Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/bLGZQgrVXk1dC9xT0XdVBPcA-sw.roa
File: bLGZQgrVXk1dC9xT0XdVBPcA-sw.roa (raw, json)
Hash identifier: BqJWXNlERWfTYnx4GTAk6LxiY1Fv4UUza4eYXFjGVVM=
Subject key identifier: 6C:B1:99:42:0A:D5:5E:4D:5D:0B:DC:53:D1:77:55:04:F7:00:FA:CC
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019350CDE0984887B61C4389534183BEB816
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/bLGZQgrVXk1dC9xT0XdVBPcA-sw.roa
Signing time: Thu 21 Nov 2024 22:18:09 +0000
ROA not before: Thu 21 Nov 2024 22:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58018
IP address blocks: 46.36.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:cd:e0:98:48:87:b6:1c:43:89:53:41:83:be:b8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Nov 21 22:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb199420ad55e4d5d0bdc53d1775504f700facc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:60:db:b5:5b:ea:20:61:05:ff:2f:db:74:
bf:39:67:ec:71:14:97:19:c3:6b:40:59:4a:a8:e6:
a5:21:4c:98:fb:33:68:cc:5b:34:91:16:16:eb:d2:
66:df:db:82:49:2b:d5:f7:b3:a2:d2:e9:af:9e:43:
21:42:76:6d:bf:1e:50:a1:e3:dd:d0:b5:17:d7:88:
15:3f:ad:c6:7b:d1:40:cb:b8:8a:b7:ca:c3:ae:32:
c1:84:16:a0:28:18:26:61:1d:d3:98:de:dd:ef:2e:
0b:3d:d7:f3:9e:da:d2:bb:70:4d:a3:59:5b:b7:ef:
87:d9:0b:a6:51:9c:46:48:58:7a:6d:12:75:91:c5:
fa:e3:59:1f:23:8d:63:ba:46:2a:0a:c8:b7:2e:6f:
89:46:ae:29:c3:7d:7f:51:e8:f6:ba:01:e1:f8:d5:
ab:af:86:0f:8f:7a:fa:42:c1:a2:c4:88:ab:03:ae:
95:e4:d1:26:e2:07:1f:20:dd:38:eb:17:81:82:39:
c1:b7:43:42:2c:44:59:eb:0f:bb:dd:91:c9:f5:42:
48:2b:2a:d3:16:0b:54:cd:ec:fd:8f:a7:17:22:07:
2f:7a:e8:69:eb:b1:d9:6b:69:38:7e:cb:f2:5a:6a:
85:b4:4a:7f:38:98:0a:b0:7c:8e:f6:e3:1a:d3:cb:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:99:42:0A:D5:5E:4D:5D:0B:DC:53:D1:77:55:04:F7:00:FA:CC
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/bLGZQgrVXk1dC9xT0XdVBPcA-sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.200.0/24
Signature Algorithm: sha256WithRSAEncryption
69:15:75:bc:bb:c6:1f:a1:56:96:ba:3d:73:25:98:72:6f:d1:
28:f6:32:1d:ae:df:47:ea:b4:ed:75:46:ef:48:eb:a7:35:6c:
ca:94:01:53:d8:e4:1e:a7:95:1f:80:c9:13:ea:e1:95:15:b7:
c4:01:26:e7:bc:8b:c1:72:c2:a2:cd:9a:46:3f:77:b4:b7:03:
19:c8:8d:d5:11:bd:bb:dd:f2:0f:5d:33:76:ca:a6:ec:76:39:
49:bc:2c:5f:1d:d1:71:42:2e:c8:c0:37:b8:da:e2:cf:9d:6c:
d3:f5:58:f2:21:5a:96:5f:c8:2c:55:76:69:81:b9:9c:b5:bd:
d4:37:f6:c2:b6:1e:10:86:ed:4d:5a:91:1c:3e:f7:43:a3:30:
90:5f:2f:75:10:f0:a0:74:f4:f5:30:f6:b1:4f:21:51:8c:1c:
34:96:27:a3:27:71:67:24:13:36:e2:49:f8:f6:e1:41:48:ad:
ff:c4:70:29:78:d3:ac:4f:4e:db:db:a0:ad:df:6c:48:c7:ee:
b7:1c:a5:c9:8b:73:4d:24:b5:66:01:e9:cf:9e:49:95:80:5a:
88:7b:80:ca:14:0a:58:f5:df:0c:d8:9f:2b:16:38:b8:03:2b:
66:bc:b8:79:3e:fa:75:da:cd:21:0b:4f:27:1a:7e:ce:7e:7d:
c8:29:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:27:07 2024 by rpki-client on console-ams.rpki-client.org