Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa
File: uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa (raw, json)
Hash identifier: 6Iib9DN0waf34q3WxnzYzfzIuMLPbev7vDiW9vn9WVQ=
Subject key identifier: B9:2B:05:76:4A:F4:82:0C:73:E8:F5:3D:CD:B2:1C:D0:3D:21:52:E1
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 018CC6B7CC6D0EA3FA4507D13823E9E65D42
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa
Signing time: Mon 01 Jan 2024 20:29:43 +0000
ROA not before: Mon 01 Jan 2024 20:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47575
IP address blocks: 109.205.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:cc:6d:0e:a3:fa:45:07:d1:38:23:e9:e6:5d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Jan 1 20:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b92b05764af4820c73e8f53dcdb21cd03d2152e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:3a:8d:59:5d:ee:bc:d3:08:d9:56:77:71:
33:46:1a:fc:a5:81:1a:5f:b0:20:4c:91:d4:c4:70:
9f:81:bd:85:83:0a:8f:26:42:fa:46:c1:39:da:af:
e9:c9:71:17:7f:11:3d:20:8b:26:60:1b:08:33:8f:
df:ee:1b:47:0b:ad:e4:f8:f6:78:9e:9b:dd:3c:a9:
45:ef:34:d2:7a:71:1c:d1:b3:92:ff:8d:be:44:c6:
21:77:b9:87:41:78:69:4c:ef:29:13:72:97:84:8b:
ed:62:73:69:72:9d:3b:57:cb:ac:72:3b:d6:49:44:
0e:1d:2d:7a:08:d7:f4:bf:16:97:0b:98:d4:fe:05:
70:07:89:26:69:e2:07:47:5e:5d:e5:61:2e:67:7c:
43:2a:e1:c4:31:2b:d5:08:6d:2f:db:0a:5d:27:08:
20:14:1e:96:27:d4:9c:23:0e:c6:12:e2:05:88:de:
f9:58:c8:ef:c2:64:72:c2:84:98:31:5a:35:46:04:
8a:04:60:07:07:8b:19:71:d9:49:50:ec:fb:56:9e:
d6:de:99:17:c1:16:df:f9:5e:80:2a:58:e6:91:ae:
f3:0b:af:38:15:2f:1c:6a:12:47:2e:58:06:8e:c0:
c8:4a:d8:85:dc:73:ae:fc:c3:0c:61:a7:45:b5:d3:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2B:05:76:4A:F4:82:0C:73:E8:F5:3D:CD:B2:1C:D0:3D:21:52:E1
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/uSsFdkr0ggxz6PU9zbIc0D0hUuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.44.0/23
Signature Algorithm: sha256WithRSAEncryption
69:8a:7b:59:39:47:9d:60:b2:11:89:91:c0:d3:6e:68:70:66:
3d:64:fc:7e:e1:de:e9:29:f3:b9:d0:ca:41:20:dc:a9:bc:8f:
f0:77:27:c6:59:e7:60:2a:6c:55:6d:7e:76:8d:fb:7a:97:2d:
35:97:ae:a5:cc:4a:35:38:1c:29:35:72:83:f2:d3:6a:47:8b:
c6:ad:89:8a:67:83:ff:62:19:75:dd:37:91:75:5c:c9:a4:74:
f2:4d:9c:17:d4:bc:5d:9b:f7:15:31:3c:01:00:32:09:78:29:
13:b5:5f:6a:fc:4f:e4:f8:a0:36:98:c1:98:f6:bf:3f:bc:4a:
ce:d5:4c:ab:3c:59:e3:0d:48:a6:50:f3:3f:dd:54:3c:fb:84:
b7:8d:25:56:e8:cd:e5:db:28:b4:17:02:38:e7:e2:9a:e5:e3:
55:fd:86:2d:1d:c0:ab:a5:3c:db:c3:46:78:66:b9:31:94:9a:
e8:6a:7c:54:47:bc:e4:86:a1:c5:9d:4c:c8:22:66:82:42:9c:
08:5c:eb:1e:06:6f:21:25:2b:10:dd:e1:d9:2e:bb:a7:66:ac:
d7:b2:0c:7c:27:a0:65:c1:38:38:24:7a:af:18:b6:37:bf:db:
21:84:08:10:b8:22:fc:60:63:fa:b3:ab:0e:33:8e:4f:a4:7e:
ed:74:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:06:38 2024 by rpki-client on console-fra.rpki-client.org