Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/SHlqNGy2lbk-w1fJfcwt6HzMMNw.roa
File: SHlqNGy2lbk-w1fJfcwt6HzMMNw.roa (raw, json)
Hash identifier: KUyc+ofrd2rc1aHlzsotXr6p+7n4nvHm4yv4dN0Ay1g=
Subject key identifier: 48:79:6A:34:6C:B6:95:B9:3E:C3:57:C9:7D:CC:2D:E8:7C:CC:30:DC
Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial: 018CC8DF8AD30200B2C26C72A82044E0DC8A
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/SHlqNGy2lbk-w1fJfcwt6HzMMNw.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197446
IP address blocks: 194.0.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8a:d3:02:00:b2:c2:6c:72:a8:20:44:e0:dc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48796a346cb695b93ec357c97dcc2de87ccc30dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:5f:6f:0b:32:22:37:4e:9a:e1:43:c5:22:
af:e3:23:d4:6f:27:60:ee:81:bc:69:2e:14:4c:73:
00:66:98:f0:15:0a:97:c5:6a:3c:14:dc:c9:07:97:
68:6f:dd:1d:2a:90:78:60:a3:db:a6:b9:58:de:2f:
c8:cd:7c:be:b3:a8:0d:06:df:be:28:4c:ef:57:b2:
12:a6:55:e3:60:a1:65:e6:fa:e3:e4:eb:a8:e0:b6:
46:66:0d:bc:39:45:c8:4a:0e:24:93:4f:9b:61:a0:
4d:f4:9e:f3:3f:df:21:72:b6:ef:a8:39:c6:c6:3d:
52:0b:92:30:5f:2d:8a:4b:ac:aa:03:d5:85:64:cf:
c1:15:c1:34:3d:25:17:25:d7:f0:f4:22:e4:0e:4e:
ec:21:33:a6:a3:ba:96:c3:d1:46:de:3d:2f:30:fc:
d9:3c:e0:8f:ea:75:d8:83:b9:b9:6f:38:74:f0:69:
1f:31:dd:b3:63:ad:82:07:18:e2:60:c5:55:c7:02:
f6:0b:ba:03:69:2b:66:ba:c9:1d:a4:3c:b0:d5:71:
46:32:d6:b3:37:b4:53:4f:dd:15:38:01:71:11:ce:
27:10:ef:1c:be:6f:4c:b4:c9:ae:85:7f:da:58:c9:
4e:5c:de:4f:13:8e:83:51:4e:44:b4:26:81:d6:ab:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:6A:34:6C:B6:95:B9:3E:C3:57:C9:7D:CC:2D:E8:7C:CC:30:DC
X509v3 Authority Key Identifier:
keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/SHlqNGy2lbk-w1fJfcwt6HzMMNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ea:3b:f1:50:b3:ad:05:d3:48:3c:99:e4:33:12:28:b2:1c:
35:a9:96:73:ef:9d:ae:5d:ae:4e:23:8a:ea:7e:91:8b:18:86:
bd:0d:bb:e0:d3:95:5c:f6:8f:48:76:3f:69:18:53:79:17:03:
d8:a6:4b:95:aa:68:22:39:40:63:d8:2d:da:b1:51:9b:a1:ea:
63:6c:f6:05:2f:9a:76:4b:02:b2:08:42:bc:3c:1a:f4:82:1b:
f2:9b:ba:c6:a2:16:d1:9a:92:74:4c:ae:09:83:8e:28:e2:da:
22:18:b6:4c:15:3d:e9:8d:f1:32:40:a8:46:98:5e:8d:e1:d3:
a7:9f:62:76:80:91:ee:df:94:79:88:7d:22:ba:6d:35:5b:84:
28:48:c8:70:ae:0a:72:64:14:70:1b:0e:19:70:4f:ce:a0:d8:
14:63:eb:a6:3c:1b:75:5f:8d:a0:fe:d6:49:90:91:5a:64:fb:
6d:6b:62:0b:3b:bd:6d:8b:0f:10:c7:e3:13:35:2b:12:da:38:
ad:ec:10:8e:af:0b:3d:5f:ce:91:cf:e0:fb:01:1a:a4:70:16:
d2:f3:a5:d5:c0:74:b6:1b:6f:f9:ab:a5:68:78:5b:61:44:29:
40:ed:98:d3:25:45:d8:1f:e9:4f:e7:70:2f:14:19:cc:7e:88:
56:b9:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:47:36 2024 by rpki-client on console-ams.rpki-client.org