Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SgcMpkTkp_SXOhtkTeUs0aBdmAM.roa
File: SgcMpkTkp_SXOhtkTeUs0aBdmAM.roa (raw, json)
Hash identifier: EyUIbXA3uxIyx09HMHlNmf3EQ+K4FqiYN5meKKco23A=
Subject key identifier: 4A:07:0C:A6:44:E4:A7:F4:97:3A:1B:64:4D:E5:2C:D1:A0:5D:98:03
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73C77A3A4EB4D899C5670FCDBCA00
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SgcMpkTkp_SXOhtkTeUs0aBdmAM.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199140
IP address blocks: 80.12.240.0/23 maxlen: 24
80.12.243.0/24 maxlen: 24
80.12.250.0/24 maxlen: 24
80.12.253.0/24 maxlen: 25
80.12.249.0/24 maxlen: 24
80.12.254.0/24 maxlen: 24
195.101.150.160/28 maxlen: 28
80.12.212.0/24 maxlen: 24
80.12.213.0/24 maxlen: 24
195.101.150.152/29 maxlen: 29
81.252.94.184/29 maxlen: 29
83.206.119.208/28 maxlen: 28
2a01:cb22:4000::/36 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3c:77:a3:a4:eb:4d:89:9c:56:70:fc:db:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a070ca644e4a7f4973a1b644de52cd1a05d9803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:5b:fa:8a:13:4e:71:58:51:47:5c:63:bd:
66:84:87:eb:87:10:72:95:93:8a:89:af:80:ba:fa:
f2:ce:fd:c9:df:37:a2:b9:9a:0a:c8:28:fe:21:06:
54:fb:01:d4:ee:73:bd:63:02:12:d8:25:e6:3b:e6:
ca:24:89:e7:18:0a:d5:96:36:0f:9a:65:c0:39:d6:
c7:24:a8:aa:89:6c:c3:35:0d:1b:ff:85:f2:e9:dc:
90:89:ae:0d:5a:73:cc:42:0f:ee:59:71:55:db:e6:
92:a1:63:43:55:04:5c:f4:68:39:46:ee:4b:52:85:
bf:0b:11:b8:c5:1a:1a:e3:fc:ff:34:0c:fb:a9:ec:
73:17:88:71:02:42:eb:7f:db:6e:83:3f:f2:87:53:
53:79:c3:c6:b6:27:14:df:dc:50:54:06:b1:89:78:
fe:b5:93:2c:08:ad:b0:ef:d8:c0:e3:ec:5c:62:d8:
85:ee:ba:f9:a0:42:15:00:f4:a1:d8:16:0d:46:18:
11:bb:4f:bc:1b:84:50:69:f8:a5:fc:2d:80:9a:dd:
f0:03:f1:aa:a7:b4:73:2d:98:54:cc:06:50:3c:b0:
4f:ab:08:cc:62:d1:be:57:4f:ba:8c:c3:03:67:9f:
16:d5:04:fa:38:da:f6:a1:0f:55:ef:cd:86:41:15:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:07:0C:A6:44:E4:A7:F4:97:3A:1B:64:4D:E5:2C:D1:A0:5D:98:03
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SgcMpkTkp_SXOhtkTeUs0aBdmAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.212.0/23
80.12.240.0/23
80.12.243.0/24
80.12.249.0-80.12.250.255
80.12.253.0-80.12.254.255
81.252.94.184/29
83.206.119.208/28
195.101.150.152-195.101.150.175
IPv6:
2a01:cb22:4000::/36
Signature Algorithm: sha256WithRSAEncryption
62:fe:93:da:f0:0c:dd:0e:22:ea:aa:f0:49:e8:cc:7a:20:f5:
87:9b:84:33:9e:62:05:ad:c3:4d:ff:8e:4d:27:52:d9:a3:37:
35:e2:3f:b3:9d:4c:75:ff:51:d2:e0:25:90:d6:62:17:5d:48:
cd:e2:d0:47:17:3a:e1:78:a4:9a:c9:d3:1d:52:d0:6c:09:23:
1c:fb:0d:38:c6:26:b2:a6:c5:70:d5:35:9b:77:11:a3:7c:b9:
25:dc:56:10:5e:99:b8:2f:03:6b:e9:39:d1:c4:94:47:01:ac:
9d:97:3b:57:fe:a4:76:f4:bc:cc:55:aa:16:9b:d9:f1:5c:83:
eb:84:7d:0b:77:d1:d2:d9:24:69:e1:63:02:b4:bd:7c:70:99:
71:06:80:62:7c:3b:3f:9e:5e:0c:0d:04:22:e3:bd:7e:70:eb:
6d:42:1b:09:bc:f6:38:bd:42:be:17:1e:21:a5:1b:f8:16:17:
3a:4d:9d:9c:5c:3b:a4:55:24:48:f4:d0:93:d9:f0:eb:bf:20:
40:30:5f:2a:b7:51:b6:f3:4d:18:98:50:7d:93:8f:6a:92:c5:
f6:a2:70:ed:59:48:38:4b:50:56:a1:87:8a:b4:59:16:c6:86:
ca:3e:61:d7:ce:8c:e3:a1:f0:a5:a2:a7:80:ab:71:9b:93:7c:
76:09:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 09:56:36 2024 by rpki-client on console-fra.rpki-client.org