Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/goAvaH0kekQfSfmtMDdn5H-X_a4.roa
File: goAvaH0kekQfSfmtMDdn5H-X_a4.roa (raw, json)
Hash identifier: X3/kTRZ2mybYx4FuMotzJQVhmyJkILiLBWgS2zj6K14=
Subject key identifier: 82:80:2F:68:7D:24:7A:44:1F:49:F9:AD:30:37:67:E4:7F:97:FD:AE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E67BEDCFBE089C4437E8812874D2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/goAvaH0kekQfSfmtMDdn5H-X_a4.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39523
IP address blocks: 146.120.216.0/22 maxlen: 24
146.120.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e6:7b:ed:cf:be:08:9c:44:37:e8:81:28:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82802f687d247a441f49f9ad303767e47f97fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:e9:f9:e8:66:8e:62:30:07:1e:2f:b3:ef:
03:67:c9:59:7a:5b:59:9d:7a:0f:68:b1:26:5a:fb:
0e:b0:36:f1:ba:3c:7f:bd:26:17:1d:20:74:c7:37:
ff:32:0f:64:38:7d:eb:73:ff:c0:0e:01:59:81:54:
2a:a0:f3:1b:59:95:ac:ea:65:c4:71:e2:33:20:12:
32:6f:19:f3:b7:69:b4:ca:f4:fe:a3:7c:9d:5a:3e:
8c:51:1f:e0:35:95:32:40:89:8c:60:ad:63:19:bb:
f6:eb:1e:74:34:d5:01:6c:67:ab:69:8c:53:a9:27:
f8:31:08:fc:c1:c0:e1:96:9c:cc:4b:28:45:fe:4e:
73:c6:b5:68:d2:83:06:5e:94:d3:04:53:c8:9d:75:
43:5d:3b:50:be:08:c7:01:fa:02:58:34:03:0d:cf:
07:91:f4:ff:38:96:e8:8a:3b:ce:81:82:3d:5b:58:
a7:c7:6c:b2:18:79:4a:b2:32:b4:eb:c7:c9:6c:5e:
57:4e:19:4a:87:a9:58:eb:a6:20:79:36:29:9f:c9:
f3:28:6e:c5:41:cf:cb:4a:ae:2c:38:49:1b:84:6d:
4a:97:6d:ba:b4:d9:77:a6:8a:70:59:73:22:4d:b4:
91:2a:b6:f0:6e:d5:09:0f:6c:c1:ea:0a:80:be:98:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:80:2F:68:7D:24:7A:44:1F:49:F9:AD:30:37:67:E4:7F:97:FD:AE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/goAvaH0kekQfSfmtMDdn5H-X_a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.215.0-146.120.219.255
Signature Algorithm: sha256WithRSAEncryption
92:34:1d:e8:f2:9b:14:10:05:9b:cf:c4:95:89:d0:51:76:48:
9a:a3:41:7d:6a:6d:27:e9:43:b3:3b:cc:20:26:50:43:01:ef:
8c:e1:e0:40:e1:70:ea:e1:df:32:04:75:e6:a4:3f:64:d5:e6:
08:68:2f:a6:30:31:d0:87:3b:a7:9b:22:e5:25:51:1b:a2:4e:
71:b8:20:27:1e:4f:cd:44:8e:81:0d:bb:47:8f:58:cc:1b:d3:
81:e2:1f:a8:6b:29:17:4e:59:d7:bf:b8:84:23:f9:c1:3d:30:
e3:4c:1d:f4:eb:5d:f7:1d:63:28:be:f6:89:cd:d0:28:10:00:
24:ce:05:d5:2c:0c:4d:1d:21:85:e0:ed:1e:59:77:e1:04:33:
df:3c:30:29:72:fa:ac:9f:7e:37:83:ce:20:bf:8f:67:c6:cc:
0a:7b:72:69:fa:b9:fb:09:35:ec:2e:2b:d6:f3:18:4e:b1:d3:
2c:51:ca:3c:6d:fb:f0:cc:77:20:eb:40:e3:05:81:2b:41:6f:
23:da:8c:91:54:7f:82:fb:89:09:74:9a:3e:6a:1a:76:d0:25:
22:66:b9:d4:98:5a:94:2b:8a:64:f5:e3:b0:ab:09:81:98:12:
6d:5c:5b:1f:09:f1:55:47:9f:73:67:30:3b:a3:22:34:e9:ed:
f8:8f:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org