Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/SVjYzRzLsfuD9tW3u891Dok74ns.roa
File: SVjYzRzLsfuD9tW3u891Dok74ns.roa (raw, json)
Hash identifier: h6kqcSgB5gx8nvG7f9BIda2PEtavpipoixzTLQ+B6jk=
Subject key identifier: 49:58:D8:CD:1C:CB:B1:FB:83:F6:D5:B7:BB:CF:75:0E:89:3B:E2:7B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018CC3489A37776637C27B493AE0CEF9EE42
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/SVjYzRzLsfuD9tW3u891Dok74ns.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 212.116.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9a:37:77:66:37:c2:7b:49:3a:e0:ce:f9:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4958d8cd1ccbb1fb83f6d5b7bbcf750e893be27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:83:dd:40:23:4d:70:7c:09:57:6d:1d:15:
ad:ed:72:11:f6:6c:e4:36:a1:3a:2a:90:20:c6:11:
5c:66:bb:82:09:19:63:7a:92:3d:89:1d:b6:9f:b9:
fd:d7:9a:fc:8c:91:e1:6c:7d:8c:61:b1:38:ee:ab:
53:a6:df:ee:85:e9:3b:d7:a8:0e:70:28:2e:13:f0:
2c:51:8b:d6:32:02:e2:65:39:2d:7c:a7:57:5f:c4:
10:7d:2f:04:ae:30:d3:4a:d4:37:dd:d7:02:38:98:
e5:2f:cc:cb:2d:cb:77:56:8b:8b:36:21:51:a7:62:
29:7d:4c:b1:cc:b3:fe:f5:33:44:e8:c0:30:38:bf:
5d:16:af:b6:46:55:19:cc:ec:b5:a3:8d:6a:0a:65:
10:11:9e:c7:b0:0c:d0:c5:96:91:b6:0e:c7:c3:8f:
cb:b8:1f:0b:12:47:bd:5c:ef:d3:9d:3a:54:2b:2f:
53:08:c8:a1:65:71:ea:c6:80:0d:23:cb:4e:57:3b:
ab:2a:4c:cc:ac:fe:8b:3b:70:ef:55:49:8b:a5:74:
56:7a:7e:19:4b:4f:35:40:1c:6f:a4:17:7d:4d:bd:
49:de:e0:13:c4:06:c4:27:70:1b:31:23:44:86:fd:
a9:12:eb:8d:0a:77:35:b4:4c:7d:1e:70:ec:16:94:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:D8:CD:1C:CB:B1:FB:83:F6:D5:B7:BB:CF:75:0E:89:3B:E2:7B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/SVjYzRzLsfuD9tW3u891Dok74ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:d0:9b:cd:30:24:2d:cd:88:ab:10:d4:fe:ac:0b:f6:70:fb:
46:ce:52:7d:16:c3:b6:61:e4:c8:1b:f6:e6:c1:12:be:95:7b:
f7:18:92:76:4e:93:cd:19:e1:73:f2:71:ce:d7:79:40:be:9f:
f1:eb:4e:1e:02:87:c7:e6:00:d0:d6:5d:c8:14:d5:c6:e9:7a:
2c:a4:6f:7b:e1:12:70:fd:34:0a:50:a8:bd:74:14:66:54:9a:
49:e9:19:8d:af:52:d2:85:7b:60:02:ca:bb:30:07:e8:6d:71:
10:14:2a:4b:3a:e3:2b:95:69:02:27:7c:aa:be:35:bd:36:b8:
04:19:be:97:79:d7:51:30:f7:84:8a:19:20:1f:95:c1:6c:9e:
d8:8f:d2:a4:3c:30:82:f5:1f:db:70:55:92:82:1d:30:d8:cf:
75:1e:00:fc:08:42:6e:6d:5c:b1:ab:83:2f:e6:01:75:13:00:
72:9c:2b:65:14:16:c1:d2:07:66:b5:48:41:04:59:dc:97:6e:
62:67:89:8a:a2:37:b2:8a:6b:c9:82:85:e9:4d:c1:4c:f8:96:
31:e5:dc:3d:73:29:5c:f4:34:ae:d8:74:27:ba:b1:8c:a0:51:
55:38:ae:8f:21:c7:d9:b8:92:2c:98:91:d0:f0:d6:09:b6:ea:
52:c1:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:13:39 2024 by rpki-client on console-ams.rpki-client.org