Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/ScCGYkas6Rog-mjeaKRUsLMWru0.roa
File: ScCGYkas6Rog-mjeaKRUsLMWru0.roa (raw, json)
Hash identifier: DrVJ6vEgD+LdvVQB8hmMukhybYEzVBvQpO1pQp8Jn1g=
Subject key identifier: 49:C0:86:62:46:AC:E9:1A:20:FA:68:DE:68:A4:54:B0:B3:16:AE:ED
Certificate issuer: /CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Certificate serial: 018CC5DC078B8B3909CAFC6C279AA0C7F194
Authority key identifier: AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/ScCGYkas6Rog-mjeaKRUsLMWru0.roa
Signing time: Mon 01 Jan 2024 16:29:40 +0000
ROA not before: Mon 01 Jan 2024 16:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57900
IP address blocks: 212.24.246.0/24 maxlen: 24
212.24.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:07:8b:8b:39:09:ca:fc:6c:27:9a:a0:c7:f1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c0866246ace91a20fa68de68a454b0b316aeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:25:e6:e6:6c:76:f1:ae:a5:c7:78:bb:a8:
b7:fb:43:37:7d:51:14:90:9d:99:08:ab:05:23:07:
29:24:a7:86:e0:a9:97:24:4b:e9:1f:7d:56:1e:7a:
3e:0b:e9:de:75:aa:da:48:ea:8f:f0:7c:28:88:97:
e5:12:69:e7:d2:6c:1c:f9:32:92:6f:cb:1f:70:78:
6c:3c:5f:92:d2:e8:93:91:68:6f:1b:58:ad:c2:66:
a2:26:2a:ee:11:80:43:16:7e:40:15:65:99:c1:22:
6a:83:b4:ab:6a:2e:36:42:60:c0:c0:47:50:b7:35:
d0:75:c6:f6:92:78:60:a7:7a:bb:09:8a:21:27:4b:
b0:dd:a0:00:7d:10:1f:53:8e:0c:40:aa:da:37:dc:
d2:ea:2c:68:f2:cd:bc:63:90:c0:a6:a5:7f:92:59:
c7:18:cf:ae:26:26:0b:56:9c:cd:ab:7e:f4:2f:bb:
84:ba:4f:78:93:1c:7b:b4:ff:ad:6c:2e:47:9d:97:
01:95:36:a2:cf:9c:48:d1:60:84:76:68:55:e7:2e:
fc:1c:2a:c3:ce:ab:4d:11:80:a8:f5:ba:e3:1d:95:
a2:d3:1a:8c:fe:42:63:4b:be:c0:42:43:f9:3f:af:
bf:27:0d:f4:a7:95:e0:3b:a1:68:7e:2f:b9:78:f7:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:86:62:46:AC:E9:1A:20:FA:68:DE:68:A4:54:B0:B3:16:AE:ED
X509v3 Authority Key Identifier:
keyid:AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/ScCGYkas6Rog-mjeaKRUsLMWru0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.246.0/23
Signature Algorithm: sha256WithRSAEncryption
46:4d:dc:16:fe:f7:8e:a3:08:8e:da:a5:74:e4:41:d3:83:17:
f5:4e:b8:30:4d:17:6d:49:05:d0:ed:66:0e:96:88:2d:f5:5c:
b5:f8:dd:01:77:b7:fd:15:c9:46:79:ea:ef:61:27:3a:9b:3e:
05:97:e9:79:97:c8:27:4b:d5:b7:cb:9c:9b:d2:8e:2e:23:4e:
61:44:6d:9a:3c:f1:b9:02:e8:71:53:2c:11:87:96:bd:2f:b9:
74:91:02:ae:ee:6f:7d:13:6e:d3:54:50:16:97:2b:e9:da:5c:
4e:71:8f:4f:bf:1f:2e:4e:67:b0:c9:ff:c1:47:9b:cb:43:93:
d7:1b:80:a1:5a:a6:16:84:07:4e:d4:55:6c:08:a5:7b:20:e1:
b9:da:c2:9f:dc:33:db:d2:15:ec:19:3d:c5:8e:13:e0:c8:cb:
7f:6a:a4:7c:85:7c:32:ba:1e:6b:78:aa:3e:94:62:fb:53:6d:
d0:27:c3:30:6e:38:6b:a9:0b:ce:4d:ae:ab:0c:6a:49:2f:5e:
5f:bf:b9:da:75:11:f7:1f:c5:55:21:5d:92:24:28:a9:2a:73:
13:2c:1a:da:07:fa:49:79:ef:ea:a5:8c:d4:5b:62:fa:a1:d9:
5f:d6:73:c1:76:0e:24:19:35:b5:aa:46:3a:41:2c:2e:5c:46:
a1:53:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:29:44 2024 by rpki-client on console-ams.rpki-client.org