Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/mHvS2Z7g1jSVTaEB51aqrpLl0yE.roa
File: mHvS2Z7g1jSVTaEB51aqrpLl0yE.roa (raw, json)
Hash identifier: 2dXyx3g7p987s94fYQlbJW4Cntwt9n7nm2FDxA+euj0=
Subject key identifier: 98:7B:D2:D9:9E:E0:D6:34:95:4D:A1:01:E7:56:AA:AE:92:E5:D3:21
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 018CD59211657C8B6C40306B34C6909E57C6
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/mHvS2Z7g1jSVTaEB51aqrpLl0yE.roa
Signing time: Thu 04 Jan 2024 17:42:48 +0000
ROA not before: Thu 04 Jan 2024 17:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206750
IP address blocks: 146.19.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:92:11:65:7c:8b:6c:40:30:6b:34:c6:90:9e:57:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 4 17:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=987bd2d99ee0d634954da101e756aaae92e5d321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:2e:45:74:32:21:b4:97:20:99:72:ea:23:
ec:34:12:06:d1:ee:08:8a:3d:c6:8c:3d:a2:65:e1:
0d:7b:d7:ba:21:52:ed:92:4a:2d:fc:d0:a7:2d:2c:
2a:10:bd:40:6f:8f:2a:70:ae:81:23:f1:c5:76:85:
28:60:98:c6:0a:4c:24:1c:86:24:5e:89:5a:78:74:
fc:0b:8c:6e:db:35:bf:b0:a9:b4:a1:bd:32:c1:5b:
6a:ed:a6:0e:9c:1e:a6:3d:48:d2:d5:87:06:19:93:
c6:8d:28:a8:f0:a6:db:5b:60:ce:0a:2e:2b:5b:b8:
8d:d7:1a:6b:2a:b0:c0:1b:85:7a:b3:8f:19:74:9d:
f2:4b:f7:8d:56:4b:4d:bf:a6:15:2c:94:03:b1:be:
6d:8a:4d:fd:90:38:8b:5d:18:e7:39:22:5c:49:54:
07:23:82:89:a1:19:03:cf:ad:77:60:a1:17:ee:10:
f6:26:3f:22:f8:cb:26:ff:60:7a:22:c2:4c:eb:53:
68:ea:aa:5d:99:56:d0:0b:7c:62:fa:e8:25:0f:f0:
1b:3e:d3:0d:2e:70:ec:83:ae:dd:db:43:07:b1:e6:
17:26:06:d8:3e:f6:6d:c2:e9:e2:dd:6c:05:04:9a:
4d:9a:80:b8:4e:c8:1a:7d:7b:c6:b4:e6:c4:4a:d3:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7B:D2:D9:9E:E0:D6:34:95:4D:A1:01:E7:56:AA:AE:92:E5:D3:21
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/mHvS2Z7g1jSVTaEB51aqrpLl0yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
Signature Algorithm: sha256WithRSAEncryption
12:21:80:1e:04:f8:fe:fc:ee:83:64:5c:51:60:3f:52:13:cd:
f3:72:2f:ea:f8:86:f8:cd:c6:16:1c:99:55:a0:1f:83:2b:1b:
c0:f8:31:26:22:d2:97:13:46:ea:a7:4b:f1:48:f4:e5:99:5d:
b1:53:4b:6e:af:5d:d2:5a:0f:e6:ce:d8:c0:2c:18:1d:f5:ac:
d5:ed:29:e0:42:20:50:c0:09:f3:d4:8a:db:37:3e:f9:b9:5c:
89:ce:db:dc:15:11:4a:be:4a:11:19:87:f3:bf:ec:8a:06:4c:
ba:97:7e:b7:13:47:72:cd:f3:ee:9b:62:6c:21:cf:f2:d5:d8:
c0:df:9e:18:ee:bb:1c:eb:4a:51:42:4b:43:b1:f7:57:17:80:
e3:fc:71:e3:ca:83:5d:1d:48:ff:37:95:65:e0:23:a6:8e:66:
1d:fb:74:92:a2:91:cc:4d:5a:5c:1f:fb:b2:1d:f8:81:21:98:
73:ca:48:15:13:5b:2b:ef:73:14:e3:5b:90:51:02:e2:e2:d3:
53:3b:57:05:91:8d:37:68:42:81:26:7a:0d:d8:45:d0:93:eb:
f7:3d:c9:0d:83:51:14:1d:6f:47:5a:30:61:41:78:9e:22:37:
12:39:0e:b6:04:ba:4c:9b:51:e4:12:13:14:d7:17:e8:a7:11:
33:00:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:42:07 2024 by rpki-client on console-ams.rpki-client.org