Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/UcUWLwHzk58XamMxbAXZGCUlnMU.roa
File: UcUWLwHzk58XamMxbAXZGCUlnMU.roa (raw, json)
Hash identifier: KeRbjN9PJeP/zHTETmiWOP46hb9UpdskBcS9SFoxm1o=
Subject key identifier: 51:C5:16:2F:01:F3:93:9F:17:6A:63:31:6C:05:D9:18:25:25:9C:C5
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 018CC727146A9A7E2A3C8E63A1D98C0A1D68
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/UcUWLwHzk58XamMxbAXZGCUlnMU.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.129.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:14:6a:9a:7e:2a:3c:8e:63:a1:d9:8c:0a:1d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51c5162f01f3939f176a63316c05d91825259cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:b3:c2:f3:52:27:7d:16:91:d7:76:82:0e:
d6:5a:5f:22:0f:10:46:63:3d:66:75:50:7c:89:30:
6a:6b:a4:f8:d0:ef:a3:7c:f5:9c:64:09:29:12:63:
cc:d3:e1:06:45:42:02:02:2d:99:95:f7:94:ff:69:
04:5a:38:46:99:fe:34:7f:37:6c:c8:a1:6e:dd:b5:
27:85:39:e8:2b:a2:04:2c:f7:9c:b1:5c:d2:37:06:
f5:18:f7:f3:f5:dc:f4:3e:ae:dd:5c:02:de:ba:49:
91:41:62:a7:96:82:00:39:2e:20:a3:48:3e:c8:4b:
a8:e2:6c:6e:b0:03:40:04:ed:0f:8d:2f:bf:25:62:
48:16:ae:f7:94:0f:a8:d7:ef:4d:7a:68:bb:55:6c:
53:5f:f6:d5:90:4f:1b:26:d7:be:ba:31:c9:22:39:
24:a3:a0:95:0f:e0:c2:5c:2c:85:32:61:c3:89:ab:
0c:fa:d2:7d:b8:9f:26:ee:18:5e:0f:da:87:ca:e7:
43:8b:27:02:76:25:30:7b:bc:9c:92:a3:6d:0b:86:
37:33:95:39:8b:1e:ab:ee:2b:89:17:95:4d:c1:3b:
77:db:d8:d7:2d:f4:b0:c8:4e:2d:ca:88:50:83:6f:
a2:4c:ea:de:ea:a6:79:52:be:3e:fc:05:06:c0:aa:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C5:16:2F:01:F3:93:9F:17:6A:63:31:6C:05:D9:18:25:25:9C:C5
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/UcUWLwHzk58XamMxbAXZGCUlnMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.193.0/24
Signature Algorithm: sha256WithRSAEncryption
89:20:83:7d:2e:83:01:d7:2c:72:a0:fe:37:6d:85:f8:83:c7:
e2:64:ac:dc:1f:f6:69:69:8e:23:ab:56:b7:3d:a8:6b:ab:5e:
16:6a:8e:bf:d8:42:49:2f:3e:ac:f1:e9:bf:53:f9:20:20:7e:
7a:d7:e0:89:1f:92:e8:d1:ff:2a:40:18:a5:ed:22:08:22:d2:
20:e1:fb:c7:8f:b6:32:1d:be:13:80:b5:d8:d3:14:13:ef:e4:
56:0d:e1:08:8e:59:12:57:e7:1c:81:85:d2:74:7f:30:48:f2:
91:b3:d4:e7:00:f8:6a:70:d7:a5:a3:53:6b:5c:fb:98:7e:ae:
e7:33:8e:54:af:2a:2e:0b:4f:65:90:2d:76:13:fb:1e:db:50:
e2:15:7c:52:fa:82:c5:14:86:dd:31:a0:8d:c5:4c:59:1b:d6:
0f:e2:22:b1:52:b4:de:ad:05:df:66:4f:03:a5:50:f8:a5:f2:
e3:d5:0f:49:8f:21:c9:76:c8:1c:fc:d7:04:50:ee:61:64:61:
80:c7:05:f2:77:d5:d8:43:91:85:12:f0:0d:4e:f4:3a:34:69:
ac:cc:6d:b9:01:ae:93:7b:6a:77:8e:07:6f:0a:57:19:36:cc:
3a:21:b9:5e:1a:5e:c5:7d:82:cc:27:5b:df:b4:08:9f:6d:0d:
2f:0e:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:10:42 2024 by rpki-client on console-ams.rpki-client.org