Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/sCm7HLSoanakFNCoJvSVxjshIcs.roa
File: sCm7HLSoanakFNCoJvSVxjshIcs.roa (raw, json)
Hash identifier: D0iO86oY/6LGmFDVCRZHj/XGKVfVJFUv4H3uu0PGlPM=
Subject key identifier: B0:29:BB:1C:B4:A8:6A:76:A4:14:D0:A8:26:F4:95:C6:3B:21:21:CB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DADB0DBA932C0568927151F90982BB
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/sCm7HLSoanakFNCoJvSVxjshIcs.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199389
IP address blocks: 195.136.200.0/24 maxlen: 24
195.136.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:db:0d:ba:93:2c:05:68:92:71:51:f9:09:82:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b029bb1cb4a86a76a414d0a826f495c63b2121cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:45:09:19:c9:d0:42:ab:a6:fe:8a:53:0f:
44:f9:ab:0e:7f:a3:25:36:8e:c6:6a:81:02:ce:e6:
74:24:39:63:1b:3f:e6:ac:c2:7e:a2:7e:cd:ce:04:
68:2a:d6:ea:97:bc:e6:64:ab:68:db:a0:fd:37:5b:
e6:47:48:d4:9c:9c:0c:e8:88:bd:c0:85:fc:73:40:
49:39:a1:91:53:42:9e:96:ae:9d:03:d2:53:a5:70:
16:46:94:67:b6:b1:75:b2:ae:03:d4:ef:02:b1:a9:
70:d3:b3:90:40:2f:3b:97:9d:df:f1:dd:8d:19:75:
c8:74:bf:e0:fb:84:1c:fc:41:9c:ca:a6:7b:43:df:
66:7e:b6:dc:21:e0:42:44:07:c7:fb:91:c1:0a:82:
97:74:de:54:db:34:9f:88:ed:c5:20:18:63:35:ec:
ee:ab:95:27:6a:58:70:2d:3b:d8:3d:f1:1c:cd:92:
08:a4:54:5e:c3:be:24:b3:e9:67:2d:0e:d6:19:6e:
48:0c:7b:32:a2:c2:15:d4:3d:cb:b7:0d:17:a0:08:
03:e1:8b:d7:cb:82:ca:e6:35:67:c1:e8:c3:f2:5d:
27:f7:a4:25:e9:3d:c3:f9:0c:51:e5:88:b2:cc:e9:
94:71:25:7f:ed:94:06:33:d4:2d:84:48:c7:1b:95:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:BB:1C:B4:A8:6A:76:A4:14:D0:A8:26:F4:95:C6:3B:21:21:CB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/sCm7HLSoanakFNCoJvSVxjshIcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.200.0/24
195.136.224.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:da:ce:42:af:04:2f:62:59:d0:a1:5e:f3:89:fb:b3:78:c1:
d9:c2:9d:c0:94:af:a5:31:eb:15:03:7c:ae:db:f5:d1:3e:4c:
a7:6e:31:e7:42:8e:c7:f0:01:9b:af:d5:1e:3a:d7:e1:fc:58:
57:aa:76:14:81:3d:37:bf:05:3e:1d:e0:29:23:65:00:76:1e:
a6:4f:42:0d:a0:c9:02:68:ec:e4:a9:21:53:bd:c4:5d:c0:df:
f4:b6:be:f6:b2:98:b0:41:31:21:14:34:4f:4c:6b:8c:85:16:
a0:86:26:29:57:d1:b0:7d:5e:3d:c5:71:06:45:34:f7:da:68:
79:ed:78:a6:d1:06:e4:30:86:a8:3f:d9:1c:fa:82:75:07:69:
7a:e7:d2:94:1f:a1:73:37:fd:a9:a5:e9:09:e7:23:92:7b:a5:
e2:dd:0b:0c:f2:c1:67:f9:33:e0:e2:65:8c:48:8f:79:6b:b9:
b6:dc:32:db:7c:7b:7b:a7:29:bd:63:97:30:1d:44:58:1c:15:
fb:4f:f3:44:4d:66:fe:29:ec:48:85:f3:7e:64:b1:70:b4:50:
e9:2d:f1:74:af:13:d5:8d:91:21:f4:58:63:2b:9b:23:db:bd:
1b:54:51:45:e0:a1:45:4d:cd:bb:1a:f2:90:5f:69:a9:b1:0e:
f7:88:0b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:04:54 2024 by rpki-client on console-fra.rpki-client.org