Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/S7BXV-c3clO18W9xOTz99r092hQ.roa
File: S7BXV-c3clO18W9xOTz99r092hQ.roa (raw, json)
Hash identifier: RKynOz0yygZhaZlZXI50pHWJ2CYBNopKIwQ9qvtbeLM=
Subject key identifier: 4B:B0:57:57:E7:37:72:53:B5:F1:6F:71:39:3C:FD:F6:BD:3D:DA:14
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 018CC86F2961C44F3781D3D6FA51D1425115
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/S7BXV-c3clO18W9xOTz99r092hQ.roa
Signing time: Tue 02 Jan 2024 04:29:37 +0000
ROA not before: Tue 02 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205499
IP address blocks: 178.251.16.0/22 maxlen: 22
178.251.16.0/24 maxlen: 24
178.251.17.0/24 maxlen: 24
178.251.18.0/24 maxlen: 24
178.251.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:29:61:c4:4f:37:81:d3:d6:fa:51:d1:42:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 2 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bb05757e7377253b5f16f71393cfdf6bd3dda14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:71:67:4e:b2:60:5c:43:37:5c:2f:d3:2e:
00:85:53:50:f0:fe:4e:9b:d1:21:16:ec:0d:48:73:
72:5a:f8:60:5c:be:4f:e9:36:d9:b9:95:ee:eb:fc:
4d:20:56:65:2a:d9:21:80:c2:2f:60:d5:b0:0e:25:
af:13:ac:fa:02:23:27:cd:6b:d8:42:0c:c7:78:92:
6a:de:54:ac:97:01:e7:1f:b4:d0:17:45:86:f8:91:
e2:e2:38:f6:79:1a:4d:54:5f:7d:2a:17:63:9f:39:
40:1c:82:db:cf:44:d3:1e:01:4b:a1:3d:ce:9b:9b:
79:d5:e5:24:29:8c:1d:11:d6:b6:7a:a3:db:72:9b:
89:6f:71:16:df:68:93:3d:e9:d6:4a:2e:dd:79:3e:
c7:c2:cf:5f:ea:b4:9b:80:90:0e:95:12:ee:93:10:
93:58:d5:da:ff:86:20:82:1f:23:ec:d0:ec:9f:5b:
a6:9a:17:13:6b:58:1f:c5:82:7e:83:84:43:ca:08:
a7:fd:d2:59:48:94:dc:0e:0a:7d:33:e6:0a:a9:19:
ed:18:7e:a6:d9:7f:13:ac:6e:72:fd:cd:f3:96:00:
fe:c1:0f:e0:6c:b0:32:53:80:54:16:a3:bf:c8:3f:
16:ee:0f:14:5e:bc:55:06:fe:ba:32:3d:39:f5:a9:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:57:57:E7:37:72:53:B5:F1:6F:71:39:3C:FD:F6:BD:3D:DA:14
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/S7BXV-c3clO18W9xOTz99r092hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
06:0f:ff:77:88:23:af:f1:24:3a:e3:7d:80:cc:18:6c:bb:88:
f8:57:8c:80:88:0f:e5:46:70:60:d3:d2:c2:3c:74:87:10:cf:
88:ca:0f:bc:da:d3:7b:72:6d:cf:44:f1:a0:7f:1f:f2:35:2d:
59:8f:c9:0a:f4:c2:e9:a0:34:3e:6b:7a:d7:c7:da:09:bb:6a:
7c:d2:cc:af:09:78:9e:18:0c:0e:1a:6a:28:6b:93:b0:3a:e6:
11:8c:56:42:4d:ae:18:6f:4d:40:af:16:c6:1c:5f:34:51:01:
6c:86:5d:78:c0:f0:4a:d1:e4:2d:6f:a4:e1:ce:4b:a9:7c:f0:
72:49:dc:cf:11:c0:21:f5:fb:0c:d4:84:43:4d:a0:f3:49:c7:
ca:de:71:ac:fe:79:23:0d:7d:1a:8c:b4:fa:f0:e7:57:b3:54:
bc:9e:b9:47:18:91:7c:2c:29:e0:8f:9d:4c:39:85:e9:da:da:
ac:f1:9c:fa:4a:c9:2d:62:1d:27:6b:d4:01:c6:35:16:5a:09:
8e:0d:9a:a8:e2:be:73:34:de:8a:ec:99:57:87:3e:b9:1b:39:
89:5f:e2:59:ad:a4:d3:34:fc:aa:f8:b8:a6:e4:fc:6c:48:25:
68:5f:4e:4f:f5:02:34:b8:45:56:d3:f2:ea:72:e8:9a:1c:72:
c4:12:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:39 2024 by rpki-client on console-ams.rpki-client.org