Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/SlgaxSJ5H2B9Pbn_N_P3aWWA5yw.roa
File: SlgaxSJ5H2B9Pbn_N_P3aWWA5yw.roa (raw, json)
Hash identifier: hPssqSExTPdrcJDjli/E3Ls1WtDkpjmOJmIQIOKeOFg=
Subject key identifier: 4A:58:1A:C5:22:79:1F:60:7D:3D:B9:FF:37:F3:F7:69:65:80:E7:2C
Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial: 018CC94DA96C92CD1D4E5AD35B5075DAC303
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/SlgaxSJ5H2B9Pbn_N_P3aWWA5yw.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206094
IP address blocks: 185.192.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a9:6c:92:cd:1d:4e:5a:d3:5b:50:75:da:c3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a581ac522791f607d3db9ff37f3f7696580e72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:32:c6:9a:f0:24:76:c2:8d:93:f1:1f:87:
4f:00:1f:e4:fe:8f:48:04:3a:6f:5a:4b:10:0a:e1:
2d:36:4e:de:f7:d6:2d:6b:2c:98:7f:34:61:6b:e1:
c9:09:0f:3e:15:a8:ff:ac:d0:6e:a0:84:83:84:30:
fd:aa:da:c1:94:11:eb:38:86:dc:0c:11:7b:7e:70:
ab:64:ed:55:eb:4d:2b:65:b6:8d:0c:a1:a4:4c:a9:
25:b2:f7:66:18:ce:3c:97:df:ba:a9:bd:b6:7a:c9:
6b:eb:b9:c0:f3:1a:f5:be:4d:df:84:d7:9b:0d:c9:
35:4a:00:de:c7:b4:6c:42:2b:4d:a2:77:88:54:0f:
3a:b1:25:42:21:34:e8:b5:47:00:3c:4d:92:fe:2b:
b1:da:60:4b:0a:a3:1e:34:d7:5c:0f:d1:9c:ac:21:
59:b2:ed:49:a2:97:3a:76:19:1c:d0:f9:e0:2d:58:
9e:cf:15:3d:f7:75:59:4d:25:ea:3f:a3:8f:27:87:
f0:ec:97:e9:0c:68:ee:5f:fc:55:a2:39:c1:e5:1d:
12:94:a5:19:19:6c:be:06:42:41:6b:84:81:e7:4c:
72:4d:b8:a2:92:f9:45:7d:43:cc:69:f2:f1:13:89:
85:83:0b:ed:32:fd:1e:80:0c:27:4f:1d:52:a9:1c:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:1A:C5:22:79:1F:60:7D:3D:B9:FF:37:F3:F7:69:65:80:E7:2C
X509v3 Authority Key Identifier:
keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/SlgaxSJ5H2B9Pbn_N_P3aWWA5yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.240.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b7:6c:28:26:3f:f4:fb:72:ed:53:d9:b6:f0:86:98:9a:08:
36:4d:5d:b3:c2:ea:95:dd:5e:44:b4:2e:ea:12:fe:0b:cd:94:
7c:b0:73:b2:82:54:88:f7:89:0f:5f:7b:d8:9c:eb:72:cf:03:
11:cb:28:db:a4:40:d2:96:11:eb:b0:0c:4e:4f:bf:56:83:45:
fd:57:d4:2b:7b:cd:3a:6e:a2:c3:49:94:44:81:ab:e1:dd:18:
c3:bb:f6:ea:fc:5b:8e:5c:f0:4b:b0:29:3c:40:75:0d:03:2b:
e8:37:78:e5:e2:f7:56:14:aa:cd:d2:93:96:69:d1:a3:4a:cf:
ae:1f:48:76:1a:92:bb:d6:74:a1:f6:9c:2c:af:b5:38:e9:c3:
b1:b7:23:31:1f:33:26:a6:78:dd:dc:0c:e1:90:91:2a:57:85:
53:c8:b5:f4:ad:55:c4:33:c7:4e:79:f2:55:17:52:d5:67:98:
4d:f5:86:79:ed:e2:ec:66:ac:1c:4d:01:b1:57:e8:2b:e3:4f:
ae:ee:6e:df:f8:c2:ba:72:5c:73:eb:39:f7:83:bb:05:11:1f:
0a:b2:a9:3f:5e:0f:52:21:ca:95:0b:ee:50:4f:7d:03:d0:7d:
07:19:2a:60:08:88:8d:85:d5:99:e8:31:a3:89:47:ba:c6:76:
92:ec:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:54 2024 by rpki-client on console-fra.rpki-client.org