Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/SCj5qkzI-kWlczyPB_wNEqfq6XY.roa
File: SCj5qkzI-kWlczyPB_wNEqfq6XY.roa (raw, json)
Hash identifier: iif+cHMHi4qn23wBg53UhALGZv78FaTRJnhqBpnm4oI=
Subject key identifier: 48:28:F9:AA:4C:C8:FA:45:A5:73:3C:8F:07:FC:0D:12:A7:EA:E9:76
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B935DA0142F55D44C91BFAA2B8726C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/SCj5qkzI-kWlczyPB_wNEqfq6XY.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42295
IP address blocks: 185.240.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:da:01:42:f5:5d:44:c9:1b:fa:a2:b8:72:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4828f9aa4cc8fa45a5733c8f07fc0d12a7eae976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:24:7f:54:30:5e:fa:17:39:10:87:e9:9b:
18:0c:e5:e8:86:21:78:a2:dd:cc:b5:72:c6:2b:ca:
bf:8f:53:9d:a1:06:30:d8:98:b0:4b:94:8b:db:18:
44:7e:ce:4c:72:a7:40:a8:d7:06:e1:db:82:7e:fd:
3b:43:0d:98:11:a1:6d:2d:cb:0f:d2:1e:96:13:5a:
92:20:b8:ad:87:03:d2:0a:fa:f0:8e:d7:43:c4:40:
5f:92:bb:e5:bd:80:17:fe:e5:e3:48:18:0f:5e:76:
f1:af:13:66:f4:00:d5:f0:66:c3:ec:31:f1:cc:88:
9f:f9:32:05:3b:e8:86:9c:8b:62:44:4f:95:ce:59:
4e:20:60:3a:db:c5:b0:a5:12:40:9f:41:a3:b8:b7:
5c:37:bd:c6:fb:b6:0e:29:93:61:6e:6d:00:ad:48:
9f:79:da:68:f4:d4:53:bb:be:af:1f:81:3d:a7:4c:
30:d1:cf:8b:5e:40:bd:d7:f4:0b:a2:25:d8:89:ee:
0f:94:45:ed:49:43:50:a0:70:aa:17:a1:8b:46:af:
17:99:1a:b1:fc:6b:fb:70:03:85:af:9b:34:9b:ad:
73:f5:e3:15:5e:00:12:d6:a9:11:64:3e:fc:6a:a4:
69:7f:c7:59:ee:58:0a:9a:17:ee:bd:63:25:87:56:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:F9:AA:4C:C8:FA:45:A5:73:3C:8F:07:FC:0D:12:A7:EA:E9:76
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/SCj5qkzI-kWlczyPB_wNEqfq6XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.133.0/24
Signature Algorithm: sha256WithRSAEncryption
04:43:2c:00:61:28:2c:8e:07:6a:78:39:5a:b5:6d:c0:51:b7:
c8:78:e8:de:49:0c:b4:ac:83:f3:37:38:d5:e1:51:e9:b3:6a:
5a:c1:ad:db:78:5e:d7:00:77:14:cf:8f:20:81:de:98:5f:8e:
93:16:46:da:be:64:dc:86:f9:86:aa:3c:72:bd:46:b2:48:09:
39:87:10:a5:9a:fb:b6:2c:e8:92:74:3b:5c:dc:f2:48:31:7d:
3c:5a:ca:14:3a:0d:35:05:ab:99:58:fb:60:f9:b1:f0:9c:c6:
9b:4d:e7:65:9e:3c:9b:4a:e6:e1:d0:d3:d2:ce:cc:c1:22:62:
1f:b1:24:ee:ab:8d:8e:ec:bd:6e:e8:56:5b:f0:f0:b9:92:a2:
cb:14:64:8b:7b:4b:1d:06:c6:e8:1a:1c:eb:f9:82:69:88:15:
dc:6b:6d:3e:d2:29:fa:b8:d0:d6:d5:0c:a0:e2:97:fb:be:28:
aa:4b:55:21:85:29:dd:b1:6c:ea:47:bd:78:51:56:13:1f:1f:
d1:f2:50:7f:32:00:e2:0d:0f:f3:7f:ce:f3:78:e3:e9:a0:6c:
99:b6:5f:4d:e2:5e:ac:df:e9:9b:0d:23:4a:c9:73:1b:dc:ad:
51:21:46:cc:5c:15:7a:db:a1:7b:e0:22:eb:55:d8:d3:ff:39:
b5:bb:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:15:45 2024 by rpki-client on console-ams.rpki-client.org