Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/uB7bKvT--Ew59H3DvlryuSHjbAY.roa
File: uB7bKvT--Ew59H3DvlryuSHjbAY.roa (raw, json)
Hash identifier: zFieA3+KLvC5j8zdj1TQVcLn1w3vR5vs1k2M3BdKo8Y=
Subject key identifier: B8:1E:DB:2A:F4:FE:F8:4C:39:F4:7D:C3:BE:5A:F2:B9:21:E3:6C:06
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018CC94E5DDFCDFBCA2F8AE73872F231F498
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/uB7bKvT--Ew59H3DvlryuSHjbAY.roa
Signing time: Tue 02 Jan 2024 08:33:25 +0000
ROA not before: Tue 02 Jan 2024 08:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198996
IP address blocks: 194.107.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 10:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5d:df:cd:fb:ca:2f:8a:e7:38:72:f2:31:f4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 08:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81edb2af4fef84c39f47dc3be5af2b921e36c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:52:46:15:c9:c5:6d:ba:6e:5c:e0:c0:01:
29:7e:da:5a:4d:98:8c:5d:5f:e5:23:71:3e:cb:fc:
6f:db:07:78:a4:81:10:96:a4:c8:7f:5c:16:21:75:
80:6c:e7:7e:28:e6:dc:93:88:83:50:85:1e:29:8a:
a6:eb:aa:0f:66:4a:23:4e:1a:d0:4d:b7:f9:5a:17:
34:68:24:a0:0e:77:ef:25:a1:a9:53:ea:f8:37:84:
37:91:c7:27:fe:62:7a:75:7e:ee:80:74:b1:e7:fb:
04:37:40:c1:b7:db:90:9d:c8:18:db:5d:0b:09:8e:
16:0c:f9:bc:e3:a2:c0:61:c9:76:b3:9e:ca:ae:b0:
a5:13:45:d8:fc:57:81:80:57:be:24:3b:18:e6:64:
42:53:f9:3d:fb:a6:ce:b5:3c:80:b9:d7:a6:98:70:
1a:58:b0:16:45:ea:b5:f4:2f:22:f2:47:b6:1b:cf:
f2:08:57:f6:a6:57:c0:c4:6e:ea:02:cf:94:55:8c:
7b:2f:38:e5:0f:9a:56:e9:f9:05:ed:49:c9:73:3d:
e4:4f:f9:cd:46:fc:53:53:44:08:c2:a1:a7:5d:60:
af:bb:d0:79:ae:5d:3b:a7:ba:15:e0:11:5c:c8:ec:
79:9c:77:ab:f5:b5:17:5b:f8:e2:a2:d8:a2:5b:4d:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:DB:2A:F4:FE:F8:4C:39:F4:7D:C3:BE:5A:F2:B9:21:E3:6C:06
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/uB7bKvT--Ew59H3DvlryuSHjbAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.164.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a1:74:ec:2e:05:1d:bd:97:83:6c:16:69:a1:97:5f:76:32:
2f:bd:43:3f:c2:d2:7e:ee:57:02:58:d7:31:e4:09:10:ce:d1:
2e:db:ed:d7:4f:fd:ed:77:b3:55:30:9b:d7:b5:15:f8:dc:d1:
ff:0b:66:13:80:10:f9:63:26:73:e0:c3:82:d0:7f:e9:12:2f:
56:0b:a4:e4:5b:eb:15:46:03:2b:87:64:11:ee:95:61:b4:be:
65:b5:18:7f:6e:cc:1c:68:ae:be:8e:bc:74:a6:8e:1a:c5:3a:
12:e4:bf:5f:73:ed:a3:c6:94:dd:ab:5c:da:c2:0e:2c:d2:72:
34:29:e0:02:a3:22:79:0b:20:d9:ab:cf:ec:56:86:23:c9:13:
27:ff:fb:2b:c3:09:d5:0f:5d:06:88:e1:11:7a:65:03:f2:cb:
40:92:f9:d2:eb:23:33:4c:6b:6e:8d:16:96:13:43:bc:5b:4e:
2f:85:58:85:df:04:ab:39:10:a5:e7:98:b6:a4:3e:ff:9d:7f:
74:60:88:77:6f:b1:4a:ea:c2:50:82:47:46:b4:79:ef:c3:3f:
ff:50:2e:38:12:2a:08:d5:54:93:06:9f:d9:fd:a9:2f:50:6a:
48:13:b2:81:1f:9a:b3:66:00:2d:a9:8a:ae:99:43:f3:e0:8c:
50:3e:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:09:52 2024 by rpki-client on console-ams.rpki-client.org