Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u6cLB0cmKbv9lB86dUWfWVw9yV4.roa
File: u6cLB0cmKbv9lB86dUWfWVw9yV4.roa (raw, json)
Hash identifier: FnNIoKrQVw4ocKPETn7BIMJST1+ux6YITFxhvAOHMc0=
Subject key identifier: BB:A7:0B:07:47:26:29:BB:FD:94:1F:3A:75:45:9F:59:5C:3D:C9:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018EED0279AD127300AE4C1C9DBF9EA39EBF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u6cLB0cmKbv9lB86dUWfWVw9yV4.roa
Signing time: Wed 17 Apr 2024 17:02:26 +0000
ROA not before: Wed 17 Apr 2024 17:02:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8641
IP address blocks: 146.158.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ed:02:79:ad:12:73:00:ae:4c:1c:9d:bf:9e:a3:9e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 17 17:02:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bba70b07472629bbfd941f3a75459f595c3dc95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:fe:63:66:6a:04:c8:95:19:f9:61:2e:db:
58:7c:09:50:23:89:9b:f5:43:dd:a1:2b:80:cd:92:
2b:98:e5:da:40:f7:d1:1c:98:ee:b6:84:a2:24:2d:
99:58:b9:8d:7c:1e:e7:33:2c:57:c7:e8:6e:4e:74:
16:37:b9:41:5b:1b:33:e1:87:d3:75:d2:2c:a1:50:
d0:b1:99:8d:83:ac:bf:3a:3d:36:a0:e7:93:4b:17:
f4:6a:83:98:b6:0d:33:ed:ba:29:cd:58:f2:a8:46:
a1:f8:2d:fc:4b:5a:22:e4:31:09:16:62:4f:a0:3e:
c3:9e:ff:4f:22:74:d2:29:c1:f2:cc:85:5a:b6:12:
ee:ab:ca:43:d5:05:78:2a:8c:10:a2:67:f2:62:b4:
8c:9d:72:09:62:3c:76:27:9c:41:2e:dd:28:b2:57:
8e:28:35:5b:81:e4:af:18:be:f6:80:7d:40:dd:36:
a2:47:b3:84:e9:75:9a:18:f6:d2:22:53:d0:93:3e:
85:08:11:a0:b2:d6:9d:03:f5:17:a3:81:03:a7:dd:
0e:f6:71:b9:ce:10:01:1f:5a:45:10:5b:30:4e:ef:
64:fc:1e:99:ca:86:92:6f:90:88:b9:49:09:ed:f3:
14:f3:a9:9a:37:28:f8:94:0f:70:81:32:e6:34:a6:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:0B:07:47:26:29:BB:FD:94:1F:3A:75:45:9F:59:5C:3D:C9:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u6cLB0cmKbv9lB86dUWfWVw9yV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.92.0/23
Signature Algorithm: sha256WithRSAEncryption
44:ad:24:e9:41:e5:5a:da:14:ce:a2:de:34:d2:3d:2e:f7:af:
98:ac:01:5b:bc:44:e1:b6:c5:5c:13:8a:54:ec:a4:06:f1:22:
2b:70:06:38:b7:ec:c8:c7:fc:bc:ed:56:ec:95:ac:61:17:1b:
1a:fc:7d:9d:09:13:3d:b5:14:61:6d:b0:fb:e7:f6:38:3e:22:
12:bf:23:7b:5e:e8:aa:9f:1b:fe:1a:a4:c7:a5:58:bc:9e:af:
77:35:6a:94:d0:52:85:91:42:61:37:42:b2:5c:25:9c:3c:a6:
8a:5c:9e:0c:a9:3a:62:04:bd:6d:6e:2d:75:b9:7c:04:5e:26:
ed:9f:29:e8:2a:4c:e5:53:39:42:07:90:f3:14:97:96:b9:0b:
83:97:aa:a0:ef:3b:7c:09:bb:c9:da:62:8b:b7:2d:e4:f5:4a:
3a:38:58:d8:12:11:c5:1e:f3:eb:3b:bc:ab:5a:8a:83:19:ec:
48:51:4c:6a:5d:a1:71:7c:3d:4c:4a:b5:9d:51:60:c4:43:93:
00:ac:eb:5f:43:ca:fb:f0:31:dd:d2:80:bd:15:a0:52:61:4f:
78:4d:db:ae:ce:b1:15:3a:4b:57:d0:c0:11:0e:0c:63:f1:35:
f8:06:ad:98:03:7d:72:3e:dd:ff:4b:be:54:58:16:4b:e8:99:
fd:60:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:24:09 2024 by rpki-client on console-ams.rpki-client.org