Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/S558mOlKX0U2tA3egsX3EVcJbxA.roa
File: S558mOlKX0U2tA3egsX3EVcJbxA.roa (raw, json)
Hash identifier: sgUY5yFfBB5Hdno2HteMuDhrmtrYL5vwNzVQ4V0nL+0=
Subject key identifier: 4B:9E:7C:98:E9:4A:5F:45:36:B4:0D:DE:82:C5:F7:11:57:09:6F:10
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC801FD8F13B2E47FA461E17613873D55
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/S558mOlKX0U2tA3egsX3EVcJbxA.roa
Signing time: Tue 02 Jan 2024 02:30:22 +0000
ROA not before: Tue 02 Jan 2024 02:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8382
IP address blocks: 213.228.120.0/21 maxlen: 21
195.46.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:fd:8f:13:b2:e4:7f:a4:61:e1:76:13:87:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b9e7c98e94a5f4536b40dde82c5f71157096f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:0e:ba:7d:a9:85:d2:82:4c:be:64:40:0d:
d9:96:9a:a6:db:58:c0:58:49:7e:b8:91:83:cc:7b:
4c:74:68:d0:b5:5e:5f:75:de:e6:0c:33:a0:28:e1:
5b:40:f7:17:0f:6d:1b:51:1a:00:1b:d6:10:4e:12:
91:6a:00:92:04:18:02:55:bb:d7:56:7b:e2:5c:55:
18:a7:78:ab:54:de:98:1a:5c:b2:33:6c:8e:03:2d:
e5:3f:32:74:b9:a2:9f:28:52:33:2f:2f:10:d5:61:
50:a5:8c:c9:64:4e:de:4e:88:51:13:00:47:c7:ed:
d9:b0:98:c0:85:15:52:1c:8e:b5:74:fc:19:91:5e:
7b:1a:96:26:81:df:44:c0:e2:02:3e:e2:61:9a:ac:
ee:92:a0:05:2b:23:36:2d:87:ec:06:cc:8d:92:de:
43:6f:c7:38:7b:34:c4:16:74:8f:61:4f:e9:5a:fb:
0d:fd:b0:8b:80:af:91:9a:df:95:4e:3f:d6:74:b8:
d2:6f:b5:d9:67:bc:63:8c:fd:64:3b:de:8f:04:c1:
92:4b:a7:8e:9b:3e:01:c3:42:1b:90:91:a0:fa:a7:
51:0f:c9:34:44:bd:c3:8c:3f:95:fb:f1:02:50:3f:
34:f7:ed:a1:62:d8:dd:cc:45:9f:96:ce:b9:ff:b8:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:7C:98:E9:4A:5F:45:36:B4:0D:DE:82:C5:F7:11:57:09:6F:10
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/S558mOlKX0U2tA3egsX3EVcJbxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.46.126.0/24
213.228.120.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:08:2f:93:d1:15:c1:47:23:fd:60:d8:e4:2c:d9:b0:0f:27:
03:a1:6c:00:77:fc:c3:bd:1d:02:82:b1:1e:23:d4:94:96:d3:
75:92:f9:e9:66:61:56:0c:6b:3a:7b:e9:fc:98:ba:8a:a3:87:
a0:d2:e8:73:e2:81:e1:11:ba:37:3a:0f:2e:57:ee:41:2b:84:
c9:ec:17:3d:f1:28:48:f0:a6:0a:e6:28:2d:c3:a1:16:0c:2d:
37:e7:41:9d:32:c5:7c:94:e7:03:84:29:8c:17:1b:78:51:8b:
b9:9c:d6:06:f5:ee:e0:20:ae:51:91:12:c1:2d:3b:57:ae:ec:
c2:b2:e0:99:80:f9:2e:02:8e:36:91:24:dc:e8:60:4a:60:3b:
4b:2f:dc:0c:a2:17:59:79:2b:0f:94:07:53:43:0c:44:8b:92:
7c:aa:c1:c5:30:50:bb:dc:8d:48:5c:fa:39:13:4f:fc:bf:d4:
de:62:0e:67:f0:37:47:d3:7c:58:7d:b2:db:d6:eb:ba:fc:ce:
6b:a7:bb:4d:69:a7:19:68:6d:46:59:5c:e7:6a:05:5e:f1:45:
0a:c6:6a:94:f3:dc:78:da:f7:26:f4:65:1a:ba:4f:31:d6:b8:
b7:13:22:3e:ed:97:b0:9e:b4:0d:29:ac:ba:56:92:39:cc:2f:
1a:58:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:21:33 2024 by rpki-client on console-ams.rpki-client.org