Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SLK-4BdmGHNLtcfnMbxQYt4CK-Q.roa
File: SLK-4BdmGHNLtcfnMbxQYt4CK-Q.roa (raw, json)
Hash identifier: Z2o/Gc3fMt77NS30S4HkJgt9txesp7p6YypShGpwiEU=
Subject key identifier: 48:B2:BE:E0:17:66:18:73:4B:B5:C7:E7:31:BC:50:62:DE:02:2B:E4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018D69AD38A41426D0A758490C664CE0C5D1
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SLK-4BdmGHNLtcfnMbxQYt4CK-Q.roa
Signing time: Fri 02 Feb 2024 11:56:16 +0000
ROA not before: Fri 02 Feb 2024 11:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211743
IP address blocks: 195.26.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:ad:38:a4:14:26:d0:a7:58:49:0c:66:4c:e0:c5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Feb 2 11:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b2bee0176618734bb5c7e731bc5062de022be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:e4:c1:9f:27:37:09:a1:7f:32:a6:fa:57:
e7:a8:d9:82:2f:01:98:82:94:2d:88:48:e2:b7:8e:
3e:16:a1:05:9c:a5:af:90:23:8a:93:b8:d3:24:cc:
73:4a:f3:46:b6:2e:6e:26:fd:20:c1:4b:17:2b:97:
4a:99:f4:c5:4b:db:c4:e2:e6:d2:07:d1:a7:e5:d1:
a7:17:b0:2a:ce:88:01:b5:c3:bc:64:22:01:8e:31:
e5:c9:f4:11:62:3c:63:25:b3:ff:8f:91:8a:a7:48:
1a:84:97:12:38:4d:8a:13:ec:bc:af:91:69:bf:58:
80:57:c5:6d:45:77:b9:7f:c2:9d:83:19:19:73:ba:
3e:b9:ce:77:99:31:9b:27:5b:dc:2a:be:7f:fb:93:
2e:1f:f0:bd:ee:da:1b:07:f9:94:e9:6e:d9:41:00:
31:7d:1c:e4:c2:aa:d3:bc:04:35:f0:ec:3c:b2:4a:
a0:55:c1:3d:e2:73:6d:dd:10:ae:a0:5b:d9:9c:ce:
07:85:b7:03:03:fe:25:27:65:9e:51:e5:d2:f9:88:
b2:01:5a:3e:46:60:2c:d8:c4:2a:e7:d1:f0:6f:15:
7b:17:16:83:10:d6:f2:63:0d:3c:72:74:7c:fa:3c:
d2:fe:18:7f:2c:a9:a4:17:74:02:b8:9a:4f:12:7f:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:BE:E0:17:66:18:73:4B:B5:C7:E7:31:BC:50:62:DE:02:2B:E4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SLK-4BdmGHNLtcfnMbxQYt4CK-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f9:51:2c:5f:24:3b:27:93:03:f8:08:3e:91:04:b5:d5:25:
ff:89:dc:5b:9a:5e:e8:98:c7:62:6d:c6:5b:8d:a2:74:46:77:
f6:af:30:ae:91:4d:cd:b1:52:ed:25:06:fa:22:ea:21:11:48:
69:4f:be:9a:b7:f9:d8:ad:0f:a6:61:2a:f3:6a:c2:1a:41:8c:
97:3c:6b:b4:de:05:be:a6:4c:9c:24:02:d3:26:e5:53:ca:db:
af:21:a2:a6:3f:2f:6c:85:4e:f0:28:5a:b0:e0:2d:27:fb:b4:
73:86:f6:9a:2e:01:42:66:86:99:6e:b4:18:e9:0c:0e:c2:9b:
3e:fc:e1:24:a7:d7:ca:e5:21:01:70:13:e2:72:7a:d3:2a:3b:
85:ed:b0:87:8d:9b:e8:55:e2:56:d6:0b:ca:d7:5c:a5:ec:c7:
cd:24:e2:8a:2f:ce:c2:d4:76:22:b4:5c:ff:d0:44:92:82:f8:
99:04:bd:58:82:18:bf:25:fe:c4:9d:cc:b8:27:e8:7a:a7:a0:
90:9f:99:09:54:24:07:79:ed:df:45:55:7d:87:e7:10:ef:5e:
61:44:59:fe:79:c1:d6:4c:c1:35:83:bc:dc:7c:4a:9c:f1:ee:
11:85:b9:49:4d:c3:6d:8b:ff:66:0e:72:83:4d:cf:4a:d7:a1:
ac:1a:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:03:28 2024 by rpki-client on console-fra.rpki-client.org