Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/meREaNe4Ncn9iGyolNDWMV6FDKw.roa
File: meREaNe4Ncn9iGyolNDWMV6FDKw.roa (raw, json)
Hash identifier: RwmJRQhsIxDANwjRvrzv4o6DdG+C2yhddRSTj5rV00Q=
Subject key identifier: 99:E4:44:68:D7:B8:35:C9:FD:88:6C:A8:94:D0:D6:31:5E:85:0C:AC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29ED815F12C490546014190C23120F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/meREaNe4Ncn9iGyolNDWMV6FDKw.roa
Signing time: Tue 02 Jan 2024 12:33:14 +0000
ROA not before: Tue 02 Jan 2024 12:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42209
IP address blocks: 146.120.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ed:81:5f:12:c4:90:54:60:14:19:0c:23:12:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e44468d7b835c9fd886ca894d0d6315e850cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:40:ad:2f:1d:c0:59:0c:95:40:a2:a6:e6:
ba:c7:42:c9:52:62:a2:8a:39:d4:4b:ae:42:54:5c:
09:35:54:6b:b1:e0:e9:ae:65:32:d6:ef:98:5c:b5:
a4:6e:78:e3:12:9c:8a:82:df:e9:c3:aa:c7:73:a8:
a8:2a:8e:46:a2:a5:4a:a3:93:40:b9:64:64:5c:46:
e6:21:f0:8a:dc:ab:4a:d6:86:85:0c:52:25:17:b9:
a1:21:2b:2c:cc:fb:f0:d8:e7:90:a3:67:f0:54:7f:
0f:bd:74:2a:25:9a:b9:a4:79:37:bc:aa:51:2d:59:
ea:80:11:6e:d2:fb:23:8c:da:ad:a4:0e:fa:c1:df:
0a:bf:20:21:ca:be:42:78:8e:fb:3a:13:8d:45:9a:
dc:d4:5c:d0:e8:b0:b1:35:56:0a:9b:ba:33:b1:c1:
78:4c:03:a3:44:41:73:0f:59:2c:d5:bc:cd:18:ec:
8d:1f:7f:f6:be:b0:4f:2e:cd:e6:00:35:0c:e3:74:
95:b5:e1:d3:87:60:4e:24:e6:84:8c:8a:44:b0:01:
1b:71:c2:32:47:af:8c:3f:5c:0f:f0:d7:2c:be:96:
00:64:19:b9:13:09:f5:9d:dc:ca:dd:93:a2:0b:bb:
44:1d:a2:d4:7c:e2:dc:2a:13:38:42:d5:11:bf:7d:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:44:68:D7:B8:35:C9:FD:88:6C:A8:94:D0:D6:31:5E:85:0C:AC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/meREaNe4Ncn9iGyolNDWMV6FDKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.214.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1a:31:7a:3d:65:3d:28:3d:b8:75:e6:62:f5:da:06:33:82:
7f:5e:92:55:eb:a1:7a:86:43:d2:08:0d:37:ff:5a:19:93:cc:
73:17:bb:b8:c8:36:cc:2b:fc:aa:d2:f7:c0:37:43:21:15:91:
45:3d:c7:e2:06:26:b1:f0:8b:20:9a:d5:dc:ec:7c:76:82:dd:
aa:20:25:fc:e4:1c:d1:c5:72:be:99:ac:71:95:cd:92:4c:80:
5d:5b:c7:d1:9f:6a:5a:58:46:f7:7f:f9:91:a3:50:1f:98:33:
52:8b:40:9d:5f:e5:91:b7:c2:fa:6a:d0:25:b9:d7:1f:2d:dd:
a5:f9:59:54:de:8f:29:5d:9b:18:27:1b:31:ec:0e:72:cc:66:
d7:96:6e:57:34:b0:66:9a:dc:9b:96:7f:46:0f:da:cd:03:4b:
a1:a8:e4:ab:b8:2b:ea:9b:d2:84:15:67:ed:c9:5b:78:37:1f:
b3:fc:0d:27:5d:e3:15:13:d6:df:1c:27:96:98:c7:27:21:cd:
44:b0:23:89:03:ed:c0:98:31:10:68:0e:6e:7c:85:68:b1:54:
4c:13:02:aa:c0:53:a8:a0:e2:cd:4b:fc:2b:c9:65:03:fc:16:
33:5a:d3:f0:24:62:7f:b9:b7:86:ab:fd:f4:0c:b8:39:1f:0f:
c7:25:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:58:25 2024 by rpki-client on console-fra.rpki-client.org