Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/sgVitHDTEgpWPJMX0iarJ3BdHLE.roa
File: sgVitHDTEgpWPJMX0iarJ3BdHLE.roa (raw, json)
Hash identifier: mcBMb+aKk0K4/WRRG84SDy8dFyXjAkwF+q7GFdOTQsk=
Subject key identifier: B2:05:62:B4:70:D3:12:0A:56:3C:93:17:D2:26:AB:27:70:5D:1C:B1
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018CC5006F0CEADB4C6365EA42A48A85F55C
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/sgVitHDTEgpWPJMX0iarJ3BdHLE.roa
Signing time: Mon 01 Jan 2024 12:29:49 +0000
ROA not before: Mon 01 Jan 2024 12:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52084
IP address blocks: 46.255.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6f:0c:ea:db:4c:63:65:ea:42:a4:8a:85:f5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 12:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b20562b470d3120a563c9317d226ab27705d1cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:33:55:4c:29:e6:42:7c:34:d1:62:57:03:
9a:f0:fb:65:64:a6:4d:4e:02:e7:78:29:db:8b:5b:
65:59:12:c3:b1:7d:5c:1a:93:45:d1:24:9a:b2:85:
cd:b7:76:cf:ec:a9:bb:30:6f:a2:ac:7f:58:e3:99:
e6:e8:be:a7:4d:a8:df:f3:ed:ad:76:99:d4:38:d7:
04:68:36:8f:57:1e:ee:d2:7e:2d:34:52:22:4e:82:
76:d1:e9:f7:85:b1:7d:4b:15:4a:e4:88:2f:a5:ad:
47:45:0f:80:88:53:7e:52:a0:aa:0f:fe:c2:6c:f6:
b8:2d:65:1b:a5:74:80:40:85:eb:55:7a:7f:a6:2c:
4d:4e:8f:cc:3a:f3:6d:16:e1:49:34:03:d3:aa:b4:
c4:f0:4c:1f:75:77:5b:e0:fd:3e:41:d3:d9:b7:76:
1c:43:d6:04:1e:71:43:20:ff:4a:37:e6:d1:5f:79:
12:0a:3c:e5:93:fb:a8:e6:a6:72:fb:40:76:c7:2a:
64:ac:9e:d9:dc:17:f7:0d:07:e8:d0:ec:1a:93:22:
b2:fc:bc:86:b6:e1:aa:87:03:17:9e:85:04:a4:f2:
54:38:01:0c:24:cd:4c:d7:04:e9:7a:44:91:1c:d5:
89:f9:c6:82:d0:a5:e9:05:eb:7f:9c:29:9c:c6:c2:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:05:62:B4:70:D3:12:0A:56:3C:93:17:D2:26:AB:27:70:5D:1C:B1
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/sgVitHDTEgpWPJMX0iarJ3BdHLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:3d:c9:b6:3f:3a:90:47:35:48:fe:bc:f8:8f:24:f6:59:27:
43:9d:5a:ba:b3:01:52:8e:3d:b8:72:89:98:03:d7:95:b1:5b:
bf:51:02:6f:80:f7:44:75:63:09:be:bb:2c:b9:be:fa:2e:fd:
b4:8b:97:dc:5f:ef:05:80:1d:3a:90:ee:05:a2:6b:59:cb:e7:
cb:b0:8c:fc:80:a2:dc:c2:f7:e3:0c:cd:e5:b2:34:2f:3c:05:
d5:c2:2a:b6:86:87:74:26:8a:42:c4:3b:74:8d:54:a1:06:97:
63:ec:4d:d2:50:41:cd:67:db:ed:f2:52:aa:b1:92:8c:b8:4d:
83:d9:4a:41:94:0b:ed:c0:2e:a0:bc:30:6c:03:0c:cb:04:74:
bd:03:a3:95:da:5d:17:10:ee:fc:a7:1f:0c:bf:9a:cd:4d:93:
db:0b:79:7d:e4:76:c8:d3:c5:81:63:fe:32:a6:a3:e3:9c:37:
bc:fa:8e:88:6d:6a:ac:f1:f0:cd:d7:49:c0:0e:76:59:20:e2:
a8:7d:65:37:f6:58:02:26:7c:cc:d4:34:2a:5c:b9:c1:8e:66:
41:8c:65:d1:aa:b4:a1:a4:50:da:38:44:f6:4d:45:ce:30:d5:
91:2e:09:8e:f6:bf:e5:d7:ed:cf:3e:90:ef:05:c2:69:a5:64:
3e:f0:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:09:08 2024 by rpki-client on console-fra.rpki-client.org