Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/sWv209dkCY_y3vJxbTXonBQHxpE.roa
File: sWv209dkCY_y3vJxbTXonBQHxpE.roa (raw, json)
Hash identifier: f1vqvPsD/SQfhuYUybOPbMR7XQ0QYX3Dni+5AzYITqE=
Subject key identifier: B1:6B:F6:D3:D7:64:09:8F:F2:DE:F2:71:6D:35:E8:9C:14:07:C6:91
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01914144AA308BB158F182E76C23374F542A
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/sWv209dkCY_y3vJxbTXonBQHxpE.roa
Signing time: Sun 11 Aug 2024 11:48:24 +0000
ROA not before: Sun 11 Aug 2024 11:48:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50795
IP address blocks: 188.75.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Oct 2024 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:44:aa:30:8b:b1:58:f1:82:e7:6c:23:37:4f:54:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Aug 11 11:48:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b16bf6d3d764098ff2def2716d35e89c1407c691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:5a:40:79:5e:3e:b2:c2:b4:27:60:9a:cf:
68:58:7b:92:a3:00:97:30:4b:0d:35:f0:de:83:e9:
62:0c:79:68:94:ce:00:45:f0:16:a0:0b:29:c3:a6:
ee:10:f1:48:02:a9:f4:42:ac:a6:da:2a:aa:1d:21:
fa:64:f7:9a:1b:cc:44:3b:d9:39:93:9f:b5:de:80:
a3:92:51:5f:60:9f:b1:90:f7:b0:b6:fa:91:7c:58:
c8:e0:e3:f3:ee:54:7e:5c:3f:5c:67:c4:ba:cb:e2:
7f:1d:01:53:33:84:40:9e:63:13:c7:a6:54:ac:d4:
34:18:be:13:e1:09:81:37:54:93:76:2d:e1:01:ad:
c1:2f:cf:1b:42:4d:41:be:ea:29:11:53:37:df:40:
28:dc:b2:0b:c8:f3:5f:39:0d:9e:25:ff:7f:43:a2:
6f:d6:fd:72:b6:c0:24:49:c8:14:13:26:5d:1f:51:
13:a2:45:d4:87:3e:03:51:f0:4d:78:39:e1:bd:e8:
57:64:7a:1d:22:d4:67:09:6a:46:bf:75:e4:fe:31:
53:ff:04:6c:d7:16:71:5a:cc:fa:c0:dc:22:f2:93:
ad:d6:5d:a2:15:ad:78:48:e5:5e:16:2d:64:63:10:
38:9e:f8:e5:78:a1:65:bc:43:9b:a4:4e:af:0f:18:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:F6:D3:D7:64:09:8F:F2:DE:F2:71:6D:35:E8:9C:14:07:C6:91
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/sWv209dkCY_y3vJxbTXonBQHxpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.75.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0c:e8:53:87:f1:bd:96:ae:b2:68:9d:76:0a:06:8e:18:cb:
32:52:78:a5:44:52:a9:0f:ab:f7:9f:09:5d:ad:52:9e:f5:cf:
dc:83:0c:21:d8:60:98:19:2c:41:1f:be:a0:1e:1e:06:c2:37:
ac:55:a5:ca:a5:5f:0a:81:25:a1:cf:ea:bf:ed:15:18:9b:2e:
f7:50:87:29:b3:0e:53:52:70:1f:8e:86:e5:8a:54:11:95:ab:
96:29:67:22:ad:34:95:12:eb:c9:ca:c4:66:ac:c2:a0:d2:bd:
20:8d:08:bf:e8:74:19:21:03:22:cb:a3:41:b9:56:9f:33:95:
2f:6d:8f:57:93:c8:4a:fc:b5:cf:4f:a1:b8:42:6a:21:85:59:
33:d4:5b:23:12:39:b2:77:0e:ca:48:ac:16:c2:5b:0e:9b:43:
c5:87:80:8f:59:96:96:68:f3:c8:e5:b1:f0:f7:b0:19:d8:c4:
81:f2:96:3c:10:cb:5e:03:e7:5c:35:db:e0:a6:ed:69:f4:dd:
98:90:8f:1c:9f:a1:bb:8d:99:b8:a0:97:0c:52:3d:34:92:e3:
ad:93:1b:f4:52:11:3a:34:82:47:ef:cf:31:00:fa:37:17:4c:
36:31:04:5a:c9:4e:22:eb:2f:c7:fc:84:43:e8:30:ef:af:13:
3d:86:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 16:23:06 2024 by rpki-client on console-fra.rpki-client.org