Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/UoA72pGEBpbhKyRmV5SX18ctcVs.roa
File: UoA72pGEBpbhKyRmV5SX18ctcVs.roa (raw, json)
Hash identifier: m9zr0+RVKcPRIg+rWIHpkfFG95gevfP36Ptu3FNSTnM=
Subject key identifier: 52:80:3B:DA:91:84:06:96:E1:2B:24:66:57:94:97:D7:C7:2D:71:5B
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018CCA99F63186E2A44639BDDF297ECD5B77
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/UoA72pGEBpbhKyRmV5SX18ctcVs.roa
Signing time: Tue 02 Jan 2024 14:35:36 +0000
ROA not before: Tue 02 Jan 2024 14:35:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4445
IP address blocks: 46.190.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:f6:31:86:e2:a4:46:39:bd:df:29:7e:cd:5b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 14:35:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52803bda91840696e12b2466579497d7c72d715b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:a2:96:9a:95:a2:57:e3:ec:43:25:cd:67:
66:cc:da:a7:18:71:4a:20:7c:49:c1:de:ad:06:cd:
49:8b:22:48:33:e8:a9:02:22:d2:cf:e9:1b:67:e4:
b5:df:a3:2a:bc:c4:b9:31:60:9f:4b:ac:71:40:54:
87:7d:62:9e:f3:a2:3d:d3:b1:ec:46:62:b3:63:cf:
72:47:ce:a4:c5:61:f6:e0:fd:6b:de:6c:f4:14:52:
5e:ba:90:63:8d:58:9d:0b:89:ea:0c:df:22:53:c3:
6f:7b:fe:78:1d:bb:e2:9f:f7:1a:c3:8a:dc:a2:3e:
12:0c:5f:53:b6:9e:dd:07:af:ea:ef:ab:35:1c:ad:
73:7e:aa:ec:47:c6:33:9e:5d:26:b9:ed:30:12:34:
8c:b7:81:1a:5b:72:a2:ff:d0:59:9d:70:a5:93:83:
6d:ca:a1:60:c2:73:df:73:08:5c:1e:96:1d:b9:ca:
a8:79:50:90:2c:44:8e:5b:94:4a:da:07:0f:d0:4b:
45:9e:29:ee:0f:e4:82:76:67:0f:df:26:c1:66:66:
da:16:34:0c:0c:dd:09:73:68:e5:62:e3:4c:39:9a:
00:65:26:8a:33:8b:02:5a:fc:40:19:15:fd:51:4a:
74:a9:42:28:85:8e:53:86:99:e2:ae:a8:8c:33:6d:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:80:3B:DA:91:84:06:96:E1:2B:24:66:57:94:97:D7:C7:2D:71:5B
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/UoA72pGEBpbhKyRmV5SX18ctcVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7b:34:b3:d3:81:51:b1:a0:38:35:ab:e4:6f:a3:df:e6:98:18:
4c:ea:ea:d6:54:ad:d9:b6:47:12:a3:c5:37:4f:55:23:56:ec:
ce:cc:7b:51:e8:34:a6:42:9a:59:ed:a9:7c:8e:61:84:6d:52:
d0:c8:43:1d:a7:f3:20:05:83:3e:41:2a:71:8d:34:b1:78:c1:
3d:ed:e3:ad:02:50:68:1b:15:80:5c:de:04:28:c9:31:e2:57:
96:1e:30:98:e3:e0:a2:9d:a5:d2:81:32:8f:63:0d:43:c9:2e:
e5:93:59:83:2b:02:3a:b1:ad:2f:ae:72:08:2f:68:b9:ff:b8:
34:5d:46:24:7b:b1:85:4a:81:0d:16:96:15:45:da:c7:52:78:
ae:05:a4:e5:fc:32:5d:93:f3:c6:98:84:fc:04:f8:c9:9b:35:
bd:c8:bb:50:1a:94:c3:36:ac:8f:cd:9e:96:a8:de:f1:13:4f:
a6:e8:f1:7c:aa:f1:39:a1:6a:40:18:79:c9:cc:65:35:c8:5f:
40:f1:31:95:46:11:33:17:59:62:9a:92:cc:1a:ca:86:80:13:
3a:43:b5:d9:f7:f4:86:f9:a3:5c:71:f2:ec:eb:54:28:e6:96:
8e:cb:92:d8:39:a1:b5:69:b8:a7:62:31:96:88:ed:3c:38:bb:
68:70:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:08:31 2024 by rpki-client on console-fra.rpki-client.org