Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/SEwgpSCE3PN67lmg2ihzzb29hGc.roa
File: SEwgpSCE3PN67lmg2ihzzb29hGc.roa (raw, json)
Hash identifier: lR07zyuXyVHeouH5cAA6rBs1PeMEuAK0vk28Y4hDkd8=
Subject key identifier: 48:4C:20:A5:20:84:DC:F3:7A:EE:59:A0:DA:28:73:CD:BD:BD:84:67
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 018CCA96D29C314225A70369B11B1711A590
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/SEwgpSCE3PN67lmg2ihzzb29hGc.roa
Signing time: Tue 02 Jan 2024 14:32:11 +0000
ROA not before: Tue 02 Jan 2024 14:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208346
IP address blocks: 217.198.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:d2:9c:31:42:25:a7:03:69:b1:1b:17:11:a5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Jan 2 14:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=484c20a52084dcf37aee59a0da2873cdbdbd8467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:f8:0b:b3:aa:23:69:71:89:dd:39:24:c7:
9f:87:59:e5:73:54:a3:ee:70:91:c3:e3:31:72:2e:
e3:2c:4b:69:76:0c:8d:7e:c7:b4:57:c7:03:83:e6:
89:60:5b:d8:b0:d2:06:b0:ad:29:f3:05:c5:90:6b:
a5:e3:64:27:ed:20:39:1c:1a:92:c7:6c:75:a9:c0:
98:8e:8e:c9:4f:e6:64:31:6c:2a:6d:67:d8:6c:01:
92:e3:e6:06:f3:ea:33:ff:39:0a:ae:59:c9:dd:c9:
d3:dc:db:92:5c:9d:0c:f6:7f:14:94:a2:e4:99:7d:
c1:d0:46:bd:fd:8c:0b:89:03:22:7a:f0:7f:14:8d:
3f:ab:07:fc:67:b0:38:e9:64:e2:28:32:04:a3:fc:
7f:a7:a9:2a:2e:7f:44:d0:b4:29:a1:69:28:c1:8c:
1b:83:f9:f6:21:71:06:6b:93:e9:43:22:37:e8:1c:
4c:80:7a:d9:c6:96:52:b4:35:0c:ae:04:b5:f1:db:
80:c7:72:83:cb:55:45:53:dc:5a:9c:b4:32:69:84:
74:62:17:c5:c1:18:85:1d:8d:e1:e2:9a:18:1d:72:
af:63:5f:c5:0b:de:ad:a3:fa:d5:6b:03:ad:fc:35:
dd:2f:11:e7:40:9e:67:62:be:c5:1e:29:b8:88:7d:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:20:A5:20:84:DC:F3:7A:EE:59:A0:DA:28:73:CD:BD:BD:84:67
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/SEwgpSCE3PN67lmg2ihzzb29hGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0d:a4:13:32:5d:f9:e8:30:b0:53:8c:d5:06:87:86:6c:41:
8a:f5:aa:9f:a2:d6:da:c9:4a:33:cf:27:76:dd:37:f3:fa:7f:
2d:5d:44:8b:1a:fd:bb:8d:91:29:ee:52:c2:a1:cd:0c:1f:45:
f3:64:db:e8:9f:50:c6:0c:98:0c:b9:d6:6c:75:03:94:f4:24:
44:d4:28:89:a7:7f:e5:a8:7f:b8:45:bd:6f:86:7a:65:9d:e7:
1a:4e:37:41:5a:47:c1:e9:4f:dc:fd:9f:44:5a:8a:27:9d:27:
5c:ac:d3:b9:39:0f:d8:34:b6:ef:c1:32:da:d1:10:dd:6c:be:
12:f2:86:04:53:62:c0:08:28:91:e3:68:9a:20:c0:0a:94:42:
40:1d:74:89:2b:12:b0:27:b6:f8:1d:d5:16:fc:59:9e:68:19:
58:55:6c:c7:1e:98:98:f2:1d:93:41:e4:73:9c:a0:76:62:ec:
ee:cc:63:09:53:ca:72:0b:ac:3d:a4:c8:f4:08:34:0f:de:98:
ff:fb:98:31:ed:c0:11:a8:4e:42:da:ae:6f:ec:b8:47:b4:a6:
88:35:d1:a3:cc:cb:61:37:aa:32:b3:68:73:c1:e9:77:33:ce:
dd:c5:21:2b:a9:75:66:04:f3:76:43:07:d4:7d:0d:88:6b:1c:
7a:37:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:18 2024 by rpki-client on console-ams.rpki-client.org