Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/Sm77MpX9YleplIxaurnHn7c31Wo.roa
File: Sm77MpX9YleplIxaurnHn7c31Wo.roa (raw, json)
Hash identifier: wROQbxEt2+P94m0JKevKhkQD3Lz0s2Cax2F0H1VBsSM=
Subject key identifier: 4A:6E:FB:32:95:FD:62:57:A9:94:8C:5A:BA:B9:C7:9F:B7:37:D5:6A
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 018CC7259338A81CE7578E5F75D527E17922
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/Sm77MpX9YleplIxaurnHn7c31Wo.roa
Signing time: Mon 01 Jan 2024 22:29:37 +0000
ROA not before: Mon 01 Jan 2024 22:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 46.244.32.0/20 maxlen: 20
92.246.224.0/19 maxlen: 19
185.45.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:93:38:a8:1c:e7:57:8e:5f:75:d5:27:e1:79:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: Jan 1 22:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a6efb3295fd6257a9948c5abab9c79fb737d56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:9c:10:f4:62:b2:16:82:a5:75:68:36:ef:
71:05:d2:9b:e2:f8:0b:db:7d:db:d7:63:61:e6:04:
ea:3e:2b:c4:05:3f:ac:84:bb:32:1e:48:8f:be:6e:
66:03:fd:78:e9:b4:e8:71:0d:fc:ca:ba:af:fc:47:
5a:7c:28:65:5c:8c:38:15:9d:5b:d7:22:d5:34:18:
df:7d:52:c6:94:da:54:6b:6d:4d:cb:bb:12:b8:4f:
e3:51:7c:48:3d:26:e5:eb:aa:9a:cb:e4:38:d4:65:
74:dd:3d:0f:8b:33:f8:10:6b:20:69:49:01:30:8c:
f2:f8:68:64:fe:fb:3d:c1:bc:e5:b5:7d:22:89:92:
df:99:d2:c9:0c:45:a3:a0:dc:e0:e9:90:01:6d:0f:
b2:be:2f:3a:14:ef:92:6c:0f:5e:84:9b:19:9e:d9:
15:3f:9f:08:0d:b1:27:ae:c5:bf:93:f6:b0:60:90:
70:10:e2:d9:54:13:32:a4:73:23:cc:32:0f:8e:19:
03:8f:73:05:7d:af:86:9b:f1:b5:58:4c:4f:6e:28:
42:51:61:ff:c8:7e:8e:5f:00:97:e4:49:6a:32:16:
b1:c3:d9:8a:76:bf:9a:83:2a:7d:54:f2:13:67:02:
90:00:bf:95:15:dc:50:5a:5e:7a:ab:a7:26:3c:2b:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:FB:32:95:FD:62:57:A9:94:8C:5A:BA:B9:C7:9F:B7:37:D5:6A
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/Sm77MpX9YleplIxaurnHn7c31Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.32.0/20
92.246.224.0/19
185.45.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:f7:68:df:77:c4:7f:dd:1c:fa:75:25:c2:d5:8c:4f:0b:20:
f7:7c:f0:71:c2:ce:a6:30:c0:f6:1a:ec:84:bd:ce:fc:34:8c:
01:4a:b4:1c:bf:b5:fd:3b:e1:86:fa:d2:af:e3:0d:56:b6:b2:
32:2b:3b:49:5f:d7:3f:15:f2:ce:97:70:90:09:b1:29:02:2a:
c6:f2:b1:2b:e2:47:01:44:e4:f0:29:89:1f:3c:cb:d1:46:20:
60:09:b9:bd:6a:e5:f3:6c:33:24:53:63:ee:03:d0:85:ca:00:
a1:f3:84:8d:a3:a7:f3:4a:84:d6:8e:43:23:45:66:78:b9:6e:
41:78:e3:ef:dc:41:87:fb:dc:e3:b0:be:1b:74:1e:e1:13:6b:
6e:10:e1:b7:0c:27:a5:dc:ed:80:dc:ea:a3:b4:bc:d9:2c:46:
d1:c3:e0:7a:60:b7:26:6e:34:a0:28:6f:4e:89:af:3f:d3:cc:
46:ae:26:0d:4c:9d:4b:4e:66:53:f1:5d:1a:24:45:35:2c:1a:
88:2a:32:9e:63:7f:5c:fe:c5:c1:89:b7:95:c1:77:c5:96:7f:
21:18:23:2c:32:f7:a5:96:75:ea:b9:74:2f:24:97:3c:53:8f:
c0:b8:80:b0:fa:71:fb:4f:75:1c:82:fa:2f:3d:91:8a:3f:bc:
02:ae:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:58 2024 by rpki-client on console-ams.rpki-client.org