Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/SHMD5SxbdGP2FPR_VtLNrEJqFWs.roa
File: SHMD5SxbdGP2FPR_VtLNrEJqFWs.roa (raw, json)
Hash identifier: YSM+23jWuGhXTUSiNvRkRvc9gL8VKoGTu9MTpMtxwKs=
Subject key identifier: 48:73:03:E5:2C:5B:74:63:F6:14:F4:7F:56:D2:CD:AC:42:6A:15:6B
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC4A8A21307DC87D3D93E5C3ABBEF7
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/SHMD5SxbdGP2FPR_VtLNrEJqFWs.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57530
IP address blocks: 194.226.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4a:8a:21:30:7d:c8:7d:3d:93:e5:c3:ab:be:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=487303e52c5b7463f614f47f56d2cdac426a156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:a4:5b:02:88:f1:dd:aa:31:e2:5e:c7:ca:
64:0d:cb:6c:bf:3c:08:16:67:9c:e9:62:65:69:e6:
00:57:2f:c9:1a:45:cf:c1:a5:4a:51:e9:21:ba:33:
b5:da:bc:27:e0:50:d6:dd:3a:26:11:da:23:11:7f:
61:c3:2f:a3:85:60:bb:c7:ec:ce:2f:fc:fc:d7:72:
2c:2a:cb:95:9c:93:32:0b:75:68:a9:d8:52:9c:e4:
63:6c:22:02:a2:f7:57:9e:34:36:3d:30:b5:19:f2:
be:6c:ed:ac:6e:7f:13:fa:35:1f:ec:c5:be:78:c3:
c1:d3:42:a7:3f:13:95:ca:62:09:6a:04:dd:29:cf:
00:f5:b9:53:c9:06:37:bf:f2:84:82:80:3b:47:4a:
48:74:6a:f1:33:5f:c9:ac:1c:c6:7d:38:86:07:e8:
86:39:38:79:7d:a2:08:5b:0c:ad:e2:34:6b:cb:28:
61:2d:1a:a8:b3:fc:28:65:d6:14:71:4d:ff:cd:a5:
ca:2a:df:f3:6c:e5:18:c3:44:f1:37:e1:2f:34:06:
96:dd:57:62:b3:e6:90:06:35:2a:db:f3:a4:d4:b6:
7c:88:e3:6a:d1:c9:ea:ef:46:18:3a:7c:35:5a:54:
43:a9:f0:2e:f2:cd:90:d1:d2:5b:6b:41:09:4d:4f:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:73:03:E5:2C:5B:74:63:F6:14:F4:7F:56:D2:CD:AC:42:6A:15:6B
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/SHMD5SxbdGP2FPR_VtLNrEJqFWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b8:c0:e5:45:20:cf:2c:20:17:de:dc:00:80:f8:2f:23:b7:
d5:7d:de:0c:a4:51:51:0e:b6:f9:77:c8:88:09:eb:b8:6f:eb:
7c:00:1c:da:ea:56:66:aa:66:6c:6e:c3:a7:7b:75:64:7e:55:
8a:a9:14:c5:a1:5c:52:7a:f5:71:d4:9d:e2:31:75:50:16:4a:
8c:e6:c2:d8:3c:73:c8:ed:d2:b3:dc:5e:1b:b9:f7:95:e2:6e:
66:bd:09:5a:96:56:da:67:64:fd:a4:8f:de:20:0a:6a:02:34:
3f:37:69:95:15:94:90:ad:3e:85:46:4b:43:f0:28:57:0d:a4:
8d:2c:2e:4f:28:c1:1e:47:a9:0f:7f:b4:37:37:6b:0e:48:88:
f0:68:96:12:9b:bb:70:53:c4:d1:60:2e:c4:1b:89:77:f0:33:
6c:64:d7:ed:f5:0c:40:22:df:32:8a:ab:f9:a5:6e:e2:ac:a4:
9a:7e:ef:cb:1f:e4:31:47:b3:d9:61:d5:64:6e:70:f1:30:01:
fc:bd:5c:2b:51:4a:75:39:10:13:38:13:9a:c5:5d:bb:b6:0d:
49:2f:6d:18:8c:b8:d1:a2:a3:4d:18:02:01:42:5e:94:4b:9b:
70:e4:ea:ed:c0:a9:71:58:6a:be:57:96:42:69:7d:15:7b:2a:
65:f5:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:00 2024 by rpki-client on console-ams.rpki-client.org