee:25:57:a4:1b:fe:72:21:b2:
23:a4:0a:f8:2f:4a:a0:85:dc:ea:9c:79:91:ac:c3:c7:fa:67:
f6:98:83:99:9c:01:3d:e6:ab:9e:18:a2:9a:f5:41:18:32:07:
1b:fb:53:13:38:b6:fb:5b:ae:1c:67:12:4f:12:1b:b9:60:c5:
64:e7:b9:a5:7d:0a:ff:bb:ba:d3:10:8c:1c:d4:d9:9f:1e:71:
d9:7a:e5:6d:f7:f2:8a:e8:5c:5b:64:39:b7:70:cc:c8:91:92:
d1:8e:63:cd:9d:cb:30:77:bf:0f:60:83:c1:81:e4:e4:7a:07:
9f:a9:68:10:93:91:f2:6c:be:a4:e0:f2:59:99:3d:86:d3:14:
a3:ed:7e:06:0a:ab:ee:20:b4:d8:4e:0f:c0:48:6a:a2:4b:50:
32:86:29:c3:78:8f:9e:0b:da:15:f0:a6:e7:5f:04:4f:80:72:
c1:d6:ed:f6:57:6b:0a:5e:ea:63:c7:b1:36:52:e6:20:bd:3a:
2b:92:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 11:09:57 2024 by rpki-client on console-ams.rpki-client.org