Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/S-1RMbboBNB_fsNvjIUtnFHTJo8.roa
File: S-1RMbboBNB_fsNvjIUtnFHTJo8.roa (raw, json)
Hash identifier: 4UhQ2XICNvH09RnS6sjZgLUOREbvEPWbzuO2t3X/pJA=
Subject key identifier: 4B:ED:51:31:B6:E8:04:D0:7F:7E:C3:6F:8C:85:2D:9C:51:D3:26:8F
Certificate issuer: /CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
Certificate serial: 018CC3B6EAA7934185CD96AAE0D292009D3E
Authority key identifier: 24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/S-1RMbboBNB_fsNvjIUtnFHTJo8.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41514
IP address blocks: 194.156.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ea:a7:93:41:85:cd:96:aa:e0:d2:92:00:9d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9d84c6d16c083093c3371b4575d36ef448fe4
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bed5131b6e804d07f7ec36f8c852d9c51d3268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:e0:94:8f:95:39:22:a5:b5:e5:fb:e9:2c:
fd:62:f0:06:3b:6d:78:9d:0f:1c:b3:da:13:3e:69:
bc:94:1b:02:60:23:79:34:30:37:e3:1d:b7:c0:fb:
2f:c7:63:fb:3b:d9:a5:07:fa:77:27:c0:3b:bf:bf:
5f:bd:19:69:7f:c6:6a:d5:b0:c1:0e:1d:b0:53:fb:
0e:aa:bd:61:54:1d:02:be:4b:5f:a3:69:4c:13:93:
0d:9c:bf:0d:9a:e6:69:ee:88:ca:ee:83:30:54:46:
82:54:99:f5:65:4f:5a:08:c0:18:ec:b3:b1:1b:f9:
a9:72:5a:6a:c8:d9:90:d2:01:56:16:0c:18:2a:c6:
c5:0d:db:6c:dd:fa:b2:ac:4a:a1:2e:10:5f:f0:6a:
4f:b6:1e:1d:ce:a0:75:ae:a3:15:53:92:28:78:8c:
63:b2:3a:8c:0b:8b:7f:43:ab:b9:8e:d1:79:b3:c0:
c5:68:e8:75:a5:cd:5e:80:72:e2:45:3e:09:50:b7:
13:3e:b9:84:ed:d1:01:c3:a5:63:73:c3:78:55:69:
d7:9b:ca:79:9d:09:e1:86:7a:58:9c:4f:84:ef:44:
f2:37:90:ec:36:d6:b8:96:6c:9b:93:41:c3:73:b0:
16:8e:8b:d6:42:c8:8d:6a:91:fc:73:a9:93:03:ad:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:51:31:B6:E8:04:D0:7F:7E:C3:6F:8C:85:2D:9C:51:D3:26:8F
X509v3 Authority Key Identifier:
keyid:24:A9:D8:4C:6D:16:C0:83:09:3C:33:71:B4:57:5D:36:EF:44:8F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/S-1RMbboBNB_fsNvjIUtnFHTJo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/05ca1d-c357-48bc-9609-45a534f222f4/1/JKnYTG0WwIMJPDNxtFddNu9Ej-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:02:ff:93:0e:94:3e:a8:b0:d9:c6:e8:a0:94:cd:9d:1f:25:
7f:8a:1f:de:b3:0b:f5:66:35:fe:76:7e:b2:bb:7b:49:9b:0b:
cb:22:24:71:75:9a:7c:ad:45:74:c5:16:66:94:60:fc:ef:42:
57:07:05:d5:21:99:f9:b6:f0:5b:7c:ac:2d:36:06:15:94:5a:
a4:7e:9c:67:98:11:83:19:46:82:c4:cd:56:1c:05:ee:f0:44:
68:7d:cb:ed:94:19:d6:58:e3:57:6a:f4:34:81:4f:d5:51:f1:
2e:1e:58:3c:ad:ce:d9:b5:55:f9:ef:54:f8:d0:03:99:19:d9:
7f:0d:7c:e8:a2:1c:0f:b0:f8:f0:1f:d8:5b:5a:88:eb:8c:e6:
c2:7e:e8:99:a8:08:80:4b:65:68:4d:f0:a7:3f:5d:e8:1c:83:
b3:d8:1f:b5:71:19:91:26:28:d5:07:00:17:22:ef:27:56:4a:
52:74:19:b6:4a:60:eb:e9:2c:71:60:29:9a:c5:79:19:38:56:
d7:66:cf:db:6d:62:91:ba:91:b0:c3:c3:04:d8:87:fd:a9:55:
df:78:b3:36:e6:8d:30:b5:4a:fe:e1:72:33:14:2e:e8:66:af:
89:9a:5d:0d:7a:f5:e4:2c:a7:e5:26:56:1d:80:03:40:7e:74:
36:0d:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:30:29 2024 by rpki-client on console-ams.rpki-client.org