Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x9cs9UkMrwBpfe1EbQv_IMpQZt8.roa
File: x9cs9UkMrwBpfe1EbQv_IMpQZt8.roa (raw, json)
Hash identifier: Kd+37qTn6vX1msd4dvcsFCDl6x1FIqPu6VCGeKI651M=
Subject key identifier: C7:D7:2C:F5:49:0C:AF:00:69:7D:ED:44:6D:0B:FF:20:CA:50:66:DF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0193215AABA62EC3E8D7FFD7D8C0BDE9A9C1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x9cs9UkMrwBpfe1EbQv_IMpQZt8.roa
Signing time: Tue 12 Nov 2024 17:10:10 +0000
ROA not before: Tue 12 Nov 2024 17:10:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20536
IP address blocks: 146.158.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:5a:ab:a6:2e:c3:e8:d7:ff:d7:d8:c0:bd:e9:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 12 17:10:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7d72cf5490caf00697ded446d0bff20ca5066df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:0f:64:b1:0e:e0:ec:3a:05:e7:3f:92:46:
ee:96:b9:d3:e3:d9:d4:e3:52:f0:65:5a:d7:04:df:
d2:43:7b:63:40:d1:e9:2f:5c:f4:f2:6a:87:44:3b:
9a:b0:35:58:0c:c2:5e:89:ab:73:5e:4c:ec:c4:95:
e1:80:b4:1c:da:ac:de:00:c0:a2:41:a7:bd:85:d9:
e3:c2:eb:2f:fe:c6:e2:80:bb:87:b5:7f:60:b2:c3:
22:d9:86:53:32:7f:00:22:8d:fd:c1:5e:99:a1:f8:
2a:96:ec:8f:91:25:f8:ce:75:cf:c5:d7:5b:e8:fd:
51:5c:f5:e3:24:13:ed:d8:89:38:f6:25:20:9c:93:
c7:dd:ce:94:3f:07:5e:0d:fb:ae:d9:88:6d:43:0b:
85:88:35:87:e3:59:7a:89:31:9e:02:b1:c7:48:8b:
be:6e:c2:06:2f:f2:b8:5a:8d:cd:66:d0:69:22:d4:
9e:67:d5:ee:e9:8d:3e:fb:4a:07:40:e3:2a:ef:e2:
a3:51:b8:99:18:1d:0b:b4:5b:22:f3:36:0a:41:97:
1c:ad:bd:a9:0f:4a:7d:21:d3:9e:92:35:f7:13:57:
70:42:00:c8:8c:29:85:de:d8:92:f5:15:b7:d3:73:
d2:fd:5d:19:11:ec:30:f7:d1:d9:5e:af:bd:d1:08:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D7:2C:F5:49:0C:AF:00:69:7D:ED:44:6D:0B:FF:20:CA:50:66:DF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x9cs9UkMrwBpfe1EbQv_IMpQZt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
08:09:6c:e5:69:78:fa:e2:5c:69:f8:46:e1:64:ca:51:fb:af:
17:a2:e5:65:eb:d1:56:0b:1b:b3:21:bf:85:0c:52:0a:d7:63:
63:eb:49:f3:5d:eb:68:f0:3f:7b:92:d6:bc:4c:8e:d4:c7:a3:
ec:fb:9f:21:e6:d6:46:67:37:2b:6e:8b:ae:54:0c:65:d7:49:
e0:fe:c3:12:4c:1e:9e:d3:3d:72:e2:de:e9:17:bb:b7:40:70:
88:03:2b:70:58:aa:e9:92:ed:61:b8:a7:19:fe:68:93:9b:fa:
a0:89:74:c8:b4:9b:f0:5a:9b:d9:b8:5b:a7:c0:35:7c:b2:5d:
09:89:94:a1:35:a0:b5:0f:45:f6:77:71:22:22:d1:a9:a4:6c:
1d:86:28:15:82:9b:e7:a4:f7:c6:9b:1b:b8:7d:73:85:f1:b1:
13:e8:e0:18:49:0a:3d:4e:3f:5f:ea:3a:aa:0f:86:75:d4:8c:
a8:e5:bb:70:c6:4f:5c:6d:8e:48:2f:68:b9:c7:f4:bd:3a:b7:
2d:da:aa:cd:9c:14:75:5f:a8:da:db:a8:71:51:fb:46:d7:11:
53:a9:ac:aa:64:9a:c1:7c:f5:b6:84:26:0f:7e:1b:a2:e0:d7:
f1:1e:91:cf:fa:b1:5b:dd:11:80:a4:2e:40:fe:2c:3b:c9:ec:
9d:96:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:04 2024 by rpki-client on console-ams.rpki-client.org