Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/SR1ogs_58eZMtn8adnkfVmiSrOY.roa
File: SR1ogs_58eZMtn8adnkfVmiSrOY.roa (raw, json)
Hash identifier: U7+/cdUDelkCVfdRNuHE1cDLqDSJD7+us6p+pymAyCs=
Subject key identifier: 49:1D:68:82:CF:F9:F1:E6:4C:B6:7F:1A:76:79:1F:56:68:92:AC:E6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 018CCA2B79EC4C304941803C1717165064A7
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/SR1ogs_58eZMtn8adnkfVmiSrOY.roa
Signing time: Tue 02 Jan 2024 12:34:56 +0000
ROA not before: Tue 02 Jan 2024 12:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 193.39.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:79:ec:4c:30:49:41:80:3c:17:17:16:50:64:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jan 2 12:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=491d6882cff9f1e64cb67f1a76791f566892ace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:a3:2c:1a:30:00:c8:1b:c6:d2:9b:9e:19:
1c:52:8b:30:57:4c:0d:19:af:87:da:90:06:f8:4a:
3e:29:38:1a:a0:6e:b4:33:63:bb:63:d1:56:04:24:
3b:cd:c2:5d:92:27:a9:cf:ae:b3:ce:a3:f2:f0:df:
8f:55:e0:e9:d6:3f:90:c7:e2:73:e3:16:ef:a8:52:
5f:03:90:48:df:7e:91:cc:9a:8e:35:0b:0b:b1:bc:
cf:c1:92:57:ac:62:60:f3:07:cd:0c:54:ef:9b:81:
bc:04:5e:73:54:4b:17:1f:a8:82:6a:b9:32:4f:2f:
4e:80:e9:a5:8d:9b:84:d5:73:7a:69:3f:f2:f9:98:
71:0c:ec:64:e9:e1:78:72:cd:e1:df:93:b7:7e:a6:
c2:9d:dd:64:71:8a:a2:e6:cb:b4:4e:c2:05:3e:4b:
e3:fe:f5:29:12:f3:2f:83:49:b4:f4:fe:51:56:34:
a7:ad:65:b0:ca:63:5d:9e:3e:2e:36:4d:24:f1:a8:
93:d0:ed:dd:05:90:ba:00:33:f1:cf:36:27:50:27:
5f:75:e5:e2:8d:49:ca:72:ed:da:56:9e:21:f3:ac:
f9:c0:6f:d5:e4:46:92:6c:a4:28:fc:8a:7a:b6:b8:
29:5c:c7:b7:12:78:27:5f:e7:47:88:1c:6f:a7:30:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:68:82:CF:F9:F1:E6:4C:B6:7F:1A:76:79:1F:56:68:92:AC:E6
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/SR1ogs_58eZMtn8adnkfVmiSrOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.188.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f9:26:98:43:a9:8f:92:30:46:e1:79:82:b7:cd:93:03:24:
18:c8:f0:d8:15:72:2e:80:7e:0a:e7:e6:f5:fb:cb:e7:56:80:
53:89:a5:f3:b3:a3:69:21:12:c1:65:93:30:3b:43:44:22:de:
4b:99:98:72:12:53:72:26:d1:0e:2f:98:4a:9d:00:7d:ee:ca:
df:82:31:46:3a:37:f6:b0:66:2d:52:fd:5d:63:fa:66:ad:80:
12:83:80:16:5d:ee:dc:39:4d:71:5c:db:ed:1f:ab:c9:14:0e:
60:2a:74:44:a5:e4:70:95:4a:3a:c6:c4:1e:e9:44:06:b9:63:
b2:2e:e1:bf:c2:34:79:2e:e6:b0:3b:0f:2c:20:80:b0:ac:ae:
bb:37:34:c0:ca:1b:63:ae:aa:fc:2c:e3:58:63:ba:3a:40:6e:
8a:a2:cf:07:cd:7e:b3:9e:9e:44:01:2d:bc:fb:f2:8b:53:2a:
d7:dc:e0:b8:ca:13:24:66:2f:e6:80:91:76:45:a3:57:0b:7b:
46:ca:1f:84:40:14:67:99:67:c0:40:7a:2e:a8:17:29:bb:22:
ea:81:47:a6:3f:15:a3:cc:be:fc:5d:e6:84:f6:b1:7e:c6:f9:
b1:16:18:c0:9a:5f:12:3c:88:93:43:a7:6f:d4:80:a3:66:54:
c5:33:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:32:06 2024 by rpki-client on console-ams.rpki-client.org