Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/sgqCWKTtdpDiCu-GfHXgs1pPX3I.roa
File: sgqCWKTtdpDiCu-GfHXgs1pPX3I.roa (raw, json)
Hash identifier: rMdw0Tc7tPnSzje2HeqQcqueBsPuUSVQzMoT+zErLZg=
Subject key identifier: B2:0A:82:58:A4:ED:76:90:E2:0A:EF:86:7C:75:E0:B3:5A:4F:5F:72
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 018CC64A0536AD68E21783B0284162681D10
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/sgqCWKTtdpDiCu-GfHXgs1pPX3I.roa
Signing time: Mon 01 Jan 2024 18:29:48 +0000
ROA not before: Mon 01 Jan 2024 18:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47713
IP address blocks: 95.140.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:05:36:ad:68:e2:17:83:b0:28:41:62:68:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 1 18:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b20a8258a4ed7690e20aef867c75e0b35a4f5f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:47:68:51:83:4f:76:cf:ca:f1:bf:e5:6f:
bd:54:28:75:d8:0a:e5:bb:9d:3f:bb:0e:c3:2c:ff:
26:ed:9f:42:57:82:4a:21:6c:6b:19:4f:14:0d:74:
ee:61:d4:d0:6a:6e:fc:b0:a8:dc:71:65:d2:ea:f0:
b2:e9:4a:1a:0c:b7:74:74:98:27:68:ed:7f:06:45:
fd:51:08:fd:7a:f1:0f:e7:de:5e:9d:a2:f3:c8:6a:
a5:99:2a:00:6a:d8:30:3f:56:2e:8b:b4:1c:92:48:
2d:c2:17:cc:e1:66:ba:4d:de:8e:ee:c5:a2:2e:3f:
7b:b8:30:09:5d:f4:0d:3e:aa:ce:ca:fc:72:80:4f:
fe:f1:a8:ef:30:02:8c:b5:99:fa:c2:7b:31:49:0c:
e0:3f:5d:0d:83:8c:41:ef:eb:7d:b0:53:47:99:0f:
6b:56:91:5c:57:2d:82:23:26:62:4a:9f:33:5c:d0:
1d:fd:c2:45:e4:04:03:5e:52:4d:a3:72:0f:b5:ed:
d8:fe:b9:e5:d5:aa:60:0e:11:14:a8:6b:f4:30:a0:
61:3b:79:d8:d9:ca:b8:bc:10:49:ed:35:02:f2:5e:
43:93:73:73:5c:fd:a2:39:24:23:a3:16:c3:42:79:
8d:16:11:f1:06:78:a5:50:0c:60:f6:85:f7:5f:e0:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:82:58:A4:ED:76:90:E2:0A:EF:86:7C:75:E0:B3:5A:4F:5F:72
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/sgqCWKTtdpDiCu-GfHXgs1pPX3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.149.0/24
Signature Algorithm: sha256WithRSAEncryption
02:22:84:fd:61:88:f6:26:5f:b2:fa:33:a1:ce:4c:12:a0:d3:
18:20:b1:92:9b:56:29:ab:a5:68:34:e1:d4:67:8d:a7:b4:ef:
4f:b6:f7:fe:4c:02:af:9e:72:6a:ae:e8:ad:73:c9:8e:55:ee:
ae:85:2b:99:eb:62:33:eb:8e:c5:45:2c:2c:0d:05:8b:2f:b0:
f7:1c:6c:64:cb:24:f8:e5:e8:4a:fb:0d:fb:aa:d6:9c:54:0b:
90:ac:fa:df:c6:a1:d2:0b:75:f9:73:f2:12:11:b6:2e:46:a0:
b1:94:b3:0a:72:3a:62:eb:23:16:d2:5e:49:29:8f:cb:8b:3f:
47:60:b8:1c:8b:b8:05:06:aa:4f:37:c8:91:16:90:c7:e2:5d:
56:c0:fd:64:3b:cb:2a:4c:d0:3d:e3:bf:7a:e8:a5:77:f4:8b:
ac:a8:b0:c0:08:27:7c:3f:21:4d:a8:03:52:79:f1:d7:d2:8a:
93:4f:e4:ac:9e:27:39:ae:2a:79:c5:f2:da:cb:1b:fa:92:f9:
f7:70:96:1f:75:5e:3b:ae:ac:2e:c6:fe:ec:9d:36:02:7d:13:
23:59:35:4a:37:5e:1d:94:89:8b:90:7d:96:ab:e9:eb:17:41:
e7:c4:15:72:58:ad:e8:6c:cd:0b:14:9a:43:bb:c2:ad:0d:97:
c0:76:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:31:47 2024 by rpki-client on console-fra.rpki-client.org