Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/SNHbA_W40OIH3zcIf9s-CF8lGdI.roa
File: SNHbA_W40OIH3zcIf9s-CF8lGdI.roa (raw, json)
Hash identifier: DVrMWs3B6QQEKw/6TqM8LJ1fsY2xGd5NqscVap5185M=
Subject key identifier: 48:D1:DB:03:F5:B8:D0:E2:07:DF:37:08:7F:DB:3E:08:5F:25:19:D2
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 018CCA997CB3B358C8EF32E10AACE8E47646
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/SNHbA_W40OIH3zcIf9s-CF8lGdI.roa
Signing time: Tue 02 Jan 2024 14:35:05 +0000
ROA not before: Tue 02 Jan 2024 14:35:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5564
IP address blocks: 213.128.224.0/19 maxlen: 24
194.247.64.0/19 maxlen: 24
2a00:5580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:7c:b3:b3:58:c8:ef:32:e1:0a:ac:e8:e4:76:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Jan 2 14:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48d1db03f5b8d0e207df37087fdb3e085f2519d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:5b:bd:b2:cd:d0:13:24:3c:24:62:4a:d7:
8f:5d:7d:2e:1d:e1:a0:c0:3b:43:42:54:0c:81:c2:
03:dd:89:18:97:f5:d0:b5:52:88:90:b2:40:3d:e5:
5a:63:48:d4:06:b0:b3:3a:aa:aa:1c:b4:80:ad:1a:
1b:a9:b3:df:c8:7a:cb:0d:b8:a8:cb:52:c4:d2:b6:
e4:40:15:f8:f1:ad:fe:08:70:d9:6f:be:5c:54:e6:
bd:59:b3:7f:7a:62:d4:af:9b:bb:16:67:95:3a:48:
e0:a9:28:6d:f3:c5:ab:87:cf:91:64:ef:d9:4a:cb:
81:91:d1:7f:56:b8:96:aa:57:58:dd:05:04:62:5f:
9f:b3:a7:96:13:94:34:1d:b4:39:c0:d9:1c:a5:0b:
a1:b2:75:98:00:a1:74:0c:87:a2:b5:8e:75:07:29:
40:6f:72:ff:df:d7:0e:6a:e5:07:18:a3:52:d9:5c:
3a:e7:30:2d:01:13:d3:eb:a2:cf:ed:37:f7:9e:cb:
5e:8e:f0:f3:4e:93:1c:26:ac:fc:c3:47:cc:54:93:
ca:04:29:39:b2:67:e5:7a:54:f0:01:6c:f0:c8:ab:
6d:e9:ed:21:56:e3:71:a9:1c:cd:b4:c3:be:4f:00:
f4:3c:0e:0f:4d:9c:4e:26:dc:90:d0:7b:cd:0e:56:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:DB:03:F5:B8:D0:E2:07:DF:37:08:7F:DB:3E:08:5F:25:19:D2
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/SNHbA_W40OIH3zcIf9s-CF8lGdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.64.0/19
213.128.224.0/19
IPv6:
2a00:5580::/29
Signature Algorithm: sha256WithRSAEncryption
07:ae:39:75:14:a5:79:51:cb:b1:56:55:33:64:b6:d7:83:bc:
f7:38:7c:c3:68:61:70:62:7f:b0:28:53:7e:fe:0d:50:3b:06:
2b:2f:fd:db:3d:8b:75:70:d7:dc:94:ca:18:27:70:12:b3:ec:
f3:20:d4:64:0f:b6:82:94:ba:12:1b:40:86:fb:83:aa:91:05:
5b:c1:17:f5:9b:69:26:4b:1e:7f:52:97:0d:53:1a:9b:8b:32:
e2:1b:f8:8d:e7:9e:dc:cf:57:73:40:12:5f:96:89:dc:5e:c5:
9e:47:ec:63:a5:c7:16:a7:f1:67:c9:51:42:e7:1f:a0:5f:39:
01:dc:1a:e2:ec:76:7d:d7:6f:21:44:a1:d2:d1:cb:3b:93:62:
dd:eb:56:a9:10:76:13:4c:ee:54:b4:c0:d7:59:4b:d9:72:2f:
1c:28:6d:e5:21:1d:47:e2:03:06:bb:8f:f1:6d:39:36:80:5e:
27:2a:8a:c7:bc:e8:23:6d:da:b0:a2:89:15:66:b5:29:c4:38:
99:3d:29:05:16:a9:1d:7c:df:c7:56:c2:5f:5b:e2:75:d2:1d:
7f:80:2b:8f:c1:e9:25:e1:a9:07:16:f0:fd:6f:d2:33:24:d2:
1a:64:f4:96:84:a4:5c:d6:36:f2:a1:75:90:d6:89:d4:8c:90:
91:8f:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:59 2024 by rpki-client on console-ams.rpki-client.org