Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/SLE_h9b19SYroLRqDewta7PCu-Q.roa
File: SLE_h9b19SYroLRqDewta7PCu-Q.roa (raw, json)
Hash identifier: J7UlfTnTkDpjXl1dAC6DIMvShUQhERDMcoHx3jOWn34=
Subject key identifier: 48:B1:3F:87:D6:F5:F5:26:2B:A0:B4:6A:0D:EC:2D:6B:B3:C2:BB:E4
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 018CC4931DF744EDC0A586FC8B8E7F83B4BE
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/SLE_h9b19SYroLRqDewta7PCu-Q.roa
Signing time: Mon 01 Jan 2024 10:30:24 +0000
ROA not before: Mon 01 Jan 2024 10:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59962
IP address blocks: 151.232.112.0/24 maxlen: 24
151.232.115.0/24 maxlen: 24
151.232.114.0/24 maxlen: 24
151.232.118.0/24 maxlen: 24
151.232.113.0/24 maxlen: 24
151.232.117.0/24 maxlen: 24
151.232.116.0/24 maxlen: 24
151.232.123.0/24 maxlen: 24
151.232.119.0/24 maxlen: 24
151.232.122.0/24 maxlen: 24
151.232.125.0/24 maxlen: 24
151.232.121.0/24 maxlen: 24
151.232.124.0/24 maxlen: 24
151.232.120.0/24 maxlen: 24
151.232.127.0/24 maxlen: 24
151.232.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1d:f7:44:ed:c0:a5:86:fc:8b:8e:7f:83:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b13f87d6f5f5262ba0b46a0dec2d6bb3c2bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:15:d3:14:cd:77:d0:0b:f9:24:b9:79:75:
4b:84:59:4b:4c:2f:6d:94:ad:1a:3f:c7:b6:b3:b0:
b7:29:3c:e4:9d:3b:c1:09:05:f7:4b:b5:54:e3:c1:
27:1f:4d:f3:86:f3:51:43:27:e0:00:af:38:f9:f8:
2d:7f:8a:a6:3c:67:97:cb:2d:c3:d6:02:ba:56:5d:
ea:63:3c:2e:5f:41:55:76:f0:64:88:36:69:d2:ee:
3e:90:d0:56:d4:51:ae:20:a6:ac:cb:54:6a:c2:48:
54:e1:f0:94:1e:ed:40:e8:3f:57:87:df:6a:cb:2e:
57:bd:ac:2e:e3:3f:e3:b2:a6:5f:f4:de:f0:a4:bb:
96:15:ac:39:13:8a:85:7e:3c:b5:64:28:79:7e:81:
47:92:36:0e:8c:99:9b:d6:9e:f6:a0:6d:d7:2b:ad:
5c:cb:5d:62:72:39:56:87:67:f0:fc:9c:59:a3:4c:
20:52:b1:35:1d:a6:3e:b1:85:72:f7:08:21:e4:e0:
6d:c2:32:08:b6:c1:1b:82:4a:82:ff:b8:17:43:87:
32:35:19:92:44:2a:b8:4d:5e:ca:3b:eb:a0:72:3e:
cb:71:97:6b:55:3a:83:56:1c:37:bf:15:34:fa:d2:
b9:42:fa:b6:39:83:e0:d2:4f:b5:5d:2d:76:fb:86:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:3F:87:D6:F5:F5:26:2B:A0:B4:6A:0D:EC:2D:6B:B3:C2:BB:E4
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/SLE_h9b19SYroLRqDewta7PCu-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.232.112.0/20
Signature Algorithm: sha256WithRSAEncryption
14:f1:c5:52:ca:8c:70:01:fb:8c:d0:cb:4e:e2:48:19:d9:89:
c0:f3:19:5d:af:68:ad:5b:d5:5e:79:aa:9a:1b:96:66:3f:52:
65:bf:8c:bf:d9:f0:31:0a:47:ae:15:07:ea:c8:37:ef:ae:0e:
0d:09:1e:8a:65:fa:08:22:70:f2:b1:65:8b:8c:3d:5d:aa:00:
be:ff:14:c2:c9:64:d9:0d:85:dc:44:00:f8:0c:6c:5d:e9:5d:
6d:83:04:04:8c:24:6a:6c:51:60:f3:6e:a3:80:05:94:28:5a:
b6:43:28:ca:5f:23:1a:5f:c0:89:2a:d9:65:cf:ed:02:9c:ac:
96:c4:77:bc:02:19:9f:78:6d:4a:c1:f3:94:f5:87:1c:f4:42:
fc:4a:6b:30:f2:15:39:87:ae:90:77:d3:7f:44:cd:f2:28:c3:
0c:70:10:cf:15:81:8e:8c:a4:ca:68:0b:27:c8:5d:ab:35:15:
df:5c:89:5b:98:20:70:fd:ff:b5:73:ad:31:31:47:fc:c3:47:
0a:a8:05:cc:52:c2:65:48:23:7f:42:99:06:df:11:61:1e:f3:
21:ee:6f:da:51:51:b2:fb:f9:71:63:cd:34:18:1c:ee:03:5d:
44:fd:30:9a:9a:19:96:ac:46:25:e3:b5:af:0a:17:0f:42:2a:
b4:3f:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 22:19:48 2024 by rpki-client on console-ams.rpki-client.org