Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SQEZGzSoaSAG3SURS3mWMQ6DeWY.roa
File: SQEZGzSoaSAG3SURS3mWMQ6DeWY.roa (raw, json)
Hash identifier: GnFTWTEY2RNNRjm+VNjaKjZWJNU9/xDIoeMcONR5oWU=
Subject key identifier: 49:01:19:1B:34:A8:69:20:06:DD:25:11:4B:79:96:31:0E:83:79:66
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0190C6608D5A2D10BA07E53BACCEAA866F5C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SQEZGzSoaSAG3SURS3mWMQ6DeWY.roa
Signing time: Thu 18 Jul 2024 15:05:34 +0000
ROA not before: Thu 18 Jul 2024 15:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273098
IP address blocks: 185.181.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:60:8d:5a:2d:10:ba:07:e5:3b:ac:ce:aa:86:6f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 18 15:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4901191b34a8692006dd25114b7996310e837966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:ee:98:53:da:2d:82:62:6b:e9:4f:b1:e7:
5c:ef:00:a5:40:2d:e0:0f:51:c3:0c:7c:3b:a8:18:
1e:3f:85:f7:cd:f0:9d:5e:11:1f:ea:a2:ef:50:0a:
40:86:60:88:64:21:10:1a:1a:23:13:28:a5:7c:82:
e1:61:87:bc:04:88:ef:4b:a4:01:ce:ee:20:1d:62:
2c:4e:17:d7:35:df:f3:15:ee:f9:71:68:52:78:c8:
42:a7:5c:6c:f0:fb:9d:07:c1:48:29:9c:1a:2a:16:
74:af:a8:41:01:b7:dd:67:84:b5:52:b5:70:76:85:
25:98:96:b9:be:44:6c:82:3c:57:76:7d:dc:ef:27:
45:14:59:ed:70:e9:51:64:ac:e1:1f:0d:c4:77:f8:
2f:24:2c:33:66:cf:2e:4a:3c:e1:15:1f:7a:a1:1d:
3a:0e:43:95:f0:ba:91:b6:ad:1b:64:2a:35:85:33:
fc:0e:7f:5b:1f:00:13:a5:ef:47:e7:35:1c:88:59:
7e:fd:c9:d2:65:5f:b2:82:a0:96:3e:4b:ab:1e:c4:
ec:7f:05:db:e0:fc:83:58:b3:52:96:6c:e2:ba:c9:
36:d7:6b:d7:ca:e8:21:d9:56:20:e1:4e:bb:8e:35:
f2:e9:ab:90:67:6b:22:4b:1c:2d:cb:45:39:5b:1d:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:01:19:1B:34:A8:69:20:06:DD:25:11:4B:79:96:31:0E:83:79:66
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SQEZGzSoaSAG3SURS3mWMQ6DeWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c2:7d:a5:68:ee:d7:9d:f1:6e:34:ea:75:8f:3e:68:8f:bd:
93:04:8b:3c:62:ae:08:db:7c:f5:8f:6d:1a:98:76:0b:18:b4:
3e:c6:5f:f9:2a:ce:80:e2:f9:08:81:fd:b1:81:41:94:ec:67:
67:74:10:25:0d:92:a7:bf:ee:65:40:9c:df:73:28:ad:91:d5:
6d:89:48:bc:cb:9e:8b:bf:32:1c:bc:27:94:b9:81:07:fd:16:
d1:ab:74:8e:91:8e:53:dc:5b:18:92:23:ec:be:16:c1:5e:ab:
c0:88:ad:6c:3e:ff:47:06:2b:ab:5d:8b:c3:fc:1f:90:c4:b3:
b5:d2:4e:3e:9f:7a:6f:df:24:e5:92:8a:7e:38:e0:96:99:7a:
59:91:2f:81:86:22:46:1d:90:7b:d3:92:f6:8c:e9:c1:36:8b:
f6:26:0d:60:3a:0f:a9:3a:e9:0a:ec:d2:99:04:02:20:fa:94:
a3:f3:3d:22:d2:25:a6:df:8e:3e:d8:05:5f:90:86:83:7c:ab:
d6:80:60:08:be:bb:9a:b7:42:9e:58:4c:37:ab:84:a0:8b:dd:
ac:54:92:cd:a5:fe:d1:43:6e:51:4a:03:f0:87:dc:87:f9:51:
3b:7f:0f:82:d4:16:8a:c7:f5:7e:e8:6a:a2:96:2b:82:b3:e5:
27:90:5e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:56 2024 by rpki-client on console-ams.rpki-client.org