Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/SWWdzfKISndFcbrDaPcWAZb2fF8.roa
File: SWWdzfKISndFcbrDaPcWAZb2fF8.roa (raw, json)
Hash identifier: ztLImufapOYp+PNA6WrVd+oJkIBtg2Mg0vDzUCgEpUI=
Subject key identifier: 49:65:9D:CD:F2:88:4A:77:45:71:BA:C3:68:F7:16:01:96:F6:7C:5F
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019178A015952758E3BA876CE1C0278DBD23
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/SWWdzfKISndFcbrDaPcWAZb2fF8.roa
Signing time: Thu 22 Aug 2024 05:47:22 +0000
ROA not before: Thu 22 Aug 2024 05:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205473
IP address blocks: 212.126.113.0/24 maxlen: 24
212.126.114.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:a0:15:95:27:58:e3:ba:87:6c:e1:c0:27:8d:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Aug 22 05:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49659dcdf2884a774571bac368f7160196f67c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:08:81:a5:d7:95:99:82:10:4f:eb:5c:88:
74:14:f6:19:5d:83:d2:94:55:ab:a8:80:dd:5a:53:
8a:e9:a5:6d:d4:f8:8a:fb:1a:1d:db:47:f2:75:b3:
33:50:44:3b:e1:b2:b6:39:d5:e7:e8:9c:04:94:a3:
8e:5b:65:31:78:87:4c:e1:17:81:00:5e:88:4e:d9:
6a:9f:8c:9d:14:c0:74:7b:80:49:dc:6f:62:61:a8:
13:c2:9c:0d:7f:c4:77:15:9a:0c:77:3d:0a:44:38:
26:96:07:c8:a2:f2:2f:e8:3f:69:97:4d:37:fe:47:
7a:e3:13:75:8d:ec:02:1c:72:fb:a0:c6:a4:54:5c:
46:87:47:f2:f4:f0:a3:37:a4:91:7a:5e:72:13:df:
68:74:89:c5:80:ac:ae:c2:81:58:26:22:cf:b5:93:
da:8c:61:5a:92:37:83:c2:fa:7f:f3:a9:15:c7:64:
f7:43:a4:b5:96:fd:53:6a:a7:2f:47:ea:97:60:3a:
c3:bc:10:ee:fa:c8:82:4d:30:bd:bd:d7:cc:a2:f6:
fc:ed:28:a8:b6:ce:1c:e2:3a:20:dc:b3:eb:ed:32:
4f:b3:bd:bb:a1:1b:a1:8d:15:e5:a5:5c:b0:2b:60:
58:85:93:b5:11:03:36:ef:00:9b:8c:c4:94:4c:77:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:9D:CD:F2:88:4A:77:45:71:BA:C3:68:F7:16:01:96:F6:7C:5F
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/SWWdzfKISndFcbrDaPcWAZb2fF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0-212.126.114.255
212.126.116.0/24
212.126.126.0/24
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d9:11:63:50:e9:ef:f2:ad:81:da:0f:05:bb:cb:e6:66:68:
75:36:26:6b:b9:bb:c2:04:25:e6:ce:b1:dc:9d:5f:c6:5d:12:
0c:15:a4:5f:33:f9:55:26:a0:4e:5b:52:a3:29:6a:8c:06:81:
9d:52:9e:14:29:2b:64:30:65:dc:0d:73:66:20:6e:7b:13:d8:
d8:fe:c9:bd:57:f3:50:bd:90:31:cb:bc:e6:52:e9:e8:69:98:
12:15:4d:28:2f:50:f8:91:24:96:c3:52:07:27:27:e2:ea:62:
fc:1a:9e:39:03:89:58:40:35:2c:29:77:87:1e:0a:3e:a5:01:
0a:b1:56:70:36:9f:8c:86:05:b5:03:5c:62:18:ec:93:75:0e:
3c:ff:2b:71:98:9a:1f:54:d5:79:ef:45:75:f8:38:a2:ec:aa:
98:40:2b:34:02:99:df:a5:36:43:68:9e:81:f9:86:93:4b:c4:
d3:31:0f:2e:76:82:46:ec:20:e3:22:3e:8f:41:ef:f4:52:56:
e2:4b:75:ff:c2:24:b6:58:b7:7c:17:95:6c:d5:40:9d:bb:5f:
72:fa:39:65:2d:d1:3e:1c:0e:5d:e9:6b:f8:14:e3:bc:ad:f4:
23:69:08:ce:84:32:09:dd:e4:d6:32:3b:89:96:ad:be:20:2d:
6f:4c:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:15 2024 by rpki-client on console-ams.rpki-client.org