Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/swEm2Xx1J2VI-wwszDmILMESolQ.roa
File: swEm2Xx1J2VI-wwszDmILMESolQ.roa (raw, json)
Hash identifier: jmyi7M48PLbxALpJ0QRFUrKXrExUQVsostbXEqPxBjY=
Subject key identifier: B3:01:26:D9:7C:75:27:65:48:FB:0C:2C:CC:39:88:2C:C1:12:A2:54
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018CC8DF34E4C360323420F357BAD9B467D6
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/swEm2Xx1J2VI-wwszDmILMESolQ.roa
Signing time: Tue 02 Jan 2024 06:32:00 +0000
ROA not before: Tue 02 Jan 2024 06:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213079
IP address blocks: 147.234.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:34:e4:c3:60:32:34:20:f3:57:ba:d9:b4:67:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 06:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b30126d97c75276548fb0c2ccc39882cc112a254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:a8:0c:5a:f7:d4:8c:4f:50:12:09:62:6a:
2a:9c:90:1e:0f:75:91:9b:17:de:c2:12:fc:3f:ae:
f4:43:ed:87:90:db:0c:56:ba:a8:26:65:2c:b3:4b:
94:23:74:ed:98:0a:b0:c8:ee:4c:e3:d2:92:38:b5:
a9:4c:ce:26:e8:f3:9c:a4:ea:66:2f:05:a9:f6:ec:
85:87:7d:f3:67:2c:d4:54:39:de:7a:e1:b8:1a:cd:
5a:81:e4:ff:87:73:6e:3d:9f:be:76:cb:4f:21:d4:
2c:85:10:2a:5a:dd:37:98:1f:de:a0:e5:8d:3b:1d:
d3:64:6e:11:05:c8:42:89:74:e4:84:c5:25:bf:39:
03:1b:53:e9:7b:71:cd:03:8d:74:ef:46:61:fc:0a:
0d:b2:5a:43:a0:e1:22:3a:14:91:ed:16:d5:c6:c4:
2a:39:91:51:94:73:37:77:30:46:77:b7:f9:6f:cf:
53:dc:c5:e2:5e:e9:69:7c:64:06:fb:e8:4c:8d:24:
60:d5:8c:e1:2b:d6:01:e2:31:b8:04:cc:03:cd:06:
6f:ef:ad:65:8d:b7:c1:4b:c5:5d:b7:eb:a8:31:0b:
bf:c4:33:0d:df:99:f1:a4:19:0a:1d:4e:42:46:1d:
b4:51:08:31:df:cb:c0:a7:55:23:eb:66:69:7e:a3:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:26:D9:7C:75:27:65:48:FB:0C:2C:CC:39:88:2C:C1:12:A2:54
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/swEm2Xx1J2VI-wwszDmILMESolQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:27:79:7b:94:86:13:f8:98:bb:82:7e:ed:fe:e1:e7:1b:e0:
fe:e1:6f:67:ee:92:a5:a4:d4:0d:91:57:7b:8e:29:03:64:2d:
55:71:a5:39:d5:c6:5e:e0:cd:6e:db:7d:f8:0e:db:88:47:38:
d7:cf:0d:57:9b:4e:cf:14:f5:4e:97:d9:0c:47:6f:77:7d:36:
94:76:38:4b:ec:a7:cd:07:9f:ff:33:ce:10:6f:a3:f7:0f:15:
b0:9e:77:e2:9d:63:7c:1c:21:80:a3:9e:81:f7:07:a8:92:e2:
b3:a4:66:8c:68:93:90:6f:62:a3:2d:d9:16:21:7c:2d:36:91:
c3:3c:1a:87:95:91:4e:f4:2c:72:10:29:66:94:c1:c0:05:3d:
41:f0:f4:57:c7:1e:c3:b1:11:c8:53:87:17:b8:25:f0:40:09:
72:dc:f6:b8:7e:6d:9c:a7:54:3f:bd:a0:71:e8:a1:16:0e:f1:
09:b7:5d:b6:c9:d6:98:2d:03:37:6f:3b:67:4f:bc:74:99:de:
b5:46:92:5e:54:63:42:65:ab:30:88:54:8f:58:8e:63:83:c9:
47:69:f7:af:97:66:88:af:f5:38:2e:63:57:20:6d:97:70:fd:
d0:ff:7d:8d:95:94:86:e3:56:52:10:da:b9:59:70:30:35:48:
1e:ff:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:14:28 2024 by rpki-client on console-fra.rpki-client.org