Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z3B_YwhK7UX8VwDfJx5WfySIRZU.roa
File: z3B_YwhK7UX8VwDfJx5WfySIRZU.roa (raw, json)
Hash identifier: uhIhaQ/k0fqXHLbVoMlxUGO5oV5/zM9tto4MEkTSgu0=
Subject key identifier: CF:70:7F:63:08:4A:ED:45:FC:57:00:DF:27:1E:56:7F:24:88:45:95
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E95C83784B8624FCC670E001ECAB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z3B_YwhK7UX8VwDfJx5WfySIRZU.roa
Signing time: Tue 02 Jan 2024 12:33:13 +0000
ROA not before: Tue 02 Jan 2024 12:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41129
IP address blocks: 146.120.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e9:5c:83:78:4b:86:24:fc:c6:70:e0:01:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf707f63084aed45fc5700df271e567f24884595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:30:3b:e7:e5:9e:45:bd:8a:37:45:dc:6f:
70:8b:df:96:72:b0:aa:92:a8:d8:d7:91:94:d3:bc:
63:9a:c6:af:00:e2:69:42:99:bb:9b:d4:d5:5d:4d:
3b:72:1c:28:4b:40:89:e8:e0:ee:81:e9:c0:15:f2:
f4:1c:61:2d:af:90:84:be:1d:cb:9b:b4:b3:91:e3:
64:be:5f:f6:96:34:be:bd:6e:8c:69:7a:2e:26:57:
c3:53:93:0f:f4:68:ad:3d:ef:49:4b:1a:b5:84:b3:
7d:1d:a0:4c:d1:f1:d4:2e:2f:46:ef:01:8c:91:22:
c7:4a:10:b0:d7:50:87:12:83:39:5c:7d:68:d5:4b:
df:ac:a0:97:18:cd:27:48:8d:0c:f2:f0:65:44:da:
e1:6b:8f:55:f5:61:3a:3a:15:63:b9:72:bd:c8:ba:
e8:d3:50:f1:ec:47:6d:75:9f:7d:4f:58:18:37:86:
9e:82:af:5a:89:39:9d:b6:92:06:c5:58:82:9d:60:
76:76:e8:a6:da:f3:53:69:ee:0c:18:3b:83:45:f5:
37:82:2d:de:08:b4:76:0d:1b:05:82:fc:d6:23:7d:
9b:8d:dd:28:d3:fa:f3:04:6b:3e:6a:24:d3:ac:72:
19:f6:b1:9c:f9:15:5c:a3:e6:89:0e:a5:86:22:ca:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:7F:63:08:4A:ED:45:FC:57:00:DF:27:1E:56:7F:24:88:45:95
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/z3B_YwhK7UX8VwDfJx5WfySIRZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.100.0/24
Signature Algorithm: sha256WithRSAEncryption
05:61:3b:ce:36:70:5b:b4:8d:5e:5d:8a:31:cf:bf:84:b6:76:
de:6e:2b:da:75:e0:db:57:55:d5:09:1a:ff:b1:54:32:f9:7c:
ee:8f:30:be:56:75:ff:31:c8:e0:3d:83:16:c5:ef:c4:ec:93:
e4:a8:cd:b4:a9:53:c6:12:f1:ee:21:c5:a2:15:29:d2:92:0a:
09:99:d2:7d:78:32:ac:fe:e5:3b:53:c7:f7:d8:37:61:f0:54:
2d:96:8d:ed:94:70:b9:3e:d5:7b:b1:b0:db:f8:1c:1b:79:80:
6f:c8:a8:d3:68:f9:f5:ca:e2:a9:f8:48:97:17:63:d5:72:4a:
50:4e:db:c6:6d:f8:46:20:56:bd:ed:f2:c2:74:7f:21:1b:b9:
1c:a1:f8:27:42:8f:4a:21:0f:a0:39:7b:e4:0d:65:9d:66:55:
30:13:fe:6e:9d:69:27:6b:cc:5e:d3:16:6a:ea:53:37:cf:0e:
fa:46:7c:05:4d:a6:ec:de:90:bd:7b:ba:4d:ba:a6:8e:66:6a:
4e:aa:02:3e:69:c2:31:3c:bb:bb:95:81:a9:09:b8:d6:5c:71:
c8:1e:da:dd:ea:a5:c8:fa:a6:b0:1b:f1:a1:9f:1c:1e:f1:15:
15:b6:c5:a1:a0:95:ed:0d:46:78:48:d4:de:49:b2:e7:f2:2f:
08:13:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 22:24:10 2024 by rpki-client on console-ams.rpki-client.org