Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SiBK_8bBhrFTdDh4s1Es7cUD5Es.roa
File: SiBK_8bBhrFTdDh4s1Es7cUD5Es.roa (raw, json)
Hash identifier: okN1+0R1EzCQPEJL94EIUfDYOd8puQ6mm0GBn6PkTtI=
Subject key identifier: 4A:20:4A:FF:C6:C1:86:B1:53:74:38:78:B3:51:2C:ED:C5:03:E4:4B
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003BB1D6D2606C580151039A7A8525
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SiBK_8bBhrFTdDh4s1Es7cUD5Es.roa
Signing time: Mon 01 Jan 2024 12:29:35 +0000
ROA not before: Mon 01 Jan 2024 12:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 146.19.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3b:b1:d6:d2:60:6c:58:01:51:03:9a:7a:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a204affc6c186b153743878b3512cedc503e44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:c2:56:a8:51:33:98:51:2f:50:96:42:32:
fe:99:1b:0d:80:c5:ce:84:e2:f6:12:ab:50:c3:ee:
77:0f:aa:dc:67:51:35:05:8b:1c:76:4c:e9:be:bc:
2c:8d:ab:c4:b3:5e:cd:50:cf:b7:11:6e:74:fb:70:
da:0e:9a:ed:6c:c4:dc:63:86:3a:54:4c:5b:ea:88:
fa:33:26:19:dd:dc:91:e4:52:b0:1d:13:73:38:4d:
25:34:50:bd:4b:dd:0c:4b:a3:c5:e8:9c:e8:4c:71:
0a:6f:bd:4d:27:cf:35:6b:45:e9:30:5e:8e:9a:a8:
2f:71:b7:9b:92:fb:0d:d8:5a:67:42:94:fd:9c:11:
06:22:d3:df:f5:10:ac:fc:1f:17:6e:2e:e0:65:f3:
19:f0:c6:65:f4:46:0b:df:f8:4b:a6:a7:65:45:fa:
d7:cc:11:00:4d:3b:f9:7a:42:e3:18:0f:74:5f:d8:
ac:e9:7a:a8:16:31:d4:f1:d4:4f:c4:b0:fe:1a:f1:
9f:96:59:c4:ce:15:71:c3:c2:2a:bc:24:31:fa:98:
db:f5:13:b5:5a:c9:34:57:d6:73:25:3f:33:d9:ae:
d0:53:aa:dd:65:e0:ca:90:15:fe:7e:b3:34:2f:37:
ee:cb:8c:e8:11:2a:46:34:5f:c6:0d:b1:ac:0c:fc:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:4A:FF:C6:C1:86:B1:53:74:38:78:B3:51:2C:ED:C5:03:E4:4B
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SiBK_8bBhrFTdDh4s1Es7cUD5Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:32:3d:f0:8f:7e:2c:76:ad:5b:ec:18:31:f1:a4:90:9c:a9:
97:0f:a5:c8:69:0a:ce:3d:b3:f6:04:cd:f6:7c:d3:71:47:4c:
7b:7d:e2:6f:6c:8d:a5:27:8d:3e:d6:e6:cc:d5:90:50:be:a2:
d4:53:25:a4:a1:49:b8:9f:81:4f:64:ae:81:42:86:41:8a:26:
92:f2:8b:25:1b:c6:b4:a1:66:5f:e3:3f:30:b7:44:e2:01:07:
04:3f:bd:03:ca:0d:88:1b:94:72:cf:53:fc:d5:98:c4:ac:88:
ba:c3:1a:6f:22:cf:d8:99:b7:50:c7:0f:90:ca:26:6b:a5:cc:
de:ee:88:c1:7a:d8:08:c6:08:51:ad:1a:a0:3f:2e:01:f0:81:
5b:42:40:ee:88:9f:31:b2:50:d2:31:fd:0f:dc:0b:d0:ab:0a:
06:e0:81:53:e5:57:06:83:01:0c:61:d8:be:dd:9a:e3:40:37:
06:fe:66:7b:58:8d:66:66:52:c6:80:63:f9:b7:ab:cc:56:2a:
c9:43:4c:99:f7:0d:9a:01:30:3d:39:5d:2a:c9:d5:d8:1e:be:
11:9a:82:65:22:4d:8f:4b:4b:fe:23:ba:7f:b8:d9:10:fd:18:
03:7c:c8:38:14:0b:47:74:c2:32:e8:ab:06:3c:df:32:3b:1f:
1d:ef:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 05:40:50 2024 by rpki-client on console-ams.rpki-client.org