Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sOqkT52q2y8_4TKssShrZspZWFI.roa
File: sOqkT52q2y8_4TKssShrZspZWFI.roa (raw, json)
Hash identifier: jeLJlTqaie9PNsIJJMfi8r+2oa+gqPjhK7AYM+EOyrA=
Subject key identifier: B0:EA:A4:4F:9D:AA:DB:2F:3F:E1:32:AC:B1:28:6B:66:CA:59:58:52
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EF03B99D8D91BE82C3649E75EE0F3
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sOqkT52q2y8_4TKssShrZspZWFI.roa
Signing time: Mon 01 Jan 2024 14:30:31 +0000
ROA not before: Mon 01 Jan 2024 14:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212588
IP address blocks: 82.118.237.0/24 maxlen: 24
2a01:8740:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f0:3b:99:d8:d9:1b:e8:2c:36:49:e7:5e:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0eaa44f9daadb2f3fe132acb1286b66ca595852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:37:9d:6d:10:2f:34:eb:01:16:fa:af:8f:1e:
37:da:08:d8:62:8e:c0:26:46:bc:74:e8:bd:11:cf:
b1:b4:4c:42:25:71:26:a6:9b:6e:1f:b1:26:65:28:
c7:5f:d9:e9:5c:58:b7:2a:df:71:18:eb:a9:cb:85:
5c:af:d8:09:cf:e5:c5:04:4a:ec:02:1b:35:05:81:
e6:e8:7f:f2:35:69:49:02:2f:91:bd:29:36:bb:7d:
0c:e7:05:be:75:22:84:e7:21:24:09:5c:83:d1:aa:
4c:c2:80:e0:2d:70:3f:8f:25:f7:4e:0e:d6:e2:01:
bf:f7:41:04:8e:59:90:8b:b8:95:9b:6c:2a:ab:38:
84:6c:56:4d:36:ca:20:75:98:cd:3b:46:53:d8:84:
28:4d:f4:39:4c:99:f3:12:c9:63:03:1d:f2:24:62:
bb:c4:01:d6:ef:26:59:30:d9:32:fb:0e:bd:f4:94:
47:2a:75:8a:1e:f2:0f:3b:3e:dc:de:aa:c6:fb:6e:
37:49:32:8e:5b:c5:98:d5:b1:01:48:32:49:c5:e0:
23:d8:93:2f:d4:19:57:52:2d:c9:49:00:cf:1d:f4:
cb:d3:a4:d9:c9:c3:3b:88:8e:d3:1d:a7:e4:2b:34:
7c:27:37:67:7b:3f:c7:ac:75:17:90:4a:f9:fc:91:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:A4:4F:9D:AA:DB:2F:3F:E1:32:AC:B1:28:6B:66:CA:59:58:52
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sOqkT52q2y8_4TKssShrZspZWFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.237.0/24
IPv6:
2a01:8740:5::/48
Signature Algorithm: sha256WithRSAEncryption
b7:9f:b3:fc:4c:a8:39:9a:44:fa:22:3f:69:52:10:f4:52:3a:
74:76:6e:30:df:49:9e:54:e9:25:90:68:e8:ac:48:23:c1:43:
42:c6:92:b6:2d:d3:5a:05:19:0c:6f:ae:a9:ae:e2:f7:23:5d:
1e:0f:29:b6:5c:d8:c1:7f:db:09:75:be:2f:a6:46:94:a1:12:
b2:2e:5a:24:d1:46:48:69:a0:e4:8f:58:59:f8:90:1a:9d:99:
7c:8b:69:a7:e3:9b:bf:a9:36:be:0b:3b:52:16:db:b0:5d:73:
17:ab:61:54:78:6e:2f:4d:60:1d:af:1b:69:21:56:d4:0c:74:
3b:69:b6:ed:3c:3d:0b:7a:9e:e1:b5:bb:9b:2a:82:81:fe:41:
02:16:3b:0a:d4:f9:23:3d:8c:2b:a5:10:50:09:d3:e3:63:19:
1e:58:49:c4:21:fd:c9:18:f3:b3:38:12:53:ba:21:ba:af:45:
97:21:1c:8f:95:79:87:53:6f:4f:bd:f8:f0:8e:2c:8d:c9:1f:
72:63:c9:82:f0:51:de:15:6e:ec:46:5e:3d:34:62:36:36:4c:
fe:06:35:cd:2b:eb:07:c6:33:d1:28:02:4e:fa:27:a8:a9:44:
1a:cf:f8:bc:ad:80:fe:36:13:6c:67:ea:9d:cd:e6:bd:c2:d2:
d7:4a:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:17:42 2024 by rpki-client on console-ams.rpki-client.org