Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uD2CowvMqQG27OZU0y0NffBrU3M.roa
File: uD2CowvMqQG27OZU0y0NffBrU3M.roa (raw, json)
Hash identifier: Ao/zkW8je0WwkDBjE+fkmZUinAKgATst9sGGMcaJRx4=
Subject key identifier: B8:3D:82:A3:0B:CC:A9:01:B6:EC:E6:54:D3:2D:0D:7D:F0:6B:53:73
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3FF778E87D762E0351E871AD7BAD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uD2CowvMqQG27OZU0y0NffBrU3M.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204514
IP address blocks: 146.158.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3f:f7:78:e8:7d:76:2e:03:51:e8:71:ad:7b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b83d82a30bcca901b6ece654d32d0d7df06b5373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:19:c4:fe:f8:b1:df:f4:55:27:92:da:e3:a3:
55:f0:8f:fe:4f:a5:fc:6d:d3:a3:4a:aa:90:0e:39:
d9:13:53:56:0b:39:1b:99:de:55:4c:b1:58:01:8a:
99:73:75:c5:7f:a2:41:1e:e3:6f:f4:18:bf:69:a6:
79:54:28:49:53:3a:93:6a:f9:68:54:72:a4:3c:a3:
3e:72:7e:77:bb:cd:42:43:e6:1b:62:ff:0e:65:a3:
9b:1e:42:c1:c9:5d:5b:aa:77:98:50:4c:af:66:cf:
c0:38:e5:15:ee:f8:1f:18:05:85:5b:55:6a:b2:a5:
eb:25:7d:45:23:e5:d1:23:7c:2e:97:49:e0:6d:7f:
98:c3:50:48:8f:8f:3b:cb:29:e5:cc:5e:61:86:1c:
86:e3:44:40:ef:f9:3d:9c:f9:0b:3e:5f:24:ae:2c:
d5:86:d1:d2:d9:a9:d9:85:2c:13:a6:28:be:ef:74:
74:4a:01:bb:93:de:5b:0f:7a:d9:b2:4a:c4:cf:7a:
d3:72:a9:cc:7e:f7:8f:4a:2d:a7:e8:d2:ee:3c:7d:
6b:99:b0:72:3e:df:21:18:df:26:98:24:19:80:ce:
0f:2d:f5:ad:1b:e3:58:a9:86:4f:53:2f:7c:b7:02:
8c:18:28:35:f2:97:a6:e3:59:b8:d6:1e:c6:d4:0b:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3D:82:A3:0B:CC:A9:01:B6:EC:E6:54:D3:2D:0D:7D:F0:6B:53:73
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uD2CowvMqQG27OZU0y0NffBrU3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.79.0/24
Signature Algorithm: sha256WithRSAEncryption
17:09:33:b3:fc:78:cb:73:e5:ac:70:37:ce:9f:35:e4:be:56:
db:d0:43:da:92:52:98:7f:14:f9:81:43:c3:42:cf:47:8d:13:
cd:f7:e8:83:60:1f:2e:c4:36:b8:a5:e7:ca:ca:bc:50:94:9d:
aa:71:bd:ea:8e:8c:5c:7a:38:d0:d7:05:6a:f9:00:63:b8:0c:
68:e1:8b:17:46:26:73:84:38:f1:36:c9:33:ea:d6:00:dd:13:
96:5e:e8:55:a8:da:16:84:55:98:59:83:07:f5:50:25:76:79:
53:57:b3:ee:eb:c4:d4:0c:66:96:b4:41:67:22:5b:eb:c1:d1:
a0:e9:c4:25:d0:51:ae:06:58:d8:6c:68:66:0b:ee:28:94:af:
05:e6:81:b6:90:96:ff:85:6e:eb:5a:57:65:c1:fc:e0:f3:12:
a5:07:c2:bd:b6:61:25:ef:61:fb:9c:e6:1b:67:7f:60:52:0b:
28:79:d7:c6:6e:1b:9f:a4:12:f4:59:4b:5a:a3:32:2a:0f:a1:
fc:bf:ae:a0:24:58:f3:aa:82:02:05:54:91:cd:b2:c9:63:ce:
85:5f:01:37:57:43:f6:d3:7d:e6:8f:2f:6b:31:de:4d:27:a5:
bd:a3:e5:7e:8b:27:b0:e6:13:28:d2:1c:06:b9:5c:49:90:eb:
a4:ad:86:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKj/3eOh9di4DUehxrXutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODNkODJhMzBiY2NhOTAxYjZlY2U2NTRkMzJkMGQ3ZGYwNmI1MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hnE/vix3/RVJ5La46NV8I/+T6X8
bdOjSqqQDjnZE1NWCzkbmd5VTLFYAYqZc3XFf6JBHuNv9Bi/aaZ5VChJUzqTavlo
VHKkPKM+cn53u81CQ+YbYv8OZaObHkLByV1bqneYUEyvZs/AOOUV7vgfGAWFW1Vq
sqXrJX1FI+XRI3wul0ngbX+Yw1BIj487yynlzF5hhhyG40RA7/k9nPkLPl8krizV
htHS2anZhSwTpii+73R0SgG7k95bD3rZskrEz3rTcqnMfvePSi2n6NLuPH1rmbBy
Pt8hGN8mmCQZgM4PLfWtG+NYqYZPUy98twKMGCg18pem41m41h7G1AvNgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLg9gqMLzKkBtuzmVNMtDX3wa1NzMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdUQyQ293dk1xUUcyN09aVTB5ME5mZkJyVTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkp5PMA0G
CSqGSIb3DQEBCwUAA4IBAQAXCTOz/HjLc+WscDfOnzXkvlbb0EPaklKYfxT5gUPD
Qs9HjRPN9+iDYB8uxDa4pefKyrxQlJ2qcb3qjoxcejjQ1wVq+QBjuAxo4YsXRiZz
hDjxNskz6tYA3ROWXuhVqNoWhFWYWYMH9VAldnlTV7Pu68TUDGaWtEFnIlvrwdGg
6cQl0FGuBljYbGhmC+4olK8F5oG2kJb/hW7rWldlwfzg8xKlB8K9tmEl72H7nOYb
Z39gUgsoedfGbhufpBL0WUtaozIqD6H8v66gJFjzqoICBVSRzbLJY86FXwE3V0P2
033mjy9rMd5NJ6W9o+V+iyew5hMo0hwGuVxJkOukrYZ0
-----END CERTIFICATE-----
Generated at Tue Jun 11 12:07:03 2024 by rpki-client on console-fra.rpki-client.org