Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/SVTH_KodM5ZU_GycIqoTXe-jfmE.roa
File: SVTH_KodM5ZU_GycIqoTXe-jfmE.roa (raw, json)
Hash identifier: wakLJ50UTCxx308P5+AvoEzZbcyK09eLhAy4pdvj8gU=
Subject key identifier: 49:54:C7:FC:AA:1D:33:96:54:FC:6C:9C:22:AA:13:5D:EF:A3:7E:61
Certificate issuer: /CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Certificate serial: 018D5EC39123ABD6D2CFABB7681872CE0751
Authority key identifier: 0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/SVTH_KodM5ZU_GycIqoTXe-jfmE.roa
Signing time: Wed 31 Jan 2024 09:04:51 +0000
ROA not before: Wed 31 Jan 2024 09:04:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 195.8.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c3:91:23:ab:d6:d2:cf:ab:b7:68:18:72:ce:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9db2f3c0adeab3767c0b31721845ab3d445d1c
Validity
Not Before: Jan 31 09:04:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4954c7fcaa1d339654fc6c9c22aa135defa37e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:93:fa:40:4d:fa:9f:ad:32:be:cf:cc:ac:
fc:46:70:fe:65:70:a1:8a:09:8f:57:17:31:77:a6:
63:5c:61:21:f4:f5:53:86:d1:f2:7d:95:5e:d4:9e:
c7:ea:61:de:f2:a9:17:56:f0:fb:5c:74:ec:46:24:
25:96:69:c2:0e:05:b0:01:2b:51:90:20:59:7f:9a:
e5:ac:43:8b:cf:47:91:6a:2b:ee:d7:d6:ba:6b:66:
5e:ed:4c:0f:d4:51:95:57:e6:d1:c9:7e:4f:ae:a1:
52:46:5e:b2:08:d6:2d:da:a7:5f:f4:ce:03:37:f5:
ea:ea:3a:c9:75:cb:d4:83:0c:0f:af:88:b4:25:c7:
c4:e9:17:4f:4d:61:80:80:91:f3:12:a8:5b:43:9e:
3b:84:c6:75:54:20:52:1e:fe:c7:83:37:59:7a:97:
8f:16:46:5a:0f:a1:24:6b:42:49:e6:53:aa:cf:fc:
ba:f6:a0:a8:63:0c:0b:08:9c:02:8a:68:bf:c9:20:
47:bf:67:ec:31:5e:20:fe:cf:ca:b6:e3:fe:2a:58:
65:5d:3f:cb:be:a0:e8:1d:9a:83:f7:24:6f:bb:b0:
65:6d:ff:90:6c:07:47:14:ba:4a:72:0f:c4:26:0f:
7f:d9:5e:47:54:bd:be:99:aa:4e:ba:8b:7c:27:35:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:C7:FC:AA:1D:33:96:54:FC:6C:9C:22:AA:13:5D:EF:A3:7E:61
X509v3 Authority Key Identifier:
keyid:0D:9D:B2:F3:C0:AD:EA:B3:76:7C:0B:31:72:18:45:AB:3D:44:5D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ2y88Ct6rN2fAsxchhFqz1EXRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/SVTH_KodM5ZU_GycIqoTXe-jfmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7c9457-782b-4115-88b1-0d5ac83c5e60/1/DZ2y88Ct6rN2fAsxchhFqz1EXRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.46.0/24
Signature Algorithm: sha256WithRSAEncryption
01:38:c0:35:2d:45:3f:a9:36:29:af:40:1b:0b:a8:2f:58:1a:
e7:d7:7d:10:b6:de:f3:87:b6:e5:6b:f5:0e:ff:26:10:7d:95:
5b:50:d8:8f:04:3a:a0:27:73:44:17:fb:f5:47:31:ab:f9:f0:
09:5a:e3:46:4a:04:3e:04:6f:0f:6f:5b:86:7d:bd:1b:ae:46:
c2:6e:77:ab:67:05:f2:ef:a8:2a:5f:dd:7c:d1:57:35:a0:44:
f5:1c:c9:d1:3e:51:37:72:cd:22:5b:cd:96:e1:7f:bb:a1:ea:
62:45:1c:f5:c2:70:a1:e9:4d:c9:9a:ab:68:46:a8:65:45:bd:
a1:a1:12:7b:ac:eb:fd:8d:b9:37:13:a9:f6:c6:a4:f0:41:ad:
b4:ed:ef:c7:2a:b1:19:2b:da:67:1b:57:54:83:00:58:13:1e:
aa:69:0d:13:2c:48:78:4b:46:5b:cf:7a:d6:e7:d3:97:ce:69:
39:36:61:19:d9:72:bf:8c:fb:21:09:18:44:98:86:f3:39:78:
a1:08:b9:57:ad:87:8e:32:a7:8a:2d:9e:0c:d0:5e:80:79:41:
cc:d9:da:cb:ed:58:7c:ff:c7:14:02:c3:46:77:06:3a:f8:26:
b4:93:e9:80:b6:b3:95:a3:11:04:aa:6e:9a:5b:b9:3c:e6:c4:
c8:51:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:07:30 2024 by rpki-client on console-fra.rpki-client.org