Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/SE5tm3EH6jJPxokFyf21FUInkpE.roa
File: SE5tm3EH6jJPxokFyf21FUInkpE.roa (raw, json)
Hash identifier: TToaBeIGb4AWsyiqkQa5rRGEXdhVbvoMDr5M4FjTtB0=
Subject key identifier: 48:4E:6D:9B:71:07:EA:32:4F:C6:89:05:C9:FD:B5:15:42:27:92:91
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 01916A29B084D2F6EB1F34225A9F2A1A3794
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/SE5tm3EH6jJPxokFyf21FUInkpE.roa
Signing time: Mon 19 Aug 2024 10:23:22 +0000
ROA not before: Mon 19 Aug 2024 10:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215372
IP address blocks: 193.239.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:29:b0:84:d2:f6:eb:1f:34:22:5a:9f:2a:1a:37:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Aug 19 10:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=484e6d9b7107ea324fc68905c9fdb51542279291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:39:58:90:ed:a6:0b:92:9b:c2:30:6d:3c:
04:25:e0:a3:4b:31:af:02:5d:c9:6b:7b:4c:4d:70:
5a:51:28:7d:51:61:fc:96:11:e4:57:87:d0:e1:05:
97:1e:93:b4:3f:31:5b:6b:be:25:cb:ed:59:23:b2:
f8:ad:58:c3:b9:3a:16:dd:40:d4:17:d7:e4:2c:fb:
7d:0e:bd:77:f6:96:54:04:de:10:6b:a7:be:ba:b7:
0e:4c:81:89:59:1b:1c:6d:71:49:14:85:88:c8:aa:
c5:b9:1d:96:d8:cc:06:d1:b9:17:14:a3:53:e8:7c:
90:bb:4a:9e:f5:8b:ca:84:d5:73:6c:64:16:b3:d5:
7e:60:6f:3b:83:ce:2d:db:ef:5a:5e:92:f2:ae:da:
79:73:a4:21:e2:b6:72:76:bd:29:1d:8e:8c:3e:24:
65:0a:72:50:f0:a2:06:a8:68:df:b4:ac:aa:cc:87:
d5:11:db:1c:57:c5:96:1e:0d:b9:b7:5e:ac:e8:01:
aa:d8:0e:da:30:3f:f3:87:9f:18:83:20:fa:ec:31:
88:ff:19:c3:59:b4:c2:4e:84:97:35:b6:3b:bc:91:
16:78:4b:76:00:3b:37:76:96:51:12:ac:cf:16:a7:
ea:06:04:4d:2b:4c:62:ff:6d:0b:78:31:6d:34:1d:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4E:6D:9B:71:07:EA:32:4F:C6:89:05:C9:FD:B5:15:42:27:92:91
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/SE5tm3EH6jJPxokFyf21FUInkpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:01:29:26:9f:1b:e2:e5:d4:0c:da:bd:72:41:1b:b9:eb:86:
10:80:f7:37:98:1a:f7:66:0e:b8:2e:8d:1d:8e:5f:64:05:d3:
e0:ed:19:5f:fa:7a:e5:2e:ef:da:43:85:cd:e1:b3:6a:93:45:
a4:76:01:56:eb:79:27:3b:60:14:9a:5b:d7:a1:19:bd:e4:e1:
d0:68:19:cc:a5:d4:59:a3:57:67:ec:31:36:f2:fa:c0:7b:3c:
38:ec:3d:37:da:6d:ad:cb:49:41:7f:7d:01:be:a6:89:ef:8d:
90:c9:73:32:8f:2f:f9:47:69:c9:90:1e:95:78:e0:0f:37:64:
fc:92:07:07:45:ad:97:f0:ca:52:eb:94:fa:7e:6f:8c:52:56:
43:2e:0e:99:9b:5e:54:50:90:e4:a5:bd:78:ec:47:10:fa:67:
e2:3b:3d:d0:80:37:f6:5f:87:a6:f6:fd:28:e8:f7:f7:b6:71:
95:da:ec:f6:47:ef:d9:a9:81:cc:3a:7d:3d:7a:db:3a:91:60:
25:7e:15:68:df:8d:d8:d3:e5:7d:99:10:9a:4a:16:f8:ae:71:
cb:ef:9a:a7:af:33:1b:b6:80:03:38:48:1e:c1:62:7a:0e:d8:
28:bd:fe:30:9b:2b:6c:28:21:cf:96:3b:66:69:e2:02:c7:5a:
8e:ca:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:48 2024 by rpki-client on console-ams.rpki-client.org