Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/SycqXdDSlwB3eJfe8_13XceYg4c.roa
File: SycqXdDSlwB3eJfe8_13XceYg4c.roa (raw, json)
Hash identifier: KomkpIFjUiVNjcrhAMESvtJCH+pJMAwvLmzuZnClVkQ=
Subject key identifier: 4B:27:2A:5D:D0:D2:97:00:77:78:97:DE:F3:FD:77:5D:C7:98:83:87
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018F967B2856954E2EF6678C3F9983BBC0CE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/SycqXdDSlwB3eJfe8_13XceYg4c.roa
Signing time: Mon 20 May 2024 14:50:04 +0000
ROA not before: Mon 20 May 2024 14:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 147.45.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:7b:28:56:95:4e:2e:f6:67:8c:3f:99:83:bb:c0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 20 14:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b272a5dd0d29700777897def3fd775dc7988387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:6c:02:a1:90:3d:bb:bd:68:e8:2d:da:8a:
f0:9c:49:31:75:f4:e1:96:70:58:3f:f1:8e:82:53:
ca:11:35:66:27:83:a9:2c:3e:b8:c2:ca:b9:02:a5:
dd:d9:a6:70:46:67:aa:0f:5b:f7:ff:5f:88:01:e0:
0e:d2:54:ec:4b:b9:87:f8:67:08:a6:59:3f:5c:92:
23:a6:64:33:97:60:a0:61:08:2d:26:d6:48:bc:34:
02:35:5d:cc:15:da:68:e9:8c:15:34:e4:00:1d:fd:
87:37:fc:bb:f1:62:57:c0:e2:b7:fd:0c:90:ea:e2:
23:f2:6a:74:f5:ce:1f:da:de:68:9e:a7:72:2c:db:
b5:5f:e2:79:77:84:d1:23:29:f9:b4:7a:a9:b0:7e:
a4:95:b7:9b:d4:ee:14:5e:e9:f0:e4:cc:17:b1:fd:
c3:44:c2:a4:95:bd:41:51:32:08:17:be:2f:4b:de:
11:50:eb:10:a1:29:02:3f:1e:a1:71:69:c5:cb:8a:
83:c4:08:85:f5:3f:d8:d6:f3:1c:4b:ab:26:9c:88:
b7:7e:0e:3d:d5:da:3d:1a:eb:49:a4:c5:fc:0b:c5:
fc:d9:b8:65:a2:91:2f:98:d5:21:71:a8:82:d2:1d:
40:da:80:d7:29:2a:fc:f4:5c:bc:07:f9:67:f5:21:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:2A:5D:D0:D2:97:00:77:78:97:DE:F3:FD:77:5D:C7:98:83:87
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/SycqXdDSlwB3eJfe8_13XceYg4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:34:03:96:26:fe:a6:d1:b7:c9:b4:07:95:d2:00:f7:51:67:
ba:60:c6:77:07:64:43:97:90:cb:60:ad:16:77:9a:c9:17:f5:
9c:9c:7f:e6:f7:fc:00:8e:e4:70:29:90:5e:4a:9b:cf:e6:20:
f7:c1:df:77:91:82:e8:e3:43:8d:8f:a7:ce:13:75:8b:fb:7e:
82:97:98:63:1a:db:5f:48:68:a2:6c:9d:0e:b7:62:69:7a:c2:
c1:12:05:55:39:96:91:c1:63:d2:1a:26:5a:8b:9b:fa:0b:23:
5f:bb:0c:59:70:eb:06:5c:7d:22:ee:83:40:45:5a:d4:64:07:
d3:a2:3f:6d:0a:41:9f:56:04:7e:0e:fc:b9:7d:25:d1:80:08:
c6:0e:99:ba:8b:ee:ad:0e:a8:d8:43:12:57:db:b4:91:12:b3:
51:76:cf:9d:bc:ef:f3:e0:3c:18:5c:9b:42:6c:a8:21:f1:ab:
e6:91:8e:33:1b:0a:ac:b9:82:ee:3b:f2:3e:32:c7:05:39:92:
ee:5f:7d:fd:90:d7:4b:1d:c3:be:15:e5:42:57:da:98:71:1a:
56:a3:3a:15:b0:79:c3:12:d6:e2:81:bf:11:66:7e:a2:fb:e1:
23:d2:da:d8:84:9c:7e:a9:8f:3e:07:fb:79:18:62:70:df:07:
f9:cd:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:15 2024 by rpki-client on console-ams.rpki-client.org