Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/srzTM_HoMYTzjZNjKyvtC6zqSKM.roa
File: srzTM_HoMYTzjZNjKyvtC6zqSKM.roa (raw, json)
Hash identifier: /DVB2IoIizzQAEHlRQWAHO8alPpKYbdn32guZXKfyzo=
Subject key identifier: B2:BC:D3:33:F1:E8:31:84:F3:8D:93:63:2B:2B:ED:0B:AC:EA:48:A3
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 018CC26D7DE2D9E4FE5D8A4B842CCEB456B5
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/srzTM_HoMYTzjZNjKyvtC6zqSKM.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30816
IP address blocks: 193.27.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7d:e2:d9:e4:fe:5d:8a:4b:84:2c:ce:b4:56:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2bcd333f1e83184f38d93632b2bed0bacea48a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:2e:20:61:91:a4:b2:d2:2b:63:0e:86:b8:
bd:50:d7:0a:97:86:4b:d5:17:4a:32:15:3f:75:fc:
56:96:ac:ca:9f:d2:f3:99:c7:94:61:c5:d1:6d:96:
cd:f6:5c:7e:27:2f:76:dc:a2:33:36:67:af:a3:8b:
99:13:e9:e5:fd:e0:0a:c4:66:76:74:d5:c8:40:a9:
29:ce:4e:46:71:a0:8e:c4:51:8b:f3:1f:67:40:9d:
a5:6d:fb:b9:8c:1f:19:8c:fe:d0:2b:bf:c4:f2:78:
b5:01:68:b3:47:62:a6:44:c6:0d:09:f9:86:f7:cf:
98:d4:03:7f:3b:4f:69:37:50:ba:ff:fc:5e:bb:a6:
6d:73:b6:0d:d7:f0:a8:fc:5b:d8:da:9f:59:21:d4:
75:42:44:4d:2a:e0:50:05:d1:17:25:01:21:41:f7:
c5:69:b5:ff:13:23:d6:7b:eb:27:9e:55:bd:3c:3d:
2f:23:83:4f:cd:45:5c:fe:f8:5d:61:3f:99:23:d9:
13:de:20:10:5c:28:5c:fb:fc:4c:d4:45:4e:87:12:
75:3e:bd:ed:fe:a6:22:93:a4:3f:8d:99:1c:6f:cf:
61:33:ce:dc:54:88:72:d8:81:3e:c6:db:83:3a:f8:
90:63:e6:6a:40:90:16:0b:d3:f6:e4:1a:02:e5:a3:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:D3:33:F1:E8:31:84:F3:8D:93:63:2B:2B:ED:0B:AC:EA:48:A3
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/srzTM_HoMYTzjZNjKyvtC6zqSKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5b:ca:a8:2c:eb:f9:aa:35:5b:d7:ed:9e:b9:d8:9f:ba:e8:
27:71:26:4f:be:7a:29:02:19:d8:5e:7c:ca:06:9c:67:c4:04:
00:79:9e:e0:09:48:4b:4c:bb:fa:3f:05:98:c9:62:04:41:3a:
e2:73:8c:b6:78:e9:e9:74:ad:e5:78:77:3f:e0:25:02:80:7c:
8f:30:7d:c9:07:f9:c1:b4:e8:84:1b:07:a9:3b:06:a2:89:cf:
90:0d:f7:22:19:8c:a1:e2:06:77:0f:dd:3e:ee:9a:db:c7:c6:
d4:1d:69:ea:c6:e3:e9:f6:8a:bd:de:09:65:6e:0b:77:e8:34:
98:cf:62:d6:5f:b8:51:2f:a6:72:a8:cf:33:ec:2f:ab:b4:00:
a2:ec:11:c3:1e:40:1d:6b:b7:d5:08:8e:de:cc:d1:ad:bf:10:
b3:8e:5b:53:6e:3a:a7:49:30:33:43:b8:53:39:9e:5f:4b:bc:
87:49:2c:39:cf:aa:00:14:63:7f:33:04:e6:3a:36:e5:0b:3a:
fd:b2:9c:c3:64:16:36:a4:d3:28:69:49:9c:fb:3e:1c:56:33:
79:53:f9:59:f4:ae:cf:5f:6f:6f:e9:f4:f8:7d:f0:6c:63:85:
19:41:ea:62:65:fc:97:69:78:4c:38:72:62:d3:3d:61:74:8d:
8d:db:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:13:38 2024 by rpki-client on console-ams.rpki-client.org