Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/SmVC_klti-gl_TIgkUw3U36PLq0.roa
File: SmVC_klti-gl_TIgkUw3U36PLq0.roa (raw, json)
Hash identifier: 5TDZkPUKsTMw0sf7aFQNqyeD3ES+nj6C5dwI60rbnw8=
Subject key identifier: 4A:65:42:FE:49:6D:8B:E8:25:FD:32:20:91:4C:37:53:7E:8F:2E:AD
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 018E091B00C9FCC6BBFC4840EB881AFE9243
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/SmVC_klti-gl_TIgkUw3U36PLq0.roa
Signing time: Mon 04 Mar 2024 10:55:48 +0000
ROA not before: Mon 04 Mar 2024 10:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12350
IP address blocks: 185.133.28.0/22 maxlen: 22
194.38.64.0/19 maxlen: 19
194.38.160.0/19 maxlen: 19
194.148.4.0/22 maxlen: 22
194.148.8.0/21 maxlen: 21
194.148.16.0/20 maxlen: 20
194.148.32.0/19 maxlen: 19
194.148.96.0/19 maxlen: 19
195.15.0.0/17 maxlen: 17
212.28.128.0/19 maxlen: 19
212.40.0.0/19 maxlen: 19
212.109.64.0/19 maxlen: 19
212.147.0.0/17 maxlen: 17
212.147.79.0/24 maxlen: 24
212.232.128.0/17 maxlen: 17
212.254.0.0/16 maxlen: 16
213.5.152.0/21 maxlen: 21
213.162.0.0/19 maxlen: 19
2001:4c78::/32 maxlen: 32
2a03:a360::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:1b:00:c9:fc:c6:bb:fc:48:40:eb:88:1a:fe:92:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Mar 4 10:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a6542fe496d8be825fd3220914c37537e8f2ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:09:05:d9:6d:b6:c9:f9:00:82:b6:ca:b7:
ec:fe:0c:62:60:a7:65:c8:e6:81:f0:94:53:58:bf:
49:54:1e:9a:b0:f2:b9:71:f4:20:58:d2:79:90:36:
b9:b2:28:b5:20:38:37:91:2f:0e:03:80:15:11:62:
3b:0a:c7:c1:7a:65:39:9e:b1:bf:ff:66:47:9a:d0:
13:0b:57:be:26:e4:83:d0:55:d3:7b:db:f8:39:8c:
44:cf:f0:9b:71:a7:23:89:58:99:07:01:34:dd:b9:
d6:82:a4:e9:08:a6:de:e1:fe:9c:4f:1f:fa:5b:13:
2d:0f:43:a0:96:5f:7f:86:7f:11:95:1a:12:b8:99:
5b:0d:64:7c:32:be:38:31:9d:96:3a:8d:7a:55:b5:
70:89:7f:7b:25:22:29:aa:76:7b:4d:d6:8a:8b:38:
9c:67:d3:9a:4f:01:38:d5:a9:bb:01:9e:df:99:f2:
48:4d:d0:0c:07:14:a0:dd:b1:f9:2d:56:01:75:22:
53:8d:01:13:24:51:bd:fe:45:49:02:fc:74:73:8b:
28:75:01:ff:c9:ce:4f:b8:55:d7:0d:39:13:49:09:
7e:6f:ac:fe:a3:ce:47:a7:dd:7a:ef:e3:34:af:92:
cf:62:51:09:83:a6:b9:c1:81:1d:20:52:b7:5b:bd:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:42:FE:49:6D:8B:E8:25:FD:32:20:91:4C:37:53:7E:8F:2E:AD
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/SmVC_klti-gl_TIgkUw3U36PLq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.28.0/22
194.38.64.0/19
194.38.160.0/19
194.148.4.0-194.148.63.255
194.148.96.0/19
195.15.0.0/17
212.28.128.0/19
212.40.0.0/19
212.109.64.0/19
212.147.0.0/17
212.232.128.0/17
212.254.0.0/16
213.5.152.0/21
213.162.0.0/19
IPv6:
2001:4c78::/32
2a03:a360::/32
Signature Algorithm: sha256WithRSAEncryption
05:01:33:5a:61:59:c3:38:58:54:d0:be:e1:c0:22:49:d3:dc:
07:a2:94:41:fb:e1:9d:8c:74:6b:8d:7e:19:4c:f9:ad:d1:0a:
3c:d6:01:85:a9:66:54:a7:47:67:58:55:e6:c5:c8:fa:7a:6e:
0d:94:ed:4f:17:93:2e:5c:e2:7b:b2:20:a7:02:fe:3b:da:46:
40:42:e1:f9:b8:f0:a9:ae:c9:f6:f9:5c:f2:fe:3a:83:e6:98:
77:da:db:32:47:b4:f5:4e:44:9c:a9:99:f9:3f:89:65:fe:58:
d9:64:70:25:48:65:56:a2:c1:f1:15:0a:05:83:ad:7f:d9:5e:
24:6b:e5:47:90:cb:a8:65:3d:90:25:25:97:7f:7f:ff:e7:b5:
84:44:86:fd:86:30:e9:9f:a5:85:6a:f5:27:83:db:43:63:66:
c9:de:ea:15:e4:d8:2d:55:3f:66:08:3f:30:10:73:13:b6:b5:
94:a6:9c:73:f0:29:8c:c8:67:79:9e:50:3a:bf:1e:33:86:ff:
bc:be:ad:c2:ee:4c:1a:70:b9:40:fd:7e:cb:52:44:41:f9:f9:
9f:d7:79:50:68:f5:03:8a:6e:d6:75:23:9a:ca:bf:cb:95:6d:
77:3b:35:91:db:8b:cb:b1:5b:c9:2a:f5:1a:64:77:93:cc:86:
58:24:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:31:53 2024 by rpki-client on console-ams.rpki-client.org