Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/SiSWH4dsJFFFCQZZ0Ap90gQIjAg.roa
File: SiSWH4dsJFFFCQZZ0Ap90gQIjAg.roa (raw, json)
Hash identifier: PA7eoym4jTOyLJlckbr0wbSvG/buGKIffU/+PUSTyR0=
Subject key identifier: 4A:24:96:1F:87:6C:24:51:45:09:06:59:D0:0A:7D:D2:04:08:8C:08
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 018DE9975FF6CC3190000F793265C1DDDFDF
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/SiSWH4dsJFFFCQZZ0Ap90gQIjAg.roa
Signing time: Tue 27 Feb 2024 08:03:48 +0000
ROA not before: Tue 27 Feb 2024 08:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215806
IP address blocks: 195.47.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:97:5f:f6:cc:31:90:00:0f:79:32:65:c1:dd:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Feb 27 08:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a24961f876c245145090659d00a7dd204088c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:05:9b:bf:f8:b5:9a:f2:74:e7:38:c1:5b:
7f:f2:36:58:b3:61:3f:89:a8:46:a0:ef:49:48:65:
e7:53:ab:2b:35:a7:34:73:68:89:c1:64:37:85:69:
ca:f9:e5:6a:73:d8:f6:54:b6:09:7a:7e:fb:f1:0d:
38:95:1c:65:d0:5f:6d:5d:31:32:a1:77:d5:03:73:
b1:c7:2e:84:50:7b:f3:ec:0c:c0:3f:2d:8b:28:d0:
fd:ef:76:28:0c:92:65:38:df:ba:45:4d:c9:fd:49:
c9:d3:ae:bf:37:47:8e:43:7b:0d:83:70:e2:9e:dd:
57:81:64:63:36:fb:c2:a5:ea:ea:be:9f:9b:1c:17:
fa:a1:ef:6d:65:9d:a9:bc:18:cb:04:d7:ba:6a:e7:
6f:44:3c:73:28:f5:8e:b1:37:65:06:cd:04:e5:fd:
20:70:8b:0a:2a:87:2f:a9:4b:41:94:84:7f:1b:e8:
37:fd:a1:db:8a:88:e2:7b:94:15:a6:3b:b2:e9:92:
49:3b:3e:8e:f7:09:36:d4:11:d1:68:6c:c3:0d:4c:
ac:c3:18:dc:cd:bb:1c:1a:cf:74:fd:fc:1b:9d:d2:
db:48:79:77:9a:5f:09:81:13:6e:7f:4a:1b:c1:1e:
3c:85:e3:c1:6d:1e:10:26:d8:16:b1:46:bc:f7:2b:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:96:1F:87:6C:24:51:45:09:06:59:D0:0A:7D:D2:04:08:8C:08
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/SiSWH4dsJFFFCQZZ0Ap90gQIjAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
50:99:64:28:c6:ae:49:99:d8:18:13:34:0f:00:e9:8f:2f:c1:
06:55:22:7c:80:a9:91:53:f4:04:3e:9d:69:84:04:ce:a8:58:
a7:38:dc:a2:1c:46:d5:37:7a:43:f7:87:f4:09:29:9c:88:bf:
0d:c0:63:e5:65:01:90:9b:86:5e:e4:7c:37:6d:d6:86:fa:e5:
fe:39:9d:48:63:38:e5:0d:bf:14:94:30:b9:27:be:4d:7f:c5:
57:84:1b:b8:d8:07:21:a4:97:b4:f5:78:7c:fd:0c:a4:ff:9f:
e4:12:97:4b:14:7e:88:cb:eb:1d:79:73:8b:09:91:11:dd:c7:
57:fb:d5:9d:c4:16:4b:26:50:4c:db:6d:14:c8:50:a8:22:1e:
8c:0a:7a:af:0d:06:3d:ff:c0:0d:d4:57:4d:1b:34:6a:d9:79:
22:e7:3d:19:2a:ee:2a:f8:6d:99:0c:8c:f6:bb:d6:3a:09:17:
e0:12:b2:6f:a7:59:6f:73:4d:1a:0f:03:e5:f8:c9:d1:83:4c:
4c:24:f0:3f:e6:f2:12:77:43:10:ae:fe:bf:20:3e:dc:7f:00:
ac:07:29:0f:b0:5c:7b:c7:ee:98:e3:3c:34:9a:84:2c:0d:50:
d5:68:ba:c6:3e:50:a5:57:01:29:ca:f4:96:7a:0a:25:e9:ec:
c5:15:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:24:55 2024 by rpki-client on console-ams.rpki-client.org