Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/2UiVQPkK10yNcIi1bFkBkKF-8U0.roa
File: 2UiVQPkK10yNcIi1bFkBkKF-8U0.roa (raw, json)
Hash identifier: XYrkgQkshXCqKWU2sLJhVYFoJ8xPhBeOo55PxPiRSkw=
Subject key identifier: D9:48:95:40:F9:0A:D7:4C:8D:70:88:B5:6C:59:01:90:A1:7E:F1:4D
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 018CC5DCABCA8B8331F3ACBFC27CF8FEA8D1
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/2UiVQPkK10yNcIi1bFkBkKF-8U0.roa
Signing time: Mon 01 Jan 2024 16:30:22 +0000
ROA not before: Mon 01 Jan 2024 16:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8351
IP address blocks: 193.105.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ab:ca:8b:83:31:f3:ac:bf:c2:7c:f8:fe:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Jan 1 16:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9489540f90ad74c8d7088b56c590190a17ef14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:54:e4:57:a6:bf:18:53:61:cd:2a:5c:03:
a2:e0:5f:8a:59:98:9e:74:ce:26:34:70:66:7e:4b:
45:2d:13:e8:29:9d:40:22:8a:eb:f6:b0:71:26:65:
94:3d:78:e5:99:82:16:d8:1c:cc:2e:c1:a3:76:d2:
68:03:ab:5f:1d:f2:15:2a:6b:da:dc:4e:20:9d:6b:
3e:52:29:72:93:b8:91:b2:70:e6:9d:03:87:a8:91:
78:56:a1:7a:28:39:23:3c:dd:96:4d:07:1b:62:fd:
b6:66:cb:b4:00:37:72:6c:53:af:29:ed:a9:f6:55:
57:8d:55:e2:ce:9f:2c:43:f5:ad:18:03:2f:3a:36:
79:a7:5c:66:32:99:3b:9e:dc:3b:9b:d1:77:a4:23:
69:cd:34:88:c0:20:43:9a:ea:fd:9b:33:ee:36:a8:
25:14:5a:2c:1c:65:c4:57:f0:ef:63:ec:e6:b8:02:
dc:e2:41:7d:c2:16:d0:e1:c4:d1:8b:6e:12:58:dc:
d9:76:2c:5c:46:a4:d7:8d:dd:31:ee:36:b1:a9:c7:
26:44:37:a0:d2:69:0d:da:e4:08:07:df:09:4d:f8:
69:59:e1:f5:c5:d2:7b:16:79:5f:d8:50:da:62:da:
2f:d4:c9:f9:1a:ac:81:15:87:71:83:70:4e:35:99:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:95:40:F9:0A:D7:4C:8D:70:88:B5:6C:59:01:90:A1:7E:F1:4D
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/2UiVQPkK10yNcIi1bFkBkKF-8U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a7:27:90:60:f8:c1:9c:d3:f0:3f:1f:4a:d4:2a:86:79:67:
73:de:09:5a:9d:43:23:ca:d4:fc:a1:e8:6a:33:13:08:7d:95:
ad:2a:76:44:7c:60:ef:d0:1f:ff:2d:be:62:9b:5c:6d:c9:97:
d1:4b:49:59:40:a5:0f:46:14:8b:08:e1:89:53:97:c8:5d:30:
87:76:a7:a1:78:69:c5:2b:7a:99:58:64:e7:79:dd:12:51:11:
b1:1e:0a:5c:78:f4:22:9c:01:5f:29:05:06:f9:8c:bf:df:5c:
e6:a8:c9:02:c6:ad:3b:df:6f:07:90:19:3f:4f:a3:c5:f7:66:
20:0e:a3:2e:24:1f:d8:83:6c:4c:aa:7a:5f:b6:65:1c:71:4e:
3d:fd:4f:95:b3:ed:81:31:7e:60:b5:41:6f:8b:b9:a0:0a:f2:
04:0d:74:3f:53:e3:7f:6e:ff:e5:fa:fd:7d:8b:5c:98:d3:88:
ea:99:ee:a0:f9:1d:38:77:18:14:07:ae:af:b9:63:41:09:61:
9b:f6:6e:22:7d:49:b9:de:84:84:6b:fd:ca:e4:4b:7c:7e:fa:
63:3f:c7:14:27:9b:59:3c:7c:25:a3:27:4f:3b:36:9e:d6:d6:
69:be:df:7b:ea:f1:93:fa:0c:08:d7:37:f3:93:b9:36:46:4b:
c9:4b:1c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:34:54 2024 by rpki-client on console-ams.rpki-client.org