Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SgCaO2o-7pRibe_2tXYCPM5o2gs.roa
File: SgCaO2o-7pRibe_2tXYCPM5o2gs.roa (raw, json)
Hash identifier: QcchnwDC6OvM5TUgac2ua3fPOJUR1EKaolLNYFaW1Bk=
Subject key identifier: 4A:00:9A:3B:6A:3E:EE:94:62:6D:EF:F6:B5:76:02:3C:CE:68:DA:0B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018FA11388F3B8B1848DAF506FE799FB6E83
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SgCaO2o-7pRibe_2tXYCPM5o2gs.roa
Signing time: Wed 22 May 2024 16:12:42 +0000
ROA not before: Wed 22 May 2024 16:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57013
IP address blocks: 45.159.86.0/24 maxlen: 24
185.187.18.0/24 maxlen: 24
194.26.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:13:88:f3:b8:b1:84:8d:af:50:6f:e7:99:fb:6e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 22 16:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a009a3b6a3eee94626deff6b576023cce68da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:e6:46:e6:6f:22:d3:23:ce:bd:19:8b:eb:
72:b1:67:d5:19:18:67:63:dc:9d:ae:52:42:ef:ba:
6b:ef:81:e9:cf:6c:e5:a3:6c:ef:fa:1b:85:07:3b:
49:49:5a:3a:17:84:6d:b0:76:f5:5e:85:c5:b7:03:
0d:4c:dc:6e:8d:51:b3:39:f3:e4:a7:33:2b:90:76:
76:da:28:6d:4a:ec:7f:97:bd:31:c1:d5:9b:81:03:
c7:d9:5f:08:08:11:8e:94:b8:79:68:6c:b1:bd:ec:
ac:74:af:9b:62:c2:15:77:78:0f:84:e7:17:ab:16:
74:ad:7f:fd:32:17:45:8c:e0:22:a5:36:62:56:09:
d1:ff:36:ec:e0:4c:c6:d6:d2:77:ef:05:56:68:d8:
27:cf:40:4d:7f:8a:e6:04:75:3c:f4:20:e0:19:cb:
8a:55:fb:08:a5:c2:60:a7:0a:f4:57:ae:9a:6a:14:
28:05:dc:6e:0e:dd:11:f1:96:43:2e:ca:7a:fa:59:
a4:50:43:76:54:5a:bf:e3:52:45:1b:f9:66:41:70:
14:6d:be:6a:2b:93:e9:e1:ac:a3:81:a8:60:ed:91:
89:c8:7e:e7:bc:79:a6:33:cc:d2:a8:b9:73:33:c9:
ee:12:eb:36:0b:66:93:22:fe:41:2e:0f:ed:f5:3e:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:9A:3B:6A:3E:EE:94:62:6D:EF:F6:B5:76:02:3C:CE:68:DA:0B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SgCaO2o-7pRibe_2tXYCPM5o2gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.86.0/24
185.187.18.0/24
194.26.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b0:e0:43:5b:36:3d:ee:65:24:fa:8a:23:90:0d:1e:ae:34:
4d:40:93:61:d5:00:fe:36:db:10:24:3c:92:37:3d:19:73:c3:
56:59:36:c9:7f:bc:6b:a6:ab:6d:ec:75:04:70:ee:c2:98:f1:
a8:f5:91:c6:b0:c5:7d:c7:be:21:ba:7e:e7:2c:c2:de:a1:4f:
db:da:1a:16:0f:02:b3:bb:c5:45:58:63:e3:33:43:b4:0c:5d:
d6:dc:03:06:50:26:11:16:c7:5d:85:a0:7d:1c:36:c0:3a:81:
74:77:49:5e:43:43:88:3b:d1:cf:d2:f4:98:c7:f9:6c:0a:11:
4f:91:70:5e:41:19:67:1b:61:bd:52:1f:14:07:b6:4b:3d:2a:
50:cf:5f:1d:e4:54:b7:47:a3:17:aa:5d:75:ea:8b:de:f0:2c:
5b:63:e4:28:ad:4e:20:67:29:01:91:a8:07:1f:ba:eb:8c:43:
3b:96:59:7d:2b:e9:08:2b:c8:6a:fb:af:e3:5a:3a:5f:95:58:
e4:b9:e6:55:73:7f:cc:c9:c5:8c:e5:5a:35:52:9d:9a:70:56:
f1:60:83:28:d8:92:65:45:4a:2b:bb:6e:4c:ba:7d:dd:e6:0d:
06:f3:9f:49:4b:ce:73:a8:ee:3b:fe:85:fe:28:db:b9:5b:65:
d3:b9:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:04:33 2024 by rpki-client on console-fra.rpki-client.org