Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w37oGtZ-n4diI6szg_ZtYTlb6lA.roa
File: w37oGtZ-n4diI6szg_ZtYTlb6lA.roa (raw, json)
Hash identifier: fPiElXXDXw5uK0EgD1fdGzdFFM5sOMA/o+2PRdy7JjU=
Subject key identifier: C3:7E:E8:1A:D6:7E:9F:87:62:23:AB:33:83:F6:6D:61:39:5B:EA:50
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3EABDB053D825B571787E594D378
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w37oGtZ-n4diI6szg_ZtYTlb6lA.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204323
IP address blocks: 146.158.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3e:ab:db:05:3d:82:5b:57:17:87:e5:94:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c37ee81ad67e9f876223ab3383f66d61395bea50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:5d:80:3b:72:3d:8c:df:06:01:91:f8:df:
0e:a3:21:12:e2:61:13:6f:f2:27:02:90:47:4d:d5:
3b:c5:40:a0:10:f9:a7:0b:00:fa:a7:88:3f:06:78:
3a:bf:db:d6:c8:95:e8:dd:a0:e0:84:69:22:bd:6c:
01:b1:a9:f6:bb:9e:4f:6c:d9:61:19:52:2f:d8:6a:
f3:41:29:1c:21:15:ab:df:cb:34:77:37:30:49:8b:
f2:17:37:4c:8d:c7:fa:1d:ba:0d:b6:f6:b2:ec:1c:
68:be:d5:15:ef:42:71:4b:17:46:86:41:99:b8:da:
e3:7b:a0:3b:87:72:9c:36:3f:5b:a8:bc:9c:68:9a:
bf:7c:54:9a:b9:fc:e5:f5:6b:e0:94:35:ea:d5:06:
c3:13:9f:7e:a3:7b:af:33:bc:57:29:05:ee:43:d6:
55:1c:be:18:ba:fa:bc:e0:c6:5a:07:6a:4f:aa:94:
99:93:51:08:10:93:92:c8:4c:e3:72:eb:7d:10:75:
7d:73:61:2c:b2:d3:04:b1:2c:ba:bb:61:5b:ea:72:
de:c2:32:da:59:5c:65:a1:a2:2f:36:f9:da:4a:d9:
60:14:18:b4:1e:20:58:12:3c:96:e5:26:54:87:20:
2c:a2:4a:da:bb:aa:fe:45:29:cf:79:ca:e8:4d:de:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:E8:1A:D6:7E:9F:87:62:23:AB:33:83:F6:6D:61:39:5B:EA:50
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w37oGtZ-n4diI6szg_ZtYTlb6lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.14.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bb:7f:e0:19:89:9f:ed:b1:39:17:f2:fb:95:74:c0:2b:ca:
21:ed:6b:9a:35:c9:3f:96:2a:26:43:ab:f8:f2:e6:dd:a3:df:
c4:28:41:b6:e5:9d:0f:64:ce:fa:f2:63:3b:ef:7a:45:91:a3:
e6:88:dc:91:75:07:52:11:bd:5a:fb:42:a6:46:47:80:72:b6:
55:dd:57:ff:48:02:aa:c4:24:e5:1b:ef:8d:9c:8f:9c:37:0f:
a5:e7:8b:d8:79:5d:38:6e:f2:6b:31:bb:9e:43:f6:f7:63:c2:
2f:08:e9:01:40:ae:54:8b:df:58:ad:a9:dd:e5:ee:be:ff:5c:
a9:ef:d6:99:27:fa:51:4f:26:ee:1a:66:9a:f1:91:b0:4f:ea:
83:c2:89:3c:43:44:0c:bb:44:0a:c6:7d:c0:49:eb:28:52:a9:
e8:cf:7b:70:8b:d0:c0:42:e0:1c:b6:c7:06:08:9e:8f:b6:6d:
56:ac:54:7a:4a:21:29:7a:f9:fe:5f:f4:e4:23:a9:67:a3:09:
f3:48:18:aa:7c:6f:af:7e:6a:8c:15:1d:91:e8:fc:b5:b8:99:
aa:82:c2:ce:e8:c3:c3:10:1a:95:2e:d4:bb:35:00:b9:84:85:
bb:ea:8b:5d:4c:d4:b2:7a:bd:d3:b0:26:db:99:ef:d6:03:22:
68:f3:bd:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKj6r2wU9gltXF4fllNN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzdlZTgxYWQ2N2U5Zjg3NjIyM2FiMzM4M2Y2NmQ2MTM5NWJlYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA1dgDtyPYzfBgGR+N8OoyES4mET
b/InApBHTdU7xUCgEPmnCwD6p4g/Bng6v9vWyJXo3aDghGkivWwBsan2u55PbNlh
GVIv2GrzQSkcIRWr38s0dzcwSYvyFzdMjcf6HboNtvay7BxovtUV70JxSxdGhkGZ
uNrje6A7h3KcNj9bqLycaJq/fFSaufzl9WvglDXq1QbDE59+o3uvM7xXKQXuQ9ZV
HL4Yuvq84MZaB2pPqpSZk1EIEJOSyEzjcut9EHV9c2EsstMEsSy6u2Fb6nLewjLa
WVxloaIvNvnaStlgFBi0HiBYEjyW5SZUhyAsokrau6r+RSnPecroTd4mnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMN+6BrWfp+HYiOrM4P2bWE5W+pQMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdzM3b0d0Wi1uNGRpSTZzemdfWnRZVGxiNmxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkp4OMA0G
CSqGSIb3DQEBCwUAA4IBAQCBu3/gGYmf7bE5F/L7lXTAK8oh7WuaNck/liomQ6v4
8ubdo9/EKEG25Z0PZM768mM773pFkaPmiNyRdQdSEb1a+0KmRkeAcrZV3Vf/SAKq
xCTlG++NnI+cNw+l54vYeV04bvJrMbueQ/b3Y8IvCOkBQK5Ui99Yrand5e6+/1yp
79aZJ/pRTybuGmaa8ZGwT+qDwok8Q0QMu0QKxn3ASesoUqnoz3twi9DAQuActscG
CJ6Ptm1WrFR6SiEpevn+X/TkI6lnownzSBiqfG+vfmqMFR2R6Py1uJmqgsLO6MPD
EBqVLtS7NQC5hIW76otdTNSyer3TsCbbme/WAyJo8705
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org