Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/UX6UYtLtvP2a_x1SpMsTQiMIMIA.roa
File: UX6UYtLtvP2a_x1SpMsTQiMIMIA.roa (raw, json)
Hash identifier: roEyQSyxDzr8797U3LPruiJxwCgY2dSV5wEWl/w1Njs=
Subject key identifier: 51:7E:94:62:D2:ED:BC:FD:9A:FF:1D:52:A4:CB:13:42:23:08:30:80
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018E13454FB60341F658B346622D0D823707
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/UX6UYtLtvP2a_x1SpMsTQiMIMIA.roa
Signing time: Wed 06 Mar 2024 10:18:13 +0000
ROA not before: Wed 06 Mar 2024 10:18:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 109.105.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:45:4f:b6:03:41:f6:58:b3:46:62:2d:0d:82:37:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Mar 6 10:18:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=517e9462d2edbcfd9aff1d52a4cb134223083080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:9e:bb:61:1f:ed:9c:f1:77:dd:66:fa:c6:
bd:9d:21:f3:e6:0b:30:d1:e6:1e:d5:d3:58:60:19:
1d:0e:89:da:a7:56:1e:9b:b9:14:b1:34:d4:6d:91:
76:86:7d:9e:28:1a:79:2b:ae:0d:95:9d:e0:ff:37:
04:f2:95:7c:f6:77:9f:a3:99:0a:27:07:8b:ba:10:
16:68:ac:94:b4:60:b3:22:f2:97:65:a8:b7:a5:b3:
97:d6:98:26:8e:cf:9f:2a:8b:62:6c:14:2a:db:26:
0e:b7:14:17:1f:b1:0f:d5:84:53:40:ad:1a:13:90:
47:81:9d:f7:89:bd:4c:20:bf:b4:81:f4:36:9d:fc:
c0:e2:e1:2c:1f:2d:a0:8b:39:ae:58:f9:36:74:f9:
a3:fc:3f:1b:95:2c:c7:94:af:c8:bc:d8:86:08:9d:
a3:b6:bb:35:b4:2e:d0:29:e7:99:da:5b:b9:d4:9c:
56:a0:12:74:c7:f3:f5:a3:62:06:20:b5:66:25:4b:
82:a3:85:68:4a:f0:8d:4a:15:6f:28:47:9e:f1:d6:
99:93:e6:6b:60:52:82:c9:39:68:e7:b7:6a:54:df:
7e:62:ed:bc:de:99:fe:50:f6:02:fa:f7:8c:90:a0:
ab:0e:f4:70:35:a7:09:33:94:01:b4:b7:1e:d3:94:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7E:94:62:D2:ED:BC:FD:9A:FF:1D:52:A4:CB:13:42:23:08:30:80
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/UX6UYtLtvP2a_x1SpMsTQiMIMIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.197.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f5:6c:a4:75:dd:f3:ae:93:dc:4c:c9:c0:6d:5d:31:72:7c:
9c:83:48:d1:92:a2:95:ce:00:42:eb:12:43:f6:92:70:39:ee:
6a:78:62:68:ba:15:de:c8:3b:ad:75:ac:ef:92:e2:37:c7:0e:
35:2b:51:8d:69:13:91:fd:e6:01:94:28:70:5b:e5:8f:f2:5c:
2f:72:7f:b8:0f:5c:b7:ed:97:88:f4:e0:b9:92:2f:1e:bf:e5:
10:53:da:08:36:e8:91:bf:1c:01:d8:31:3a:21:dd:df:1d:4d:
39:b7:c6:e5:ec:47:a3:50:74:90:98:d6:9c:17:1e:a5:33:98:
26:4c:50:e9:59:e1:fc:6c:5f:63:64:7e:50:a3:6c:4a:89:ba:
27:bf:80:3c:ab:a3:42:2d:42:01:79:e3:81:ba:ac:3f:fb:ca:
95:54:30:40:45:44:f0:e7:10:a1:76:6b:e2:14:6b:20:32:2c:
26:48:77:28:0e:cd:df:d7:c9:f9:3b:3c:4f:fa:52:9f:82:95:
79:29:52:a1:f2:a3:ce:26:11:05:71:ad:e0:b6:a5:1e:82:3b:
c5:54:7d:80:6e:e2:54:cd:97:56:77:32:2d:d1:bf:53:8c:ef:
4a:70:29:8a:0f:04:c4:f6:46:2b:77:79:4a:9f:d1:aa:30:0c:
24:80:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:44:19 2024 by rpki-client on console-fra.rpki-client.org