Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/diSIiuyCUHtcNGioPesKBsAspxg.roa
File: diSIiuyCUHtcNGioPesKBsAspxg.roa (raw, json)
Hash identifier: OFWIm4cmqdVp6MVna3KNs7HsrlIlIIfRIxxoQwJYvFw=
Subject key identifier: 76:24:88:8A:EC:82:50:7B:5C:34:68:A8:3D:EB:0A:06:C0:2C:A7:18
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1C4477AABACF7A5BB73DBD17F9E9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/diSIiuyCUHtcNGioPesKBsAspxg.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59525
IP address blocks: 146.120.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1c:44:77:aa:ba:cf:7a:5b:b7:3d:bd:17:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7624888aec82507b5c3468a83deb0a06c02ca718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:f3:0d:64:2f:f8:c4:0c:21:c1:9b:46:4d:
00:99:b5:64:a3:c9:10:dc:ec:d9:fd:3b:f9:e2:c4:
fb:0f:2b:1b:d0:3c:86:f4:1c:c2:c9:0e:ee:75:71:
b3:68:a4:30:d9:74:eb:a0:c0:59:1f:bb:5f:a2:84:
40:c5:c3:68:d5:12:4b:10:b5:4d:17:9a:19:d3:c1:
89:68:b0:0f:db:da:ed:bc:e3:75:61:7f:19:29:35:
ac:32:22:29:d0:6c:ba:66:2c:d6:93:92:bc:f2:de:
e3:d4:87:b9:2c:e9:5a:89:fa:db:8a:1e:9b:40:4c:
66:68:79:c2:51:22:0b:cd:3e:2c:d0:b1:b2:9e:d3:
36:f3:53:e4:6f:f0:7c:1e:30:9c:1c:c5:4c:d6:87:
b6:20:d4:bd:ac:e4:25:8b:35:be:ee:b0:2a:2e:cd:
8e:7d:85:52:31:33:86:25:13:55:6a:35:14:a0:30:
c7:8f:2c:31:c8:9c:68:b6:cb:e6:53:61:c0:62:e6:
4e:b1:11:62:61:83:e2:44:df:0d:bc:a5:b7:a2:3f:
ea:b2:66:bd:d5:c4:b3:b8:8d:d4:98:7a:db:5f:2b:
d2:e5:9b:f9:c2:e6:e4:8d:e6:11:49:d9:c4:9d:0a:
2f:d4:0e:0a:f4:c0:f1:2a:03:87:9f:e5:8f:30:c5:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:88:8A:EC:82:50:7B:5C:34:68:A8:3D:EB:0A:06:C0:2C:A7:18
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/diSIiuyCUHtcNGioPesKBsAspxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ce:e7:df:1e:8c:5e:94:91:fe:80:0d:b3:02:a7:97:48:c8:
27:45:af:6b:b8:ad:6b:25:87:4c:8e:04:78:d6:d2:a7:3d:9a:
fa:ee:35:2a:e8:a4:f4:6b:26:2b:ab:55:8e:bf:f6:ad:6c:82:
01:d3:56:b9:fa:ca:df:ee:83:c5:f9:a3:62:44:2e:4a:25:0e:
98:22:ac:ef:44:ec:02:bb:49:f3:90:0d:0d:91:38:38:9e:6b:
aa:4d:21:a8:43:f8:9f:e9:57:20:5a:57:a5:cf:76:62:fc:9c:
a3:10:a4:c7:de:ae:84:4f:06:0b:13:83:80:0f:f3:03:4c:34:
b0:65:8a:8e:82:45:23:3c:c1:e9:62:99:db:58:2c:54:a4:c1:
09:a2:a2:60:59:90:8b:a3:30:34:23:09:d8:0e:d5:a2:59:0a:
51:31:09:c5:b4:9f:35:b4:ac:f4:3c:0c:1b:c7:2a:cd:4e:0e:
27:a7:3b:77:98:f9:6f:be:c0:a5:32:ec:e0:fc:88:9a:33:ea:
d3:b1:3f:e4:45:b4:d6:2f:70:9d:e6:24:f8:fb:f7:f7:06:fa:
d3:f0:04:41:8e:88:94:3a:cd:3e:f4:b9:09:3c:a4:e2:32:df:
dd:c6:e7:9e:23:15:f8:26:ed:15:ee:b0:37:7a:78:70:6a:9c:
b0:c9:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org