Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lBFNgU8SC0aAGwA23dwXp7bQZvE.roa
File: lBFNgU8SC0aAGwA23dwXp7bQZvE.roa (raw, json)
Hash identifier: HopMJzkYDm+GPr7UNAZfTHLrs/7MbpaDLZjH8OBzIHg=
Subject key identifier: 94:11:4D:81:4F:12:0B:46:80:1B:00:36:DD:DC:17:A7:B6:D0:66:F1
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0192348D9DDB90614A195E17021DEB867F21
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lBFNgU8SC0aAGwA23dwXp7bQZvE.roa
Signing time: Fri 27 Sep 2024 17:35:49 +0000
ROA not before: Fri 27 Sep 2024 17:35:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214115
IP address blocks: 146.120.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:8d:9d:db:90:61:4a:19:5e:17:02:1d:eb:86:7f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 27 17:35:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94114d814f120b46801b0036dddc17a7b6d066f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:81:04:78:e1:f3:1d:f1:b9:6f:1b:af:4a:
8b:4c:68:b7:ea:a0:12:e1:47:12:16:ee:29:aa:b2:
05:a0:35:61:1d:94:ed:12:35:89:6d:aa:2a:30:38:
60:cc:4a:ef:19:7b:b6:ac:bf:6c:71:f0:32:27:ba:
f7:9f:0a:8c:cc:9c:70:b9:78:1e:c0:07:42:ff:2a:
fe:2b:3a:3e:fd:14:d5:d4:84:a3:4f:fe:ab:2d:ba:
2e:52:ed:3e:c2:7c:ca:4e:c6:a4:1f:dc:a1:81:94:
fe:f3:45:49:e8:a4:99:46:3f:5a:5c:36:2a:33:ae:
ab:ec:14:fd:be:6a:e3:b7:68:00:6f:5a:5c:fd:e3:
9b:29:6d:86:f7:81:e6:1a:83:ba:80:99:11:f1:18:
24:89:65:7c:3a:a7:08:02:23:d8:d3:b8:e3:a3:e0:
c3:14:ff:d7:84:29:c5:08:c9:57:0d:ad:5f:2d:ca:
b6:7a:96:a2:e7:d4:1b:ae:4d:4b:de:52:6f:5e:64:
24:a7:94:1d:3a:c5:4f:7f:75:25:31:e1:5a:0b:6a:
8c:7f:23:2c:ae:b0:c4:99:8c:f8:bf:ef:dd:46:68:
1a:09:09:7f:f7:4c:b2:b8:9d:d7:98:bf:d8:fb:91:
d3:43:22:c8:99:4b:de:51:65:2b:19:65:77:23:5e:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:11:4D:81:4F:12:0B:46:80:1B:00:36:DD:DC:17:A7:B6:D0:66:F1
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lBFNgU8SC0aAGwA23dwXp7bQZvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.88.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a7:6a:0c:52:34:57:fc:28:b4:39:d0:6f:70:7f:79:4a:91:
10:0d:3d:a6:50:5f:d3:33:46:08:3e:bf:13:38:09:a7:7e:b5:
17:35:40:d5:40:55:6f:6b:e8:2b:87:62:b2:d7:f2:5f:c7:7c:
45:bb:cd:a5:39:77:e3:00:10:06:26:08:41:f2:ec:73:a9:1e:
9c:7d:b6:e2:02:9b:01:d7:05:09:9e:aa:27:60:36:0e:20:b2:
07:92:33:94:e7:fe:c6:5a:0b:cf:88:9f:08:ae:04:9a:23:8c:
4a:2b:c5:8e:e4:3c:b2:6f:07:1d:bc:d8:44:2b:55:86:e1:ed:
6c:2e:3e:7a:4d:f3:64:1b:6f:34:77:72:e6:8c:26:fe:95:4b:
37:ee:89:84:3d:8f:4b:0f:2e:24:df:8f:c7:14:d2:55:bc:b0:
28:d2:18:27:d8:a5:80:77:24:3d:bc:af:cc:91:fe:cd:76:67:
69:39:ff:85:5f:e2:7c:e3:f6:ba:08:7b:f9:cd:13:25:9f:8b:
f4:60:33:40:39:a9:3a:a4:e8:7a:a8:d8:c0:80:f5:19:5f:03:
3e:8a:da:48:8c:79:a4:3e:ae:38:09:23:8d:c4:16:f6:64:91:
94:45:98:b9:b4:cd:3c:9d:70:e7:2a:a7:fc:71:e6:c4:c8:9c:
71:c2:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org