Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/SgJoq_JXOHPPXgkWUOkCz5gPk6s.roa
File: SgJoq_JXOHPPXgkWUOkCz5gPk6s.roa (raw, json)
Hash identifier: NmF/AVtyev/GKo60w0bXclZSZOH5Rh7lY3L7fhrCVbw=
Subject key identifier: 4A:02:68:AB:F2:57:38:73:CF:5E:09:16:50:E9:02:CF:98:0F:93:AB
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 018CC726DDD34FFDF176A6F9E0F305B4A7AA
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/SgJoq_JXOHPPXgkWUOkCz5gPk6s.roa
Signing time: Mon 01 Jan 2024 22:31:02 +0000
ROA not before: Mon 01 Jan 2024 22:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34282
IP address blocks: 193.117.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:dd:d3:4f:fd:f1:76:a6:f9:e0:f3:05:b4:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jan 1 22:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a0268abf2573873cf5e091650e902cf980f93ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:8e:50:fa:5a:6d:fe:94:12:51:48:9c:ed:
0d:df:b3:3c:6c:91:c2:a5:71:d1:fd:6b:f7:74:b4:
08:df:b2:f6:f9:fa:45:dc:b2:bb:61:4c:6e:6c:65:
c6:5d:fe:be:ea:01:a3:21:e7:86:4f:5a:1c:21:7d:
57:82:4b:f9:80:4b:56:b2:b5:2f:75:31:2b:a5:8e:
9c:33:6e:35:47:4d:50:93:70:07:71:0d:bf:93:b0:
f3:cc:4f:25:3e:57:e3:64:0c:89:1f:74:34:4f:cd:
9e:dc:5a:43:62:34:4c:71:c8:4a:cb:92:0d:b7:9a:
01:32:07:6e:5b:e2:f6:cc:3d:16:ed:68:a8:8f:01:
85:c1:9b:5e:71:91:61:32:ac:db:44:9b:68:cc:16:
22:dc:96:6e:05:72:ee:6b:f5:1a:e0:9a:dc:bf:36:
c4:89:46:00:a8:3a:e2:93:fc:29:b7:c6:d8:91:25:
23:28:2e:4f:91:e6:c0:68:f6:f9:8b:71:9f:84:01:
3b:75:18:85:4a:f0:12:46:9d:f2:3a:be:d4:90:27:
c2:a6:45:7f:b0:8a:93:b5:62:e1:8b:0e:df:6a:a1:
1f:90:39:b9:51:39:e1:b2:3f:da:3c:0c:b0:2b:d1:
e7:37:c3:5b:3a:0a:b1:30:fd:c7:46:db:aa:49:db:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:02:68:AB:F2:57:38:73:CF:5E:09:16:50:E9:02:CF:98:0F:93:AB
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/SgJoq_JXOHPPXgkWUOkCz5gPk6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.117.57.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bb:cc:e9:14:c2:70:c9:90:79:ef:86:7f:8c:0f:78:bf:e2:
cc:a7:d1:01:a2:1e:6c:f3:20:6b:72:f7:86:b9:86:72:54:8d:
bf:91:8e:19:b7:9b:a7:fa:75:b3:f7:d0:64:4e:71:03:d0:cd:
df:5c:a3:cd:26:ae:aa:bb:91:2d:e5:0c:91:87:d6:29:d3:e5:
c4:29:30:2e:b0:e2:83:88:56:bc:d6:b8:88:41:97:7d:a7:70:
81:9f:30:7b:6b:b2:5f:0f:5d:fc:73:d3:8e:6d:ce:80:86:a3:
42:14:96:8f:24:c5:ca:d5:f7:a4:c7:1f:2d:d2:df:55:f1:5f:
a7:24:db:90:97:bb:6c:23:dd:5d:50:07:bc:f5:a7:fe:2c:ce:
a2:a6:c0:86:04:44:c7:4e:16:a9:96:a0:ea:4b:d1:a3:9f:81:
95:e0:e7:88:90:82:4b:35:bb:2e:97:06:58:2c:8f:e5:cf:e6:
44:a1:b6:b3:17:ff:63:fc:d6:96:16:a2:c4:77:ba:34:19:f4:
81:ac:b6:10:16:c2:51:24:da:dd:44:0a:02:d7:fa:3f:20:63:
4f:c9:5d:d6:4d:1a:33:f8:8b:ca:cf:a4:6b:31:e8:4b:f2:df:
8c:22:83:d3:9f:35:3f:c0:20:aa:b6:b4:2e:99:c2:ce:36:32:
41:2e:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:58 2024 by rpki-client on console-ams.rpki-client.org