Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/U2Hdk7w9woUVEnqwh9d8ZNnvOnA.roa
File: U2Hdk7w9woUVEnqwh9d8ZNnvOnA.roa (raw, json)
Hash identifier: 8geFcU2tUXM8vb3F1+L/lMveaxoLsgA6djsL6MIpK9E=
Subject key identifier: 53:61:DD:93:BC:3D:C2:85:15:12:7A:B0:87:D7:7C:64:D9:EF:3A:70
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 018CC6B8E3F5EAD111187208C93F0BCC96D4
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/U2Hdk7w9woUVEnqwh9d8ZNnvOnA.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206674
IP address blocks: 185.179.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e3:f5:ea:d1:11:18:72:08:c9:3f:0b:cc:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5361dd93bc3dc28515127ab087d77c64d9ef3a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:b2:6c:c5:d4:c4:87:b6:92:52:86:2d:32:
df:33:59:85:7d:74:54:e3:9b:f9:48:00:8f:04:04:
47:dd:a8:d0:5c:40:c6:97:58:e6:92:5e:a2:05:2f:
42:93:4b:2d:e8:65:55:f2:35:f4:4c:57:24:70:a2:
07:c9:31:f5:6c:90:32:5b:1a:b8:f8:f8:93:cd:de:
7c:2d:9e:b6:35:1d:d8:ec:9c:60:27:ff:f2:3e:28:
d6:7b:ff:3c:ea:15:6e:20:e0:5f:1a:e4:26:d4:f2:
be:f7:16:3e:32:55:35:a5:ab:2a:55:4e:89:98:f7:
c6:c1:be:00:1e:01:ad:2c:69:cb:ce:d7:34:1d:53:
3b:18:6a:ac:c9:2e:c6:57:0c:bb:06:eb:d8:c4:fb:
85:a6:96:fc:6f:44:aa:de:be:58:e9:f9:96:42:3a:
d3:86:fe:11:22:50:53:41:2c:af:2b:93:98:85:06:
54:d1:84:c1:9d:22:11:3c:41:d7:99:82:44:fa:dc:
04:42:97:c3:ca:46:89:a1:8a:95:48:00:c0:83:2d:
fa:c8:33:70:01:19:47:14:36:2f:10:63:a9:cd:0e:
f0:44:d4:64:68:1f:61:b5:6e:e3:6a:ae:fd:16:0e:
6e:f9:a8:95:78:e5:aa:63:f1:bf:7d:ad:82:d5:38:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:61:DD:93:BC:3D:C2:85:15:12:7A:B0:87:D7:7C:64:D9:EF:3A:70
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/U2Hdk7w9woUVEnqwh9d8ZNnvOnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.56.0/23
Signature Algorithm: sha256WithRSAEncryption
98:3b:31:cf:28:d3:d9:dc:dc:ed:5d:8a:3c:64:12:d5:1b:1d:
15:f7:b3:f4:79:d6:5b:4a:27:39:42:46:d7:06:cb:07:e2:14:
43:e2:6e:ef:9d:81:13:49:33:ea:19:0b:5d:ad:5a:d5:41:f6:
82:61:ac:27:a5:80:c6:98:6b:fa:53:3b:41:d4:8b:a4:1c:96:
14:d3:88:6a:ec:fc:29:e4:3e:5f:1f:70:46:7a:43:61:a1:21:
08:fd:59:2e:ee:bd:fa:18:8c:61:79:1a:c2:e5:66:1d:c1:9b:
bf:7f:0f:79:af:54:94:bd:40:49:f7:a8:ce:1c:d9:c6:77:16:
72:d0:25:6d:c5:9d:c3:3b:ef:b6:3d:1d:cd:ce:b0:18:8b:e4:
17:26:33:0d:75:63:e1:58:82:76:85:55:17:3b:09:b4:a5:1e:
d9:6a:14:99:9e:92:d3:30:64:d0:31:9e:23:59:ee:dc:0c:9f:
00:57:3b:52:1d:6c:7e:c4:4c:9b:34:8b:b7:56:01:ad:57:f8:
ff:38:e9:59:cb:28:60:5a:89:d7:47:1b:f3:7c:f4:6c:59:54:
40:10:06:3f:7a:df:db:5d:e5:28:c1:35:6d:ee:a3:93:67:ce:
5e:da:d2:16:7e:cb:22:41:2b:5f:a6:7c:0f:0e:28:0e:6e:ee:
01:9b:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:38:52 2024 by rpki-client on console-fra.rpki-client.org