Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/SW6q4hKIn0ciliQxfWy-2X7mlH0.roa
File: SW6q4hKIn0ciliQxfWy-2X7mlH0.roa (raw, json)
Hash identifier: vYKGq0jt6uLyHL7po+j8TQFIF8T84yBCoPFnq7skYYM=
Subject key identifier: 49:6E:AA:E2:12:88:9F:47:22:96:24:31:7D:6C:BE:D9:7E:E6:94:7D
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 018EC35419867D58F14033D2FB64C37190BB
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/SW6q4hKIn0ciliQxfWy-2X7mlH0.roa
Signing time: Tue 09 Apr 2024 14:47:32 +0000
ROA not before: Tue 09 Apr 2024 14:47:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 81.94.240.0/20 maxlen: 20
185.119.180.0/22 maxlen: 22
2a01:9b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:54:19:86:7d:58:f1:40:33:d2:fb:64:c3:71:90:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Apr 9 14:47:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=496eaae212889f47229624317d6cbed97ee6947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:73:bb:5a:7d:28:55:b0:18:ab:16:03:6f:
0a:bc:c8:0b:a0:a9:61:3a:33:c4:55:95:c4:5e:35:
c1:8c:16:57:e8:ae:da:6c:57:b1:b6:a0:16:ed:e0:
3d:e1:0a:8e:76:f4:7b:a6:68:21:c6:57:68:00:21:
31:1d:c9:5a:b9:c4:39:40:26:15:dd:8e:f6:00:9b:
18:8b:91:35:82:49:2b:50:11:2b:b8:bf:6f:a9:bb:
7f:fc:78:a5:5f:fb:78:30:66:e8:0a:4a:07:00:dd:
50:5f:bc:d2:24:9e:0b:82:52:98:37:ea:42:04:a7:
a0:21:3f:80:11:b7:53:e6:d5:9d:89:30:ce:55:d0:
59:ca:01:80:ca:81:86:da:a0:dc:9d:20:58:89:4c:
a6:c3:f8:8e:94:ca:8a:68:8a:db:d6:27:09:41:96:
1e:6c:bb:6e:af:4c:a5:91:10:bd:d7:1c:69:bb:b4:
44:b9:80:3f:25:6c:c0:bb:df:aa:9d:15:a2:b3:55:
bf:a9:34:d4:bf:15:8a:92:03:94:f1:23:0f:ec:0c:
82:56:86:18:9f:38:ec:f8:9f:20:60:1d:26:ba:f9:
52:ad:8d:53:98:ee:14:14:2c:82:2b:30:2a:41:31:
8c:4e:d0:72:6d:2e:dc:e0:98:ef:60:9d:14:3f:64:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:AA:E2:12:88:9F:47:22:96:24:31:7D:6C:BE:D9:7E:E6:94:7D
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/SW6q4hKIn0ciliQxfWy-2X7mlH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.240.0/20
185.119.180.0/22
IPv6:
2a01:9b80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:f9:01:d0:4a:58:1b:27:bb:5a:b7:ad:b5:e2:93:a0:20:f9:
76:50:3f:a7:51:7d:42:7d:c7:80:71:ed:23:f8:13:38:b8:dc:
5c:a5:0d:b4:3b:6b:e7:dc:00:ef:87:45:45:d4:68:b8:9a:39:
38:30:b1:19:3d:ab:51:98:c3:15:54:1e:52:4a:ca:e6:33:57:
73:27:8d:34:21:52:1a:d6:44:33:7d:a2:4e:ce:18:74:08:3d:
a8:c3:bb:05:c2:ee:a3:cd:50:6c:8d:55:03:24:e1:b2:25:d1:
ec:a2:da:1a:3a:5b:da:da:82:26:e2:d8:de:40:ed:f9:cf:71:
38:86:41:c0:07:90:d5:ef:f7:b7:aa:ae:ec:e0:10:08:7e:0a:
13:8e:9c:00:8a:69:06:b7:05:d5:8d:db:4e:2f:5c:9c:71:d2:
cb:83:f3:c0:4d:65:77:ce:96:6f:30:19:64:9d:1c:69:ba:96:
1f:ea:f4:32:b2:3c:58:81:b6:fe:1d:db:c1:26:3b:c6:ee:f4:
c6:c5:5b:e7:bd:b9:b7:cd:00:cf:08:27:dc:3b:5f:06:77:d6:
14:4c:70:1d:71:8d:8d:0f:8f:38:db:4e:09:1f:1e:49:01:ed:
f3:a7:6b:75:07:0c:11:42:45:a6:4e:0f:f3:47:e6:d3:2b:70:
46:88:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:37 2024 by rpki-client on console-ams.rpki-client.org