Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SwhqQMKebHligL35mLovvU1-fMQ.roa
File: SwhqQMKebHligL35mLovvU1-fMQ.roa (raw, json)
Hash identifier: f1Umrzku388X1Yb2/ONxzl5rIe8klnlNIx7F6LqovJk=
Subject key identifier: 4B:08:6A:40:C2:9E:6C:79:62:80:BD:F9:98:BA:2F:BD:4D:7E:7C:C4
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D66199C3465C495813CA975DB39BA
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SwhqQMKebHligL35mLovvU1-fMQ.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202737
IP address blocks: 185.60.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:66:19:9c:34:65:c4:95:81:3c:a9:75:db:39:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b086a40c29e6c796280bdf998ba2fbd4d7e7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:58:12:33:bd:9f:4a:f8:61:49:b8:ad:f6:
df:f6:8e:33:28:2d:c7:70:e9:49:6b:c4:4d:26:e4:
50:62:e6:51:9c:70:2a:0c:7f:b8:e6:b7:22:72:b0:
86:62:db:dc:de:51:b3:e2:7a:91:de:41:76:aa:d5:
85:2d:0f:c6:e5:59:bc:cb:cd:08:62:24:33:73:c9:
e0:66:e2:4d:36:b7:cc:fe:48:86:fe:e4:b6:fc:23:
65:8d:24:bc:fa:7b:ab:29:38:07:78:b4:70:1a:b8:
ee:34:04:e0:8a:25:15:6d:87:6a:c2:bc:4c:37:37:
d8:c1:92:e7:44:77:01:f8:fc:38:45:79:15:e7:f7:
7e:7d:85:61:de:28:1e:36:7c:0a:89:4d:1b:78:3a:
95:03:e6:1c:cc:5a:68:fa:b5:02:66:c7:4d:11:5f:
75:e5:75:52:23:71:fd:31:ac:b0:8d:a2:ba:50:c1:
dd:74:b9:81:65:3d:96:26:41:69:a2:a6:95:55:30:
97:93:a3:af:e9:23:ad:05:f8:e4:10:c0:92:4e:1f:
e0:d0:98:07:11:57:4d:d0:f8:f4:b6:b9:78:17:28:
75:ae:ac:c0:ca:59:c1:a1:da:76:67:4a:40:0d:b4:
63:61:1c:75:39:c9:2b:c0:83:d7:e6:c1:d1:0e:c9:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:08:6A:40:C2:9E:6C:79:62:80:BD:F9:98:BA:2F:BD:4D:7E:7C:C4
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SwhqQMKebHligL35mLovvU1-fMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.65.0/24
Signature Algorithm: sha256WithRSAEncryption
87:cd:2e:7b:61:c5:74:ca:54:63:97:5a:58:68:b0:28:3a:89:
6d:cf:58:38:3d:96:20:69:91:08:07:e9:13:43:ba:b2:85:26:
35:2a:81:15:c2:3e:e0:0b:e4:ee:18:18:66:c8:fa:a0:d4:c8:
6d:cb:bf:71:02:ac:68:80:3e:cc:99:56:56:18:b6:f7:b0:d3:
3d:48:64:82:87:a4:20:22:a5:66:4e:46:e1:97:ad:57:91:7b:
e9:b6:eb:78:a2:49:aa:50:94:62:83:1b:14:6a:ee:6f:01:74:
3e:fb:e7:c2:c7:cb:76:8b:60:15:fe:cb:f2:af:36:28:9c:7f:
4b:de:78:70:1d:28:c2:d2:28:9b:c2:6c:2b:0c:21:38:30:30:
8b:f3:98:c6:e3:24:e9:65:91:2f:82:b1:99:db:bb:17:fb:5d:
f8:73:05:12:7e:3f:8a:9c:e6:4d:a5:74:ef:58:69:ea:68:b2:
42:f9:88:e7:7e:5c:25:89:02:e1:6f:b8:0c:54:91:9c:ce:69:
bd:b4:d7:9c:61:f1:b7:01:f0:c2:50:1c:22:7f:31:32:d4:f9:
a6:25:8e:d0:86:1e:3b:36:cb:32:0e:cf:9d:92:3d:b4:80:cf:
53:ff:85:93:1e:e3:c8:ae:f8:fd:33:51:90:ae:3b:db:51:45:
6f:08:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:11:17 2024 by rpki-client on console-ams.rpki-client.org