Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sPChbcTGMZ5bW10brJUBZEgwHb0.roa
File: sPChbcTGMZ5bW10brJUBZEgwHb0.roa (raw, json)
Hash identifier: CyY0xB47+xox0QtcnKKABYba8cIRgxVgSOhuz+YDTWg=
Subject key identifier: B0:F0:A1:6D:C4:C6:31:9E:5B:5B:5D:1B:AC:95:01:64:48:30:1D:BD
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E05C168A01EDB1F036342FB9C854
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sPChbcTGMZ5bW10brJUBZEgwHb0.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202360
IP address blocks: 194.6.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e0:5c:16:8a:01:ed:b1:f0:36:34:2f:b9:c8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0f0a16dc4c6319e5b5b5d1bac95016448301dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:57:bc:76:8a:a6:46:38:4d:36:17:49:55:
09:ee:7e:9c:cb:e5:fd:ca:08:55:16:06:50:33:cf:
6f:2a:07:97:70:b6:17:49:49:78:a8:18:e6:1d:25:
04:06:3c:99:1b:4b:17:39:5d:0b:ed:04:0d:6e:99:
03:e0:4a:33:41:b1:06:56:4d:2f:cd:40:c7:43:9d:
fc:63:57:99:d3:7e:3b:0c:ba:a2:87:45:26:ed:ec:
da:67:66:d5:d5:63:45:10:0e:9a:7a:d2:b3:f4:7f:
42:22:bd:8f:f6:3b:b3:94:78:19:62:47:1c:da:db:
f5:f2:b6:fb:4c:97:f0:51:2a:b2:8b:a9:c9:75:7e:
e0:79:7d:99:1f:45:f7:92:de:84:ae:5d:0e:8e:da:
18:3f:d6:53:70:f1:11:e6:61:d0:c2:04:b9:f1:a4:
b8:ec:7c:5c:9f:2f:88:51:cc:f5:b9:14:5d:fe:7c:
5b:49:dc:82:91:ce:43:ef:00:1e:48:a8:9c:1b:31:
f4:0b:08:04:87:50:e4:0e:b6:75:96:f4:b4:bc:30:
e4:1c:c2:ea:ac:a1:d2:e3:2d:0e:aa:dd:ff:60:c4:
53:54:da:b0:53:ec:c1:d0:d5:1a:87:4c:7a:56:86:
c7:67:1f:66:56:37:a7:89:69:50:60:97:ff:82:2d:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:A1:6D:C4:C6:31:9E:5B:5B:5D:1B:AC:95:01:64:48:30:1D:BD
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sPChbcTGMZ5bW10brJUBZEgwHb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0c:12:88:0e:11:b4:5c:e8:db:d0:c1:7d:ae:2f:9a:ae:96:
5b:96:a3:06:5f:24:9c:6e:d4:0f:63:2d:ee:d3:c1:b6:b2:4c:
89:16:9b:89:75:5e:6f:8e:72:24:79:54:5c:ce:a1:17:6d:48:
26:b1:57:bf:4e:f6:9e:d0:56:84:75:84:98:3b:17:4a:91:92:
bc:7b:59:92:ce:f5:ff:20:14:1a:04:3b:13:63:e3:81:72:77:
09:ca:37:f1:30:09:4f:14:b4:3d:42:0a:cf:94:6e:37:c0:41:
4a:26:e9:8e:db:39:e9:6a:f6:bd:a6:c3:e1:36:d0:c2:56:90:
31:8b:01:57:5d:81:dc:ad:da:db:aa:fd:af:22:01:7b:74:72:
63:61:8b:ed:74:de:19:b9:4b:6b:d3:f3:69:d4:c0:fe:a0:0f:
06:4c:d4:37:76:04:ce:63:f3:84:45:42:9d:51:af:7b:51:f5:
7e:34:4c:f4:7d:1c:eb:6a:ab:10:98:99:97:92:b7:d8:ab:6d:
64:a7:a2:ea:e4:55:67:bb:1d:ea:15:53:46:e8:95:39:0f:99:
e8:9a:c2:2b:44:23:f6:a8:9d:a8:81:e0:c0:9c:c6:b3:1b:d7:
be:07:24:96:f3:1d:e5:7f:9c:d4:53:89:a6:0d:fa:0d:10:df:
b5:89:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:36 2024 by rpki-client on console-ams.rpki-client.org