Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/sOm5M1bgPuqs5J0U3rep3-hw4EI.roa
File: sOm5M1bgPuqs5J0U3rep3-hw4EI.roa (raw, json)
Hash identifier: xZxjbS5JBy6gp4bjvm0Mhm38sc5aImGk5HrkOkuYp4o=
Subject key identifier: B0:E9:B9:33:56:E0:3E:EA:AC:E4:9D:14:DE:B7:A9:DF:E8:70:E0:42
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 018CC49357AD9B182AF36F73EA124E4993D4
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/sOm5M1bgPuqs5J0U3rep3-hw4EI.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59472
IP address blocks: 5.152.160.0/21 maxlen: 24
185.94.68.0/22 maxlen: 24
2a01:8f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:57:ad:9b:18:2a:f3:6f:73:ea:12:4e:49:93:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0e9b93356e03eeaace49d14deb7a9dfe870e042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:7c:fc:77:62:18:cf:87:c3:1f:2a:1c:cf:
ac:7e:00:d4:4a:17:3b:c9:6f:14:eb:53:09:a0:40:
78:60:36:5e:93:b5:da:ed:93:08:fe:fc:bf:ae:f4:
3f:c6:f2:5b:fa:ce:a9:ed:08:33:bb:81:03:28:61:
89:da:f8:dd:d1:57:22:8e:d9:13:6a:60:c6:fd:3d:
a7:fe:2f:69:eb:6c:26:b6:8a:c7:48:76:7e:7b:a4:
be:6e:1f:c1:73:25:9e:a9:f7:60:e7:ab:80:85:5b:
d1:b3:4a:7f:f5:fe:aa:35:5d:1c:71:62:8b:3d:57:
27:ad:ba:93:c1:a7:4a:74:c3:93:82:4d:dd:25:9a:
2e:ab:15:bd:d9:ae:36:c8:d2:8a:6f:8b:72:0e:7b:
5b:7d:9a:6b:47:9f:60:43:18:62:c4:87:d7:f4:7d:
b1:0d:b7:52:92:bf:07:0f:ba:d1:d7:69:47:0d:a9:
ba:38:34:77:4d:7e:a5:2c:e7:0f:59:31:3b:b3:6b:
67:9f:02:ff:df:0e:15:8f:fe:76:5b:b0:2b:01:20:
6a:4b:c1:d5:9d:69:2c:7b:9a:1f:29:d4:5e:ce:92:
1d:89:4a:14:4d:a0:a9:ff:10:f2:7f:28:50:9f:45:
ed:0d:3f:bc:f2:f9:a5:04:57:27:3d:a0:90:f5:5f:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:B9:33:56:E0:3E:EA:AC:E4:9D:14:DE:B7:A9:DF:E8:70:E0:42
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/sOm5M1bgPuqs5J0U3rep3-hw4EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.160.0/21
185.94.68.0/22
IPv6:
2a01:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
70:c9:39:eb:7a:ba:2a:f6:cd:16:d9:20:1f:a1:17:3e:8d:aa:
04:3a:04:ea:d8:26:42:9b:33:99:23:28:61:5a:04:8f:d4:16:
c7:0f:8b:77:a4:8d:c4:dd:e3:25:04:84:2f:85:59:20:c5:6d:
4a:e2:f0:f9:da:55:fe:59:97:d5:38:9d:15:c6:71:1f:a1:70:
20:1a:2b:ed:61:50:8b:d0:49:a6:2c:b7:2b:7b:2d:cc:fa:92:
94:eb:ad:18:99:ca:07:3a:a4:e5:7d:d8:24:fe:0b:51:4c:24:
dc:b4:86:25:1c:45:23:21:e8:7e:b9:31:53:f2:7f:e3:86:2c:
38:e6:07:f0:d7:25:ec:22:74:1e:11:c1:d7:6b:53:87:9a:50:
cb:2f:a1:fc:89:76:f7:f8:44:bc:5a:3a:29:35:25:3a:58:10:
07:d2:8e:55:5f:62:c4:66:ad:a7:71:09:bc:dd:cd:f3:f9:ff:
94:b3:78:8d:e4:97:94:ee:7d:8c:fb:eb:14:95:5d:f6:24:c7:
09:95:78:64:d5:0c:91:55:42:08:4c:ad:28:4c:fd:17:4b:be:
af:10:17:61:a5:2a:9c:c7:e7:79:8d:f9:0d:c2:66:0f:7e:ec:
b9:cb:96:40:5c:f5:b5:d7:f5:de:64:22:82:0d:b3:71:e8:e7:
16:91:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:31 2024 by rpki-client on console-ams.rpki-client.org