Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/SBzamSvrwjErj8mdO-NxnabwkR4.roa
File: SBzamSvrwjErj8mdO-NxnabwkR4.roa (raw, json)
Hash identifier: vKiTmCdWmbLjEiAcTl7Ov1YXawFiM7D1Bm9YxgWMJ64=
Subject key identifier: 48:1C:DA:99:2B:EB:C2:31:2B:8F:C9:9D:3B:E3:71:9D:A6:F0:91:1E
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 018CC56EDF18C2021167071D91539B95533B
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/SBzamSvrwjErj8mdO-NxnabwkR4.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61272
IP address blocks: 185.177.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:df:18:c2:02:11:67:07:1d:91:53:9b:95:53:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=481cda992bebc2312b8fc99d3be3719da6f0911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:1d:38:52:1c:25:37:d6:19:a9:6f:f9:c1:
7f:25:c3:22:64:24:52:01:70:ce:83:52:bc:fc:c1:
7f:31:79:0a:25:75:dc:50:60:e3:7f:da:bc:7a:57:
3a:23:d5:a2:4b:d8:60:5e:6b:a9:90:7f:e2:9f:dc:
f9:cc:f9:da:a1:cc:75:33:ad:37:02:49:1f:3b:18:
fd:85:4b:77:72:d7:b5:e7:54:3b:d0:b3:e0:41:f4:
83:c1:0f:6c:f2:35:79:6a:42:b6:a0:df:33:8c:91:
0f:65:0d:f6:8c:01:53:ac:d3:8c:7a:8b:4e:b5:dd:
86:0d:b9:74:a4:bb:dd:0e:ab:1b:cb:eb:f6:e9:5f:
5e:c1:2d:6f:e3:c0:f5:0f:5c:37:a0:9f:a7:9d:37:
34:c5:cb:44:10:a5:56:7c:df:7a:fb:5a:f8:6a:57:
96:82:47:93:9c:28:22:f9:54:a7:4e:ac:3b:c2:ec:
a1:c8:cc:5a:30:67:73:e7:cd:68:ef:0c:5e:f6:df:
31:f5:f4:ef:88:7c:da:8c:70:29:52:c1:1e:9c:12:
ae:a0:d0:f4:8d:0b:7f:ef:d9:fa:c5:4e:85:e9:14:
f6:3b:ed:a4:50:32:f5:0f:1c:56:6d:49:cc:5c:f1:
6f:3f:b9:d7:30:de:25:94:b2:9d:b4:9f:11:c6:a0:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:DA:99:2B:EB:C2:31:2B:8F:C9:9D:3B:E3:71:9D:A6:F0:91:1E
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/SBzamSvrwjErj8mdO-NxnabwkR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:95:f7:61:1f:c1:9a:f3:22:b3:ac:ed:84:7e:47:ce:60:d7:
82:18:dc:85:13:e9:96:d0:2f:27:24:19:d0:87:7b:2d:27:93:
cc:77:05:06:62:6c:19:bb:2d:11:9f:e8:10:59:8f:f4:3b:03:
8c:6e:cb:da:1c:56:9f:da:51:e8:70:97:eb:5f:4f:f6:41:23:
2f:29:a8:d6:c1:97:f9:da:12:9e:ae:d5:79:3f:51:22:65:a5:
8e:d4:ce:48:6e:4b:ed:27:5d:ca:a2:03:82:7b:24:e0:10:87:
84:4d:14:87:e9:44:f1:a4:a7:97:00:f1:18:8e:91:0d:ce:c3:
12:2f:9c:96:21:6e:e4:a3:79:6d:82:48:5b:0b:68:33:7c:57:
c6:69:70:ee:2d:e6:9c:56:b9:57:53:fe:d8:3c:b4:51:6c:73:
0d:46:53:db:fd:34:ae:d5:bd:87:48:46:8a:26:01:db:4f:fa:
e4:eb:51:75:8f:64:94:be:9f:f5:56:e0:70:07:39:ce:c9:a2:
c2:fe:bf:b7:54:7f:c4:0d:a7:88:8d:bd:c6:8b:c4:b4:dc:8e:
1d:6e:4c:76:d0:72:08:f6:8f:f1:5e:06:f9:dc:a2:ec:2d:84:
11:63:d0:9a:12:2d:ce:35:21:f3:39:58:93:a4:97:15:86:88:
9e:b0:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:15:27 2024 by rpki-client on console-ams.rpki-client.org