Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sfurRMIHligPYSMCEkOkSJrUApI.roa
File: sfurRMIHligPYSMCEkOkSJrUApI.roa (raw, json)
Hash identifier: fKb3SJ7D0r8vkIA6tiWdjHK2j0nAqZnC7xyrN9hmUUU=
Subject key identifier: B1:FB:AB:44:C2:07:96:28:0F:61:23:02:12:43:A4:48:9A:D4:02:92
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4977515AE3DB2893C84C4946CF17
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sfurRMIHligPYSMCEkOkSJrUApI.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208087
IP address blocks: 146.120.196.0/23 maxlen: 24
146.120.246.0/23 maxlen: 24
146.120.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:49:77:51:5a:e3:db:28:93:c8:4c:49:46:cf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1fbab44c20796280f6123021243a4489ad40292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:04:bf:8a:56:fa:21:6a:31:90:fa:29:12:
96:15:26:5c:90:0a:63:d9:ef:3b:9d:c3:45:57:70:
5f:85:fe:22:ae:5d:6c:c1:48:d6:9d:7a:6c:fb:91:
82:81:ae:41:de:fe:90:ab:dd:97:b7:92:b3:96:9e:
75:f1:47:04:3b:d3:7e:ea:68:b1:3c:ea:59:47:4c:
99:34:5b:0f:2f:5e:4c:72:29:11:f5:e5:86:3f:51:
4f:b3:4e:5b:8a:9f:9b:58:91:b8:4b:0a:b0:1d:d8:
24:3e:4c:85:52:7f:49:c2:6a:19:ad:13:51:9e:47:
0d:06:bf:5c:18:22:4d:4d:34:57:17:5b:ec:71:8e:
a1:e0:27:ba:08:9f:7c:ae:6a:9f:bf:0c:5b:c6:fb:
a2:f2:9f:6b:ea:40:15:aa:85:b7:da:34:d0:e0:7b:
16:7b:7b:00:a5:6b:40:2e:41:cc:69:22:d2:56:5a:
92:77:36:da:6f:3c:49:d1:f8:7b:eb:db:31:f0:30:
f9:4d:7b:57:83:9e:1b:ee:dc:ae:be:6d:aa:a6:8c:
09:ee:b8:50:bd:ea:e9:cd:6d:12:2c:8f:ad:7b:b4:
b6:f3:4c:4d:55:08:d7:d2:18:4c:ac:9a:08:a7:1b:
d4:c2:33:20:4d:59:87:1d:74:12:2d:a4:8b:e1:a4:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:AB:44:C2:07:96:28:0F:61:23:02:12:43:A4:48:9A:D4:02:92
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sfurRMIHligPYSMCEkOkSJrUApI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.158.0/23
146.120.196.0/23
146.120.246.0/23
Signature Algorithm: sha256WithRSAEncryption
60:19:10:f9:b0:77:3a:53:4a:6f:94:fc:f6:03:86:78:cc:88:
75:ec:52:6d:a1:02:cc:6c:b5:db:96:b5:ca:ba:92:8a:48:f3:
91:bc:d9:a0:8d:4d:72:98:3c:96:1e:89:8e:d9:22:c2:68:11:
11:5e:4f:3f:f6:20:71:de:4b:af:ab:b9:92:05:35:9d:d6:14:
62:2d:e2:72:61:af:f6:c2:da:3f:d1:9a:15:90:42:89:7f:09:
60:38:4f:56:48:91:0b:44:d5:35:fc:00:73:ce:06:44:29:88:
8c:64:d1:f1:68:b2:f6:c4:c6:59:33:bc:73:b0:57:3e:eb:91:
ac:03:4e:50:82:72:fe:e0:58:ce:93:fc:11:bc:d5:ad:5b:ea:
23:a8:a6:6c:5c:93:a8:69:04:a1:ad:ed:c4:b6:83:26:43:8c:
c3:8d:f0:29:9a:be:ba:3e:48:43:4a:df:15:94:1c:b2:10:e2:
84:a1:15:44:a5:26:3e:5f:2e:9c:f5:e7:dd:0a:da:a6:48:be:
63:59:c9:48:ad:e9:b8:00:a1:ac:62:e4:a5:e4:ee:d3:35:4c:
9b:7c:04:34:e7:23:4f:18:c3:8e:fc:79:50:d9:35:3f:c1:73:
fa:e4:50:5d:5f:34:fa:f7:a0:3c:c4:6f:ca:df:91:91:4a:1f:
c5:c5:e2:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKKkl3UVrj2yiTyExJRs8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWZiYWI0NGMyMDc5NjI4MGY2MTIzMDIxMjQzYTQ0ODlhZDQwMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTwEv4pW+iFqMZD6KRKWFSZckApj
2e87ncNFV3Bfhf4irl1swUjWnXps+5GCga5B3v6Qq92Xt5Kzlp518UcEO9N+6mix
POpZR0yZNFsPL15McikR9eWGP1FPs05bip+bWJG4SwqwHdgkPkyFUn9JwmoZrRNR
nkcNBr9cGCJNTTRXF1vscY6h4Ce6CJ98rmqfvwxbxvui8p9r6kAVqoW32jTQ4HsW
e3sApWtALkHMaSLSVlqSdzbabzxJ0fh769sx8DD5TXtXg54b7tyuvm2qpowJ7rhQ
verpzW0SLI+te7S280xNVQjX0hhMrJoIpxvUwjMgTVmHHXQSLaSL4aSFswIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLH7q0TCB5YoD2EjAhJDpEia1AKSMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvc2Z1clJNSUhsaWdQWVNNQ0VrT2tTSnJVQXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBknieAwQB
knjEAwQBknj2MA0GCSqGSIb3DQEBCwUAA4IBAQBgGRD5sHc6U0pvlPz2A4Z4zIh1
7FJtoQLMbLXblrXKupKKSPORvNmgjU1ymDyWHomO2SLCaBERXk8/9iBx3kuvq7mS
BTWd1hRiLeJyYa/2wto/0ZoVkEKJfwlgOE9WSJELRNU1/ABzzgZEKYiMZNHxaLL2
xMZZM7xzsFc+65GsA05QgnL+4FjOk/wRvNWtW+ojqKZsXJOoaQShre3EtoMmQ4zD
jfApmr66PkhDSt8VlByyEOKEoRVEpSY+Xy6c9efdCtqmSL5jWclIrem4AKGsYuSl
5O7TNUybfAQ05yNPGMOO/HlQ2TU/wXP65FBdXzT696A8xG/K35GRSh/FxeJO
-----END CERTIFICATE-----
Generated at Mon Jun 10 22:17:02 2024 by rpki-client on console-fra.rpki-client.org