Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/SZGOOruPKWedfDmxobKaRzxqqAY.roa
File: SZGOOruPKWedfDmxobKaRzxqqAY.roa (raw, json)
Hash identifier: bYNMchdUgB6HNSo8VEiNFDSqv4Wh26h28oLdhvQgQzM=
Subject key identifier: 49:91:8E:3A:BB:8F:29:67:9D:7C:39:B1:A1:B2:9A:47:3C:6A:A8:06
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 018CC8024D7F08405BEF290A3187F5E6B96F
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/SZGOOruPKWedfDmxobKaRzxqqAY.roa
Signing time: Tue 02 Jan 2024 02:30:43 +0000
ROA not before: Tue 02 Jan 2024 02:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1764
IP address blocks: 185.57.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:4d:7f:08:40:5b:ef:29:0a:31:87:f5:e6:b9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 2 02:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49918e3abb8f29679d7c39b1a1b29a473c6aa806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:9e:49:8e:2c:78:c8:a0:e6:b1:83:c9:24:
76:69:f6:16:a4:d4:80:4f:c0:95:33:f5:57:6b:8e:
59:63:d6:86:79:eb:18:90:f8:a3:d9:9c:74:45:0c:
17:72:5a:32:d8:45:29:23:a3:66:a9:db:63:e3:5e:
9b:43:1a:b7:ea:62:d2:61:6e:ca:c1:e8:cc:2f:5a:
31:01:dd:ae:aa:5f:db:4c:1c:c4:39:7f:67:5a:f1:
f8:8c:30:74:74:db:e4:7c:06:47:10:22:a6:83:5b:
b4:cb:6e:fe:2e:c1:47:bb:fa:5f:60:d4:0a:5a:6c:
41:6d:94:82:10:ee:59:ab:67:f2:d7:ea:4a:c1:98:
6b:16:a7:42:e3:d2:0d:38:96:75:20:b2:c0:4d:2a:
2b:d6:1d:2b:8e:39:45:49:65:0e:d4:aa:d2:bf:6c:
e4:b4:6c:c7:e9:c6:6b:8a:09:88:14:fc:9e:64:6b:
b0:a7:33:a2:e2:71:67:aa:d1:56:ca:12:85:0f:06:
6d:c7:a3:56:56:d6:6d:cc:99:f4:94:f0:0b:2c:63:
69:6f:e7:51:36:61:ee:3a:f6:bc:d1:c1:12:dc:c1:
7e:e8:63:98:a4:09:15:f3:a0:41:a1:2c:b7:f0:a7:
e2:f8:32:9f:d1:fc:a1:dd:2c:e8:40:8e:ba:5d:39:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:8E:3A:BB:8F:29:67:9D:7C:39:B1:A1:B2:9A:47:3C:6A:A8:06
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/SZGOOruPKWedfDmxobKaRzxqqAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c9:07:f5:f6:50:f6:b4:4a:21:61:27:4d:40:c5:25:cf:a3:
b0:c1:d5:b7:61:55:3a:be:b8:29:4c:2e:9f:33:bf:44:c2:54:
90:a6:3d:48:4a:cd:b9:71:b6:94:8f:63:87:36:a3:2b:31:8d:
39:c0:22:14:e6:26:5f:5b:e3:26:80:4f:66:49:2c:75:c9:36:
02:2f:a1:c5:c0:6e:ac:4f:98:f0:6b:4d:62:3e:8e:21:2c:f3:
5a:89:91:26:f8:c6:b8:6f:26:75:a5:fd:a9:a5:7b:95:46:7e:
f7:3f:f9:53:d5:5b:36:24:58:10:2f:d0:69:f5:70:a1:ba:e1:
b1:5d:6d:a8:c5:1d:c1:d2:81:d4:f0:d9:9c:2b:e2:e0:bb:6a:
94:94:18:16:46:f2:44:65:1c:83:e3:01:33:1d:2b:6f:c8:7f:
7d:82:ad:fd:b7:11:f8:09:12:fe:bb:7a:23:fd:17:5a:c8:6b:
2f:19:70:80:92:1a:a8:f6:12:3c:85:08:86:2b:bb:87:d3:73:
62:6d:8d:91:ea:cb:85:8c:05:e9:83:7d:22:27:c7:18:3e:af:
ea:a1:8b:0d:95:fc:1e:29:01:4b:17:c8:23:0d:79:5c:3a:da:
ba:ae:d8:0d:ac:bc:85:6d:45:68:c5:27:b2:4e:9f:3f:0f:0c:
37:c6:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:50 2024 by rpki-client on console-fra.rpki-client.org