Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oeyhCZVe7mCxMfhwEUV4QDzACoQ.roa
File: oeyhCZVe7mCxMfhwEUV4QDzACoQ.roa (raw, json)
Hash identifier: l2P1GW303W04jxnUQ0yvSkpA07r6us4FV2R/UExAgB4=
Subject key identifier: A1:EC:A1:09:95:5E:EE:60:B1:31:F8:70:11:45:78:40:3C:C0:0A:84
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F9EA5B61FC23ABBABA6313A0C105
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oeyhCZVe7mCxMfhwEUV4QDzACoQ.roa
Signing time: Tue 02 Jan 2024 12:33:17 +0000
ROA not before: Tue 02 Jan 2024 12:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44927
IP address blocks: 146.120.89.0/24 maxlen: 24
146.120.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f9:ea:5b:61:fc:23:ab:ba:ba:63:13:a0:c1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1eca109955eee60b131f870114578403cc00a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8e:30:82:ba:9d:bf:52:3e:2e:ab:e7:3c:03:
da:8a:29:0c:08:6d:0d:0a:97:9c:00:21:2b:8d:28:
d5:fb:29:32:75:38:55:b1:0c:30:45:eb:ed:0c:04:
d4:53:f7:79:53:7c:7f:da:1d:fa:1c:ed:e2:4c:e6:
a2:4c:76:2c:97:28:f4:84:49:ba:cd:0a:86:3e:ef:
db:73:87:e1:db:50:46:fc:b6:d9:9b:47:9b:27:9b:
3d:15:1e:4a:30:98:f5:65:7d:73:9d:39:42:36:b3:
eb:d6:38:3d:19:16:a8:0a:0c:13:60:73:90:c8:f2:
c5:76:2b:32:43:2d:89:96:f3:d3:0b:5a:fb:40:1a:
fb:fd:3f:e5:b4:d4:86:4a:a5:c3:22:31:88:0a:be:
82:99:74:0d:1a:01:b6:70:74:06:9b:4e:78:20:fd:
4d:75:29:35:e4:06:2f:84:dd:4c:79:c4:ce:f8:c0:
b8:9c:4e:bc:09:b8:6e:e9:50:99:1d:d5:c4:e3:bc:
b3:2d:87:0e:00:7e:30:6d:e3:8a:b0:da:8a:f2:05:
16:f3:50:53:3d:ab:60:ef:bb:96:e8:2e:fd:01:e3:
cb:39:77:f3:8d:cf:be:e0:b4:e3:68:8f:78:16:f7:
aa:60:19:bd:d9:bf:93:7c:84:74:16:ca:4d:32:f7:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:A1:09:95:5E:EE:60:B1:31:F8:70:11:45:78:40:3C:C0:0A:84
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oeyhCZVe7mCxMfhwEUV4QDzACoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.89.0/24
146.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
af:98:40:ab:49:68:3a:01:aa:db:42:cf:b1:95:2c:9a:ea:ea:
55:30:7c:19:df:39:f5:04:0a:f1:7c:7d:4e:6f:6d:9a:b8:0c:
25:8c:34:75:c7:35:69:75:5e:64:0d:77:66:c1:fe:8b:4a:f5:
fc:9e:79:87:85:92:e1:20:de:c9:1d:cd:10:32:f8:60:c4:44:
ae:7a:42:e6:a1:dd:53:52:a0:28:6d:cf:af:3c:c6:f8:2d:38:
ef:5a:64:3a:a1:78:eb:20:7d:9a:e3:44:e0:3a:5a:db:dc:bd:
9c:a7:30:0d:6c:5b:83:0b:2f:81:67:d5:eb:8c:09:2a:58:69:
55:45:2a:bb:8f:a1:87:f1:c5:ab:b1:63:e5:b7:f9:17:0a:13:
38:f9:7e:6a:8b:5a:fa:9d:43:94:7b:54:6e:83:6e:64:a0:70:
8b:61:7f:ab:db:00:a5:f6:5e:9a:b4:9d:44:5a:81:f3:36:33:
33:f6:6c:cb:c0:b4:a9:7e:6c:e9:e7:f5:ca:b8:29:b4:d2:48:
86:91:c2:29:58:dc:7e:0f:5e:47:23:49:bb:9a:f3:9a:fc:e8:
be:53:40:1b:ef:67:09:54:e4:ac:13:57:6e:88:45:12:85:16:
1d:42:38:ee:c8:81:5b:2d:28:6a:39:6d:9e:25:e7:f7:74:41:
b1:b6:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:16:04 2024 by rpki-client on console-ams.rpki-client.org