Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/SHmQe3heMVdrxNtGjLUN4kZPwAA.roa
File: SHmQe3heMVdrxNtGjLUN4kZPwAA.roa (raw, json)
Hash identifier: tGUJRzzMkcMQ1vf2OKxsVpDg7Qu+UbfKF6q/lqUhV9Q=
Subject key identifier: 48:79:90:7B:78:5E:31:57:6B:C4:DB:46:8C:B5:0D:E2:46:4F:C0:00
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 0190167796FA982D34D64522CCEF34305517
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/SHmQe3heMVdrxNtGjLUN4kZPwAA.roa
Signing time: Fri 14 Jun 2024 11:17:34 +0000
ROA not before: Fri 14 Jun 2024 11:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61213
IP address blocks: 94.140.17.0/24 maxlen: 24
185.206.4.0/22 maxlen: 23
2a02:d60::/32 maxlen: 32
2a02:d60::/48 maxlen: 48
2a02:d60:1::/48 maxlen: 48
2a02:d60:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:77:96:fa:98:2d:34:d6:45:22:cc:ef:34:30:55:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Jun 14 11:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4879907b785e31576bc4db468cb50de2464fc000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:cb:6c:1c:85:c6:6d:25:3f:b2:4d:b8:d9:
4f:a2:26:22:9e:08:bd:12:45:9d:45:3a:e8:c8:0b:
e3:88:d0:f5:43:cb:e9:ed:f8:fc:b8:5b:6f:9d:26:
a6:93:b6:da:84:76:49:5d:37:cb:83:76:41:e7:b1:
61:9c:81:04:45:52:b7:6b:17:39:c8:03:8f:cf:a4:
ae:79:80:0e:4d:53:0c:de:e4:01:0c:2b:fc:90:5a:
c2:7b:64:44:c5:38:10:a0:c1:15:aa:d0:8e:17:33:
90:0d:6b:c0:fa:ab:f9:25:19:2a:1c:32:5c:67:92:
86:74:8c:58:96:8e:d6:da:9b:38:b1:cc:f7:b2:47:
c7:ec:5b:1b:a7:8a:2b:9f:72:bf:9f:75:fd:84:7d:
64:d1:31:4f:63:90:7c:03:a4:08:bf:a1:33:e9:28:
01:eb:28:e5:20:a6:ab:58:1b:f1:07:e1:a7:e9:01:
ce:77:78:de:bb:19:d0:c3:a7:65:75:d7:42:82:28:
2d:47:f9:c5:e5:ce:80:b6:f1:73:04:b8:5a:58:9c:
5e:09:89:66:a6:c4:31:21:c3:b4:e4:97:85:8d:ba:
8f:ad:d8:4f:59:73:c0:93:b1:82:60:c3:2c:2d:41:
0b:c8:5c:04:47:b5:9d:bc:94:7c:f9:91:90:a3:fd:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:90:7B:78:5E:31:57:6B:C4:DB:46:8C:B5:0D:E2:46:4F:C0:00
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/SHmQe3heMVdrxNtGjLUN4kZPwAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.17.0/24
185.206.4.0/22
IPv6:
2a02:d60::/32
Signature Algorithm: sha256WithRSAEncryption
8c:1b:13:41:b3:1d:1a:dd:4b:1d:68:9e:d8:f2:5d:d1:ee:23:
c7:96:5f:74:5f:f5:c1:38:ce:e7:d7:52:30:18:ed:b8:24:61:
c5:0d:5e:0d:1b:be:31:74:97:1a:4a:78:fe:60:7f:03:8e:dc:
68:d7:7b:7e:f9:6b:e7:7b:48:d1:8e:19:f7:04:28:ca:0a:1e:
7d:9c:76:de:69:ea:e5:c8:b8:d9:1f:8c:e6:f6:ae:cb:77:dd:
4e:5a:ca:55:7f:ab:a2:05:44:a3:5b:cc:3a:c8:a6:90:6b:e1:
88:c9:70:24:7f:3b:13:30:94:a3:e9:b4:03:e1:4b:d3:29:de:
76:c0:b2:47:e3:48:dc:09:86:10:24:96:42:ea:46:c1:b5:16:
ae:e0:5e:ad:f7:7e:0c:19:4a:08:05:71:1d:be:7c:49:5d:ab:
1b:74:2a:2b:0f:63:0d:7c:0f:45:33:3e:99:e0:04:06:e1:99:
5e:d7:b1:3a:5c:a2:4b:4d:4f:00:f0:6e:77:dc:35:da:10:93:
96:17:83:24:2b:08:1b:c3:ba:b2:94:8d:84:95:88:62:8f:3e:
fb:09:6d:a0:2f:ec:94:4d:ba:a2:63:d9:44:bd:fb:71:d4:77:
0d:8f:90:e1:2d:fb:06:ce:f5:c8:55:16:67:a5:2a:c1:e2:d5:
74:d9:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:37:31 2024 by rpki-client on console-ams.rpki-client.org