Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cSChBIa_5LNsJUUXev288DqLLl4.roa
File: cSChBIa_5LNsJUUXev288DqLLl4.roa (raw, json)
Hash identifier: xOWHrmVcg8GEkoryzCqj2FM9uEaPH84zZvTu6sVIIkM=
Subject key identifier: 71:20:A1:04:86:BF:E4:B3:6C:25:45:17:7A:FD:BC:F0:3A:8B:2E:5E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018F8608A5D7A3AD9CC2990D913CD817202F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cSChBIa_5LNsJUUXev288DqLLl4.roa
Signing time: Fri 17 May 2024 10:11:04 +0000
ROA not before: Fri 17 May 2024 10:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 77.47.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:08:a5:d7:a3:ad:9c:c2:99:0d:91:3c:d8:17:20:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 17 10:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7120a10486bfe4b36c2545177afdbcf03a8b2e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:83:bc:97:8b:df:1e:b0:ae:3d:f2:4c:09:
f9:5b:b8:5d:68:bc:a9:6f:15:aa:f9:0c:75:11:0b:
d8:17:99:af:eb:6a:79:5d:87:62:a0:14:ea:fe:a4:
f5:f0:ab:7f:dc:cb:90:fa:99:db:2a:20:74:a7:43:
62:7a:19:00:58:51:0e:c9:db:61:b1:b2:67:a9:28:
54:0a:d7:84:97:f9:0f:e2:cf:e3:24:fc:91:0c:24:
14:b7:be:d9:1b:15:f1:13:88:85:b2:1e:56:01:fb:
f8:2d:75:0d:8f:59:1b:2e:30:0a:b6:81:74:7d:f6:
73:cb:9a:20:c9:27:00:27:8b:26:93:8a:0e:97:35:
fc:92:0c:e6:93:6b:24:7d:79:51:66:78:3d:63:44:
15:7c:83:c9:f4:13:ef:f9:85:ca:82:d0:ab:33:8e:
13:54:fb:26:9e:a6:fb:02:75:54:72:a1:a1:a4:b4:
dd:17:bb:1c:0b:87:d0:ef:19:4c:a0:72:07:84:92:
35:6c:2f:13:62:58:13:28:b1:9a:9a:2d:27:4a:b1:
f9:b6:a4:08:e7:a2:a0:25:03:4b:ba:20:d8:c2:16:
94:66:76:3a:5b:6e:bf:f5:77:13:63:e0:e1:e4:81:
d5:d9:2c:48:d6:4d:a1:2c:6c:01:2d:c4:b6:c3:55:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:A1:04:86:BF:E4:B3:6C:25:45:17:7A:FD:BC:F0:3A:8B:2E:5E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/cSChBIa_5LNsJUUXev288DqLLl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:34:98:4a:34:cc:42:bc:2c:a3:c8:c7:4d:20:50:d2:d0:9f:
4e:42:86:13:99:19:1b:59:df:a0:29:4b:f4:15:6d:36:2d:48:
91:14:65:10:e6:24:fb:61:06:fe:2c:e2:6a:54:10:37:f4:0c:
9a:f7:da:91:34:16:64:98:07:a7:58:67:04:75:39:93:9d:63:
85:26:12:22:ff:81:a0:ed:d4:a7:e9:06:42:f4:e3:40:97:e5:
dd:6e:b2:36:1d:0c:67:df:7a:98:d8:bc:fb:f3:d1:e9:11:7c:
7e:e3:82:99:69:bf:6b:09:15:62:2c:10:02:ea:6b:05:2f:26:
25:20:da:9f:a6:68:85:c9:15:3c:8d:0c:a1:15:29:cc:7a:08:
8e:97:a8:c6:8e:66:b6:29:b7:75:d1:a9:47:ad:76:a3:12:6a:
5e:39:42:85:6f:81:55:a3:5e:bd:2c:a1:e1:cf:bc:29:37:75:
7d:00:fb:04:45:c3:f7:35:45:f4:53:33:a3:c4:04:b0:c1:c3:
fd:03:b0:ee:78:7b:13:81:82:45:f5:75:78:77:e4:71:11:13:
52:d6:c5:e9:2f:c9:a3:66:8c:62:9c:7c:74:27:2a:d3:e6:a5:
89:31:6a:00:75:7d:9a:07:af:96:bd:da:41:a8:9f:a0:c9:9c:
b7:19:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:03:04 2024 by rpki-client on console-ams.rpki-client.org