Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/SmBjTazGSz0OgvPyU7MvO-9GM_A.roa
File: SmBjTazGSz0OgvPyU7MvO-9GM_A.roa (raw, json)
Hash identifier: f9YEFsXdW7t0RbrE8jWlLU3rUYmuNHCFUav1qtc9NVg=
Subject key identifier: 4A:60:63:4D:AC:C6:4B:3D:0E:82:F3:F2:53:B3:2F:3B:EF:46:33:F0
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 018CC42548DA5286410E1A85BBF2EDF5AF67
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/SmBjTazGSz0OgvPyU7MvO-9GM_A.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56683
IP address blocks: 193.194.117.0/24 maxlen: 24
193.194.118.0/24 maxlen: 24
193.194.116.0/22 maxlen: 22
193.194.116.0/24 maxlen: 24
193.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:48:da:52:86:41:0e:1a:85:bb:f2:ed:f5:af:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a60634dacc64b3d0e82f3f253b32f3bef4633f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:1d:fa:8b:8e:74:46:ed:18:72:d9:ba:26:
4a:3b:27:cc:00:3b:16:b8:5a:c3:6f:cf:7e:f7:5e:
80:57:2b:82:85:a3:14:17:2a:8b:5c:60:d8:ec:3a:
b8:9b:d0:8b:4a:29:b4:47:d2:50:bb:e6:22:6c:5e:
d2:16:da:90:dc:8f:67:1e:58:f3:0f:79:02:98:a4:
68:4a:90:42:cf:70:a9:8d:ba:17:1d:81:fb:fa:9a:
82:62:4a:47:87:4d:d9:b4:91:13:16:56:2e:e6:16:
fd:f7:c2:e6:84:39:60:4d:25:4b:1e:55:dc:65:67:
0e:ef:28:18:52:c4:a3:26:32:e4:df:82:84:af:b6:
5c:96:cd:3e:c9:76:1a:25:ee:fb:dd:bb:dd:c1:25:
ea:bc:9e:be:49:e2:64:42:b5:f3:f4:58:62:77:70:
a0:fc:b8:74:82:19:81:98:aa:39:0f:88:ca:22:52:
d1:f8:eb:77:7e:77:82:53:bc:c2:e2:1a:c6:1e:b2:
9e:69:18:f0:a6:a3:70:b6:00:26:fc:bf:11:42:81:
ae:2b:ea:87:8a:18:b5:a1:30:57:ef:02:ff:d3:55:
6b:87:ee:b5:12:96:4b:72:bf:58:1b:3e:c9:18:e0:
42:70:d4:d9:5e:cc:2e:30:29:d3:ea:5e:6b:62:94:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:63:4D:AC:C6:4B:3D:0E:82:F3:F2:53:B3:2F:3B:EF:46:33:F0
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/SmBjTazGSz0OgvPyU7MvO-9GM_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.116.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:f7:35:c6:fa:fd:7d:4d:10:4c:48:56:aa:03:b9:c2:7a:ea:
01:f9:b9:e7:0a:d9:cc:da:40:4f:e8:15:47:25:98:80:18:9e:
4d:29:40:86:6f:44:df:6d:90:3b:bb:44:ff:56:05:db:69:cc:
09:e7:b9:42:f5:3a:7d:ab:81:19:31:60:8e:cf:91:e5:86:99:
ca:05:0d:b8:4e:ce:84:39:2b:20:43:a2:f4:99:3d:69:32:c9:
64:80:47:98:c4:fc:6e:ce:e9:b8:56:b7:74:72:85:45:4d:1d:
c2:b2:e5:e9:9e:2a:9a:fb:b4:01:23:46:7d:37:c7:d9:c6:3a:
59:f8:37:a4:18:98:1e:fe:0b:40:5d:60:88:68:0f:f2:0c:a5:
fd:fa:79:f7:d3:00:cc:9b:47:de:b2:f2:c3:ac:e1:1c:0d:2f:
3e:cc:17:49:e4:53:b7:38:21:f2:04:c7:9b:e3:a4:3c:dd:76:
61:81:67:22:8d:c2:8d:26:7a:d8:c5:01:bf:90:e1:f5:c8:9f:
38:ac:85:aa:3f:fa:3d:8b:d5:57:f8:7a:62:4a:06:49:c8:cc:
85:6c:ee:bd:83:42:23:b1:e2:96:44:7b:e0:ae:e9:7f:a5:7a:
6a:13:44:b7:18:bc:ad:9d:dc:65:8e:0f:75:12:c2:4c:1e:15:
04:8e:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:31:54 2024 by rpki-client on console-ams.rpki-client.org