Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i-SGAw18pY2BlohHTTPq8MV-ZEw.roa
File: i-SGAw18pY2BlohHTTPq8MV-ZEw.roa (raw, json)
Hash identifier: 1uxsrW9hQF7mzPSwuN6P/V4FYL1eeRBhBXVW6Rlxq90=
Subject key identifier: 8B:E4:86:03:0D:7C:A5:8D:81:96:88:47:4D:33:EA:F0:C5:7E:64:4C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BF610FFCF502AD2224F76DDB6316
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i-SGAw18pY2BlohHTTPq8MV-ZEw.roa
Signing time: Mon 01 Jan 2024 06:29:42 +0000
ROA not before: Mon 01 Jan 2024 06:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202243
IP address blocks: 92.52.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:bf:61:0f:fc:f5:02:ad:22:24:f7:6d:db:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8be486030d7ca58d819688474d33eaf0c57e644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:48:32:bb:62:65:28:57:2b:f0:fb:2f:2e:
15:5c:d3:91:f6:90:4d:4e:24:88:aa:22:2c:e9:5a:
9d:59:61:07:a2:bd:dd:6b:9f:87:f1:76:5d:e7:5c:
a4:a8:41:03:59:7d:8a:9e:5c:96:47:70:50:0d:fb:
e6:d7:2b:82:bc:a8:bf:9e:00:4f:0e:cf:6b:e0:c4:
68:25:94:98:07:b9:29:5a:c8:e1:c0:9a:29:a7:d6:
b7:48:d4:ae:82:e5:fd:e4:63:e5:ec:6d:44:36:4d:
fa:4e:a0:77:c9:65:29:31:84:bc:8e:11:19:16:b4:
a9:1f:16:dd:58:11:ff:86:2a:f5:c6:76:2c:01:97:
2e:63:97:56:88:57:d1:d2:d9:7a:c7:00:0a:be:36:
68:79:9c:f5:97:69:88:bb:61:bc:c5:98:66:d2:0b:
c9:94:4f:26:3f:d6:42:da:1a:ab:09:0d:92:a8:09:
4b:0d:4b:e3:2c:47:a6:88:2e:bd:c8:57:40:fa:dc:
84:5e:3d:a2:c3:49:2e:ac:31:14:f6:2a:37:fb:5d:
a0:76:77:e2:c7:37:c3:d4:0d:64:5e:9d:73:be:d1:
49:71:c0:e3:f7:fe:0e:72:b4:92:d9:37:7d:5e:37:
e1:b7:8a:43:7f:7f:a5:46:4d:01:97:74:4c:14:fb:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E4:86:03:0D:7C:A5:8D:81:96:88:47:4D:33:EA:F0:C5:7E:64:4C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i-SGAw18pY2BlohHTTPq8MV-ZEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.220.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fe:ed:31:37:27:40:ae:f7:5c:30:94:00:44:60:8b:88:fb:
ea:e7:7e:a3:b7:9e:f0:e0:23:a7:9a:37:d4:a3:66:21:28:7c:
53:b4:9d:d2:26:39:b0:69:32:6f:2c:c6:5c:40:d9:9f:5b:38:
17:a7:9f:14:72:8c:2c:ba:b5:47:4b:dc:61:81:50:af:66:7d:
b8:24:39:14:06:a7:36:44:b5:93:b9:ac:b6:3b:69:c7:a5:f5:
c0:c3:b3:4b:43:49:ce:37:2d:b2:ef:07:ea:ed:ff:76:57:48:
4f:d4:68:bc:9b:7b:3a:93:ff:ec:d2:6e:b0:ed:51:49:f4:8f:
de:84:2e:2a:d2:4a:cc:11:3e:7b:ba:a0:07:a2:a7:a5:40:ea:
10:86:61:65:b5:31:b3:56:07:41:c3:23:b9:bd:61:f1:72:3b:
ad:d2:92:4c:4d:dc:47:03:45:37:f9:e9:69:49:28:2a:44:14:
60:1e:ab:12:2e:b6:cd:dd:3c:bf:67:b7:bc:4e:11:a2:ea:96:
8f:ba:78:98:66:58:7b:7c:9c:bb:d4:37:12:b8:d1:b7:8a:19:
0f:e2:7b:9f:bb:88:3d:b3:f2:51:13:88:98:de:6e:76:83:40:
af:0d:0f:20:b6:05:08:f0:a7:c7:60:76:e2:e6:03:19:a5:68:
72:93:e5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:35 2024 by rpki-client on console-ams.rpki-client.org