Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/sbOQThQD2FpwtnHfXZqMJYNEA1A.roa
File: sbOQThQD2FpwtnHfXZqMJYNEA1A.roa (raw, json)
Hash identifier: 9TwAH/p6EttbvVfim5Sl0dqUmH9x64fHqUPfCl3vojI=
Subject key identifier: B1:B3:90:4E:14:03:D8:5A:70:B6:71:DF:5D:9A:8C:25:83:44:03:50
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 018CC64ADD653E2A3BAD1F97A2200FEB426C
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/sbOQThQD2FpwtnHfXZqMJYNEA1A.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23344
IP address blocks: 157.23.224.0/20 maxlen: 24
2a0e:bbc0:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dd:65:3e:2a:3b:ad:1f:97:a2:20:0f:eb:42:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1b3904e1403d85a70b671df5d9a8c2583440350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:cf:d4:3b:6c:b7:8c:73:57:83:db:4c:82:
26:fb:cb:88:90:72:8d:2c:6b:d7:47:fb:36:cf:ec:
4a:0f:57:72:dd:6b:64:ac:d8:5e:85:15:e6:30:97:
44:11:54:5b:f0:44:5c:3d:31:d1:f9:76:56:65:c7:
c3:a9:69:e0:87:0d:25:5a:b9:67:47:88:e1:7f:ee:
49:72:f8:c0:c7:c8:b7:b5:7c:ba:ab:e5:e1:e2:49:
6a:c7:a7:65:27:9d:6a:77:dc:7a:03:fd:b9:76:cc:
59:37:b7:f5:05:fd:6d:62:ad:a5:e6:84:18:94:89:
b3:db:46:43:77:37:c5:c8:dc:5e:37:35:58:75:46:
ae:42:87:00:38:4e:b8:74:57:00:2d:0a:2e:ae:dc:
4f:68:91:e8:fb:5e:17:c9:23:ed:ed:e2:71:a0:25:
d5:0c:eb:9e:cf:18:6e:4c:92:5a:3f:78:ba:e3:b0:
17:f9:35:13:c0:c2:70:08:fe:2f:7a:4c:53:c1:d8:
c4:98:03:39:bb:2c:c7:20:74:fd:27:7e:f4:98:43:
42:9b:21:45:c0:38:ab:66:8a:da:43:c6:b0:ce:2e:
16:0b:e8:49:4f:f1:a9:d7:93:f2:fe:14:67:93:9d:
84:ae:92:12:56:68:15:23:45:38:e0:16:8a:39:ab:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:90:4E:14:03:D8:5A:70:B6:71:DF:5D:9A:8C:25:83:44:03:50
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/sbOQThQD2FpwtnHfXZqMJYNEA1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.224.0/20
IPv6:
2a0e:bbc0:8000::/40
Signature Algorithm: sha256WithRSAEncryption
ae:73:5a:6a:28:22:5f:a0:96:c2:66:ae:0e:03:67:70:16:b9:
7e:5f:41:ab:4a:7d:62:bd:54:d8:af:8e:7f:24:d2:1a:5b:03:
50:bf:23:50:16:ad:e6:2e:78:8c:1c:fe:46:3e:84:3e:a7:5e:
ec:aa:43:9b:db:76:46:fb:e2:76:e9:83:b4:c3:9b:ee:1b:29:
a2:2c:46:b7:2c:5a:27:4c:04:53:ba:a7:7d:7b:0b:f4:9e:c5:
ec:94:88:eb:ba:a4:62:5d:56:58:8c:86:61:45:1f:6b:b9:b9:
4f:c3:c9:b7:5a:cf:a3:16:d1:ed:44:25:dc:4b:d9:07:6c:70:
a4:9a:ad:a8:15:df:a9:a8:73:96:77:c9:79:46:1f:90:0b:45:
bd:17:49:28:13:33:9a:d9:f5:42:86:19:0e:cc:f2:7c:45:bb:
5c:70:3e:85:6f:2f:d0:b9:f7:d2:0d:b5:f5:a6:75:9d:c8:bb:
b1:02:eb:06:0f:29:c5:c7:c8:a6:d6:b4:29:b2:c9:32:95:af:
fd:7b:de:d0:af:73:be:7e:5d:10:e8:b9:29:c9:7f:7e:1c:19:
8f:90:00:a9:4a:62:a2:ac:fb:61:80:2d:e0:31:da:64:4b:de:
98:15:47:f3:ec:c3:7f:26:44:9b:7b:a7:ce:e5:09:fc:fd:50:
f8:0d:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:21:00 2024 by rpki-client on console-fra.rpki-client.org