Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/SSnAaAWPh1LVJxpRFqyFruReDhU.roa
File: SSnAaAWPh1LVJxpRFqyFruReDhU.roa (raw, json)
Hash identifier: YkJ3cvE/4ZkWB0XtY8x6VLMdUn6gkGO5Unuxks1SQJA=
Subject key identifier: 49:29:C0:68:05:8F:87:52:D5:27:1A:51:16:AC:85:AE:E4:5E:0E:15
Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial: 018D3FAFF1A9076DE26E8C7A95F6785C6344
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/SSnAaAWPh1LVJxpRFqyFruReDhU.roa
Signing time: Thu 25 Jan 2024 08:15:11 +0000
ROA not before: Thu 25 Jan 2024 08:15:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 138.195.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:af:f1:a9:07:6d:e2:6e:8c:7a:95:f6:78:5c:63:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Validity
Not Before: Jan 25 08:15:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4929c068058f8752d5271a5116ac85aee45e0e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:82:0d:00:28:85:cf:15:f4:de:06:4a:d3:
29:a4:99:9f:45:7e:01:8d:12:c4:f3:f7:39:40:5c:
79:b3:1d:49:94:89:86:8c:ef:d9:eb:4a:f3:64:49:
7a:44:a2:48:d6:a4:3b:d0:a4:80:99:e3:e0:6d:94:
5e:26:45:e3:3d:19:75:6f:d8:c3:9b:59:4d:d2:f5:
de:f3:9e:68:a6:e9:b2:45:43:cc:4f:9b:ec:02:f1:
e1:12:b7:1b:80:45:e5:5b:d6:10:d5:b5:b1:5e:de:
9b:15:f7:45:33:71:cb:21:5b:86:43:94:c0:3b:4d:
1d:96:17:5f:84:3f:47:36:c7:22:b8:2c:dc:3e:9a:
dc:62:67:8f:6c:4a:55:d5:1b:1c:1c:8d:1a:6e:00:
fd:82:b3:c5:0d:8b:8c:1a:a1:c8:67:0a:22:46:ae:
04:36:b6:3f:90:ca:df:4a:75:a7:55:fd:98:1c:62:
05:08:0d:aa:f7:cb:98:5f:4c:91:f5:7f:ba:68:37:
d8:35:21:42:ac:88:69:c9:a3:be:74:c9:0a:ec:53:
9d:fd:de:d9:f7:7a:37:1e:01:58:36:81:82:7d:54:
4e:ef:0c:89:d2:fe:d8:f2:4f:05:c6:50:58:37:67:
32:a6:a4:c2:e6:de:bb:09:35:24:f6:92:f9:7a:63:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:C0:68:05:8F:87:52:D5:27:1A:51:16:AC:85:AE:E4:5E:0E:15
X509v3 Authority Key Identifier:
keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/SSnAaAWPh1LVJxpRFqyFruReDhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:f9:72:ab:43:84:6b:22:3f:92:ca:fe:25:5e:7e:76:98:1e:
3f:db:62:c4:b4:d2:3d:61:1e:ef:5f:b7:c2:29:36:86:02:37:
f8:00:99:a4:17:ba:e8:e6:39:67:32:97:d3:91:b7:d3:38:ff:
eb:51:2f:c5:59:47:88:b4:72:33:4d:8e:a8:5c:19:44:f0:7c:
69:b4:bf:5b:b3:a0:60:5d:b4:7d:40:aa:9e:63:12:90:e7:ef:
d1:02:05:d3:30:ec:fe:43:ea:a1:ea:54:69:bc:ec:d2:0f:c9:
c7:d9:51:f9:cd:ca:a6:27:98:f2:01:e8:5e:e0:49:8b:a6:9c:
93:9e:ff:8d:72:8b:2b:45:0a:29:62:59:6b:99:d1:5a:94:db:
d0:56:5b:d8:9d:24:b6:6d:11:c9:bd:f8:c1:7e:47:9e:b9:00:
5e:62:93:03:36:27:fc:09:83:21:35:32:0a:f1:08:5c:79:a9:
78:b3:fb:89:48:7c:d9:c4:e2:5f:0c:e7:a5:da:64:2e:63:ef:
0d:29:e8:bc:55:66:25:c3:f2:b8:d4:08:a7:78:99:da:66:ba:
31:82:f6:39:bb:66:3f:25:2d:9a:9b:cf:4e:44:69:9a:62:2a:
c1:e8:a8:40:41:1b:6b:91:1c:a5:d1:2c:13:35:c9:b8:96:04:
0f:96:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:06:23 2024 by rpki-client on console-ams.rpki-client.org