Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/SLpacYxLDR6HZqU33sCM_nchnFw.roa
File: SLpacYxLDR6HZqU33sCM_nchnFw.roa (raw, json)
Hash identifier: zbLfuZ4mdi6onwzhwgO99oUjoOjUtNP72P4Bx7/TsSE=
Subject key identifier: 48:BA:5A:71:8C:4B:0D:1E:87:66:A5:37:DE:C0:8C:FE:77:21:9C:5C
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 018CCA2A0FCCAC956C3889B4A46BC4ABB61A
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/SLpacYxLDR6HZqU33sCM_nchnFw.roa
Signing time: Tue 02 Jan 2024 12:33:23 +0000
ROA not before: Tue 02 Jan 2024 12:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.29.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0f:cc:ac:95:6c:38:89:b4:a4:6b:c4:ab:b6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48ba5a718c4b0d1e8766a537dec08cfe77219c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:3b:85:a8:86:07:5e:47:54:bf:0e:5a:71:
3e:0e:d3:82:c5:7e:21:40:92:76:62:3f:5b:53:92:
36:72:e3:7b:dc:7c:24:c7:43:51:9f:f1:73:2b:65:
a3:12:1a:e7:1b:eb:87:c8:60:26:d5:8b:b2:ed:fe:
66:0e:13:f5:79:3d:aa:25:5f:31:7a:a2:4f:3e:da:
00:5d:c7:36:b5:91:97:3a:b4:bc:f5:5f:71:56:62:
4d:19:d9:84:55:b6:29:a1:84:ec:ae:46:00:29:e0:
52:10:71:a0:10:db:5d:7c:09:91:34:d5:fe:f6:bd:
20:6f:40:4f:7e:b2:27:b1:47:45:17:35:8e:96:08:
0a:79:aa:3f:ca:6a:54:9f:d1:3e:93:ef:be:34:e1:
48:a4:0f:af:5d:dd:6d:1d:17:e2:2b:5c:17:6f:22:
c4:94:f1:7e:98:1a:fd:03:7c:7a:a4:c8:63:49:47:
f7:75:01:53:b7:cb:6c:7a:34:08:27:72:29:7f:d2:
8a:b1:66:e1:5f:14:d2:49:a6:cb:4e:9a:bf:31:29:
d5:bb:69:de:b4:7b:74:ac:59:bb:0e:7d:14:53:28:
5c:b7:b4:f7:8e:19:b2:33:98:ad:5b:ef:35:0d:13:
11:bd:cb:e1:1c:48:1b:fe:72:2c:e9:77:14:ec:a2:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BA:5A:71:8C:4B:0D:1E:87:66:A5:37:DE:C0:8C:FE:77:21:9C:5C
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/SLpacYxLDR6HZqU33sCM_nchnFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:63:4e:81:80:8c:cc:da:a2:25:3e:34:a2:ef:e7:e0:e4:8b:
63:01:b0:5a:6e:72:e5:36:9c:17:98:77:f0:a5:64:4d:36:9c:
2c:ae:93:fe:b2:0f:80:23:f9:40:0f:bd:81:9b:db:0c:3e:62:
23:5f:79:e6:1b:7b:7a:78:d9:42:7e:a8:c8:75:f9:12:f7:7f:
a8:ed:d1:60:be:28:d5:7e:81:4c:82:b7:d6:00:2f:48:11:55:
d3:27:19:2f:f6:a6:ef:ec:5b:c1:85:79:c4:9c:95:60:00:c2:
79:78:a7:f6:86:5a:80:31:0d:39:a7:43:38:29:ad:cb:8c:e1:
63:fb:08:15:b4:16:f1:a9:9e:2c:20:25:fb:30:61:c2:2b:c3:
5f:b0:91:b2:d1:57:ca:75:20:90:98:05:46:5b:22:81:a3:e2:
93:89:3a:22:04:2e:a4:2b:1e:ae:95:56:3c:1e:52:39:a6:e0:
bc:2f:6e:18:49:0b:15:a2:e3:c4:c3:e4:e0:94:99:f2:d4:65:
ee:99:61:c1:b0:89:61:b5:f8:5e:d2:71:c5:a9:af:02:bb:a3:
36:eb:80:1b:a2:cd:2b:92:5e:6f:bf:e3:da:52:b1:ba:2b:58:
a7:34:78:50:fa:26:e2:cb:b3:2d:63:18:20:f6:9b:c6:64:8d:
be:2e:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:50:35 2024 by rpki-client on console-fra.rpki-client.org