Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SWI3EcNlgCU2gRT_AeZZF69maSA.roa
File: SWI3EcNlgCU2gRT_AeZZF69maSA.roa (raw, json)
Hash identifier: Fc0pjAfWs7jZNCybHUnkS6LNQeeWerCCvcIBMiaUZWg=
Subject key identifier: 49:62:37:11:C3:65:80:25:36:81:14:FF:01:E6:59:17:AF:66:69:20
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018EA5E4971F6CA3BA77C7C92E9D94DC5D21
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SWI3EcNlgCU2gRT_AeZZF69maSA.roa
Signing time: Wed 03 Apr 2024 21:36:45 +0000
ROA not before: Wed 03 Apr 2024 21:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:e4:97:1f:6c:a3:ba:77:c7:c9:2e:9d:94:dc:5d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 3 21:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49623711c3658025368114ff01e65917af666920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:f9:de:c7:b7:db:3a:61:15:b8:aa:7d:82:
34:a2:8f:e9:a1:ac:d8:6c:36:eb:f3:4d:01:2b:d9:
e9:0f:65:29:c8:65:d8:db:63:cf:e3:39:5e:c9:06:
26:6f:3f:76:1a:42:73:b5:f3:39:89:c6:ca:7a:51:
76:0e:8f:6e:41:48:05:11:b3:eb:03:62:25:36:ce:
9f:aa:3c:14:45:19:eb:38:cd:8f:8d:a1:b6:75:9f:
c7:99:20:ac:59:ee:ce:b4:7f:14:10:90:06:45:a1:
c9:66:74:ab:79:8a:e5:7e:10:3b:65:32:c9:3b:ac:
77:37:1c:0d:64:ed:8b:a2:8c:1c:7e:56:86:3a:50:
9f:bf:43:7b:93:e2:b1:eb:74:79:e0:05:1f:45:d0:
42:72:6a:60:f5:43:39:11:31:a2:48:01:81:b8:0d:
61:b4:28:51:3a:1d:dd:9f:b8:c1:13:4f:c9:4a:a7:
05:81:9f:c5:c2:02:13:e4:f9:5e:fd:d7:a8:e3:5f:
dc:d1:19:f7:7c:b7:20:e5:49:c7:56:a8:4a:d2:ea:
61:8d:e7:45:59:16:79:e0:c2:7a:7a:2b:49:f7:8f:
99:ae:0b:53:ea:12:a5:5b:64:cd:92:48:af:fa:68:
2d:ba:3b:24:be:bf:77:3a:32:30:a4:38:2a:8c:57:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:62:37:11:C3:65:80:25:36:81:14:FF:01:E6:59:17:AF:66:69:20
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SWI3EcNlgCU2gRT_AeZZF69maSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
47:50:fb:2d:ab:cc:c0:1e:47:a5:b5:d4:bc:eb:74:a8:d5:c5:
c8:d5:44:4f:46:24:12:be:82:7b:bf:91:c5:80:36:7f:6b:48:
de:c3:0f:be:8d:95:07:c8:08:a9:36:9f:c9:14:e8:1e:fb:b0:
9f:07:2f:e8:0a:c7:bf:45:19:f0:ee:16:74:f8:d6:21:53:dd:
01:2d:82:f8:91:ac:2f:38:25:97:d2:a0:3f:c7:02:66:db:f2:
8f:28:b2:6a:e1:f0:06:c4:fd:f5:60:17:c7:d2:d3:bf:e3:f7:
c8:7d:7a:f9:ca:74:a5:f5:cb:51:a7:04:d6:40:ff:f9:31:f1:
da:81:10:93:28:9d:d4:99:63:ff:72:45:e0:de:3d:35:d8:37:
24:ed:50:7b:de:58:c4:95:d3:51:7e:4d:0a:ff:b1:ce:b3:25:
09:f1:14:f8:ad:c1:ac:72:98:24:cb:04:37:b1:87:d8:67:ec:
fc:82:2a:0f:06:4b:fd:d8:07:ca:f7:56:5e:e1:14:a3:a2:78:
9a:2e:7c:d8:d2:9a:34:21:51:cd:13:9e:51:39:aa:84:8a:a0:
16:9a:8b:93:14:6a:2e:4e:63:c7:37:0d:a3:1f:e1:7a:9b:ca:
68:c2:d6:89:36:83:b3:55:c4:8d:3b:fb:d5:7b:25:f9:e8:83:
59:60:d9:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6l5JcfbKO6d8fJLp2U3F0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwNDAzMjEzNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTYyMzcxMWMzNjU4MDI1MzY4MTE0ZmYwMWU2NTkxN2FmNjY2OTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfX53se32zphFbiqfYI0oo/poazY
bDbr800BK9npD2UpyGXY22PP4zleyQYmbz92GkJztfM5icbKelF2Do9uQUgFEbPr
A2IlNs6fqjwURRnrOM2PjaG2dZ/HmSCsWe7OtH8UEJAGRaHJZnSreYrlfhA7ZTLJ
O6x3NxwNZO2LoowcflaGOlCfv0N7k+Kx63R54AUfRdBCcmpg9UM5ETGiSAGBuA1h
tChROh3dn7jBE0/JSqcFgZ/FwgIT5Ple/deo41/c0Rn3fLcg5UnHVqhK0uphjedF
WRZ54MJ6eitJ94+ZrgtT6hKlW2TNkkiv+mgtujskvr93OjIwpDgqjFeqHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEliNxHDZYAlNoEU/wHmWRevZmkgMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvU1dJM0VjTmxnQ1UyZ1JUX0FlWlpGNjltYVNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufZxMA0G
CSqGSIb3DQEBCwUAA4IBAQBHUPstq8zAHkeltdS863So1cXI1URPRiQSvoJ7v5HF
gDZ/a0jeww++jZUHyAipNp/JFOge+7CfBy/oCse/RRnw7hZ0+NYhU90BLYL4kawv
OCWX0qA/xwJm2/KPKLJq4fAGxP31YBfH0tO/4/fIfXr5ynSl9ctRpwTWQP/5MfHa
gRCTKJ3UmWP/ckXg3j012Dck7VB73ljEldNRfk0K/7HOsyUJ8RT4rcGscpgkywQ3
sYfYZ+z8gioPBkv92AfK91Ze4RSjoniaLnzY0po0IVHNE55ROaqEiqAWmouTFGou
TmPHNw2jH+F6m8powtaJNoOzVcSNO/vVeyX56INZYNkS
-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org