Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/UYc-VmzYboSmWSCF6YXqt7KGs3Y.roa
File: UYc-VmzYboSmWSCF6YXqt7KGs3Y.roa (raw, json)
Hash identifier: r+nX3VNjdS4DPnU6aZ8zRLMUaWv3+KbHGySjcEBTrzU=
Subject key identifier: 51:87:3E:56:6C:D8:6E:84:A6:59:20:85:E9:85:EA:B7:B2:86:B3:76
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC92DDB66644BEC62ABC9F75EBA82E
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/UYc-VmzYboSmWSCF6YXqt7KGs3Y.roa
Signing time: Tue 02 Jan 2024 10:33:47 +0000
ROA not before: Tue 02 Jan 2024 10:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198335
IP address blocks: 213.198.104.0/24 maxlen: 24
213.198.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:92:dd:b6:66:44:be:c6:2a:bc:9f:75:eb:a8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51873e566cd86e84a6592085e985eab7b286b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:c1:eb:2e:16:4e:80:90:b6:09:9f:f1:78:
bb:75:83:57:75:a1:25:a9:70:4d:3a:c8:11:03:83:
33:ae:f9:c4:ab:69:82:0e:78:a9:a5:0f:3d:84:32:
82:88:88:9e:cc:03:1f:31:92:d9:77:ad:54:97:49:
e6:3a:0d:2d:df:6a:8f:bd:44:48:1c:fe:b4:62:c8:
c7:2b:db:ea:41:6f:da:16:cd:ea:3e:a9:a4:6f:30:
20:6d:39:c3:98:ef:2b:e1:37:e8:fa:4d:96:59:3e:
37:86:b8:53:08:91:bc:89:a1:48:57:9a:57:ab:09:
a8:8e:b7:5e:47:5f:d1:af:7e:8a:76:df:e4:eb:22:
eb:8d:f0:55:3c:11:77:c7:7a:cb:b6:36:d7:9a:64:
cb:ae:4c:54:d3:f6:33:2a:bc:86:5c:c1:5d:1d:3f:
15:88:b5:fe:c0:62:c5:28:c8:dd:3d:b0:20:3c:e7:
10:32:8c:38:15:a9:46:b5:f9:83:af:97:cc:62:54:
4f:e4:cb:64:42:d0:d9:d0:eb:a3:27:f2:9f:8f:12:
70:35:59:68:0a:15:f2:e4:83:70:88:9e:4b:ea:26:
7a:fb:7f:07:ba:09:f0:e0:35:d1:63:10:29:6c:7c:
0a:c4:65:95:91:66:8e:60:07:85:53:2f:a2:62:52:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:3E:56:6C:D8:6E:84:A6:59:20:85:E9:85:EA:B7:B2:86:B3:76
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/UYc-VmzYboSmWSCF6YXqt7KGs3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.104.0/21
Signature Algorithm: sha256WithRSAEncryption
51:8b:ac:f3:4c:c4:9e:2b:93:b2:8e:2f:45:a9:23:f5:7f:99:
8d:3b:1d:0d:1d:13:7b:d1:ca:1c:e3:4c:69:ef:9a:8c:ad:a3:
d1:d6:ab:88:91:bb:bc:3e:7e:8f:80:0a:2a:00:d3:b5:96:e2:
42:d8:fb:18:c9:d7:cc:b5:d3:4c:0a:fd:c8:e2:fb:80:3b:8c:
76:db:b9:a0:4a:ac:65:98:ad:ae:e9:4e:a8:e6:10:45:9d:84:
b9:6f:d2:da:e4:e2:59:14:32:7e:d2:b3:e6:d3:a0:da:f5:0e:
2d:20:60:d2:c4:82:28:84:ab:fa:fd:a6:48:ba:40:c5:dc:a3:
a9:4d:d9:ef:00:49:a3:e1:e9:84:be:71:35:0d:16:94:e4:73:
32:a0:af:c0:80:91:ae:cd:2d:89:2b:f6:77:ec:fb:43:92:4b:
c0:bb:1d:69:52:a6:50:0c:87:90:09:da:0a:fe:5b:ea:32:7a:
bc:76:1b:0c:a3:0e:78:0e:e1:89:ed:97:25:f5:78:f9:3a:bb:
c7:82:05:e6:7f:ea:17:ee:9d:e3:7f:38:92:5f:37:d9:41:60:
a6:b6:c4:26:30:65:48:7e:b5:b0:26:cd:b0:c4:1c:8f:34:21:
b4:3b:5f:e6:71:d3:26:d0:67:c7:d8:80:7c:4e:8a:a2:d9:98:
3b:ac:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:19:11 2024 by rpki-client on console-ams.rpki-client.org