Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/SRZY06ErtvOSrJ_pQLCfHaGT9s0.roa
File: SRZY06ErtvOSrJ_pQLCfHaGT9s0.roa (raw, json)
Hash identifier: /IzfiRnrlnsORK0w9JXe1AyY4hpp3uOrtuUHv1ki9NQ=
Subject key identifier: 49:16:58:D3:A1:2B:B6:F3:92:AC:9F:E9:40:B0:9F:1D:A1:93:F6:CD
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019254A00FBACC289D1A7B461136E4946996
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/SRZY06ErtvOSrJ_pQLCfHaGT9s0.roa
Signing time: Thu 03 Oct 2024 23:03:48 +0000
ROA not before: Thu 03 Oct 2024 23:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214693
IP address blocks: 83.147.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:a0:0f:ba:cc:28:9d:1a:7b:46:11:36:e4:94:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 3 23:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=491658d3a12bb6f392ac9fe940b09f1da193f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:15:20:79:b4:fc:90:98:35:cb:5b:07:ac:
f8:d7:f7:3a:35:4f:9d:f9:3b:04:7e:ed:7a:3d:88:
83:53:0e:40:aa:3c:67:3f:5a:ff:1d:e1:6b:e4:a8:
e3:fd:56:ff:e2:ca:16:88:a9:15:f1:4d:d0:ad:4c:
35:cf:82:a6:1c:d4:49:0e:93:c0:ff:18:b2:19:34:
b9:b5:20:86:46:00:96:f7:0b:e8:d9:0e:6e:86:a5:
9e:97:e7:3e:bf:71:c9:47:dd:c3:94:6d:57:a5:fb:
dd:54:59:40:bb:cb:6b:3c:48:66:39:85:4f:47:d5:
9c:59:a1:88:a3:65:d7:79:ab:48:10:08:74:28:11:
ec:39:39:8d:b1:43:32:56:15:ca:d3:20:0b:cf:d9:
6f:e4:17:f6:26:13:4a:a3:ab:34:36:df:dd:5a:fd:
43:97:28:0d:89:c3:1b:44:83:61:54:8e:36:fd:fd:
53:77:df:28:5d:ec:f2:49:64:3a:ea:0c:37:b1:63:
3e:24:ac:11:93:4e:22:da:42:55:f2:19:eb:6a:e7:
99:f8:e5:b8:59:a1:9f:4a:e7:88:69:72:2b:1e:22:
74:83:b3:e4:b0:78:9c:b0:ea:1d:9e:ac:66:fa:b9:
66:62:7b:8f:38:02:ce:47:7a:cf:c6:04:30:d6:45:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:58:D3:A1:2B:B6:F3:92:AC:9F:E9:40:B0:9F:1D:A1:93:F6:CD
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/SRZY06ErtvOSrJ_pQLCfHaGT9s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
Signature Algorithm: sha256WithRSAEncryption
91:00:d9:65:a7:4a:05:4c:f7:d3:41:cf:cf:ee:76:ba:3c:66:
72:db:a0:6d:9d:20:84:12:19:7b:b1:ba:30:2e:0f:b2:c2:f4:
aa:2c:d6:5a:0d:7d:88:3a:50:99:eb:c2:1e:cc:02:1e:08:5f:
57:60:4d:3e:d3:3b:7d:9c:98:15:20:fd:89:97:e9:a8:3f:ae:
b3:a5:bb:5c:20:f9:21:a9:e9:d1:97:8b:95:ee:57:f0:97:8d:
36:32:73:ec:b3:94:39:b0:8e:14:e3:d7:6e:5e:ae:73:79:a8:
1b:44:3c:47:56:32:ee:a6:1a:7a:5c:3c:aa:e3:b0:ce:1a:80:
6c:c0:1c:ff:80:5c:36:43:1b:2c:89:c4:e6:b2:80:e1:2a:24:
3c:aa:f5:e0:bb:8d:7b:27:ca:a1:79:ee:ca:67:78:bc:ad:fd:
89:68:a2:5d:22:75:15:8c:c1:11:56:bf:60:a0:4b:19:8b:76:
7e:a7:a9:f7:c3:af:1b:97:13:7d:6c:12:a0:c1:6e:44:09:04:
ed:59:30:21:d6:df:d4:ab:4a:c2:31:d0:a0:1d:c9:3f:ab:a4:
c0:f5:51:b3:96:7c:9d:ed:09:26:67:32:1a:88:0d:c3:c5:4b:
d9:28:0f:e0:69:bc:da:86:12:db:17:ec:c1:43:8d:8f:9e:93:
e7:16:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:44:52 2024 by rpki-client on console-fra.rpki-client.org