Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/UMkAP5-trBaJkvWSFZVO4XVDr-I.roa
File: UMkAP5-trBaJkvWSFZVO4XVDr-I.roa (raw, json)
Hash identifier: +txFyPvvzyMmSR7CzQVJSrv9efemKtroFOHs0xfPELc=
Subject key identifier: 50:C9:00:3F:9F:AD:AC:16:89:92:F5:92:15:95:4E:E1:75:43:AF:E2
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 018CC50086E6F28D1630274832C3002A6623
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/UMkAP5-trBaJkvWSFZVO4XVDr-I.roa
Signing time: Mon 01 Jan 2024 12:29:55 +0000
ROA not before: Mon 01 Jan 2024 12:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12741
IP address blocks: 195.85.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:86:e6:f2:8d:16:30:27:48:32:c3:00:2a:66:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Jan 1 12:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50c9003f9fadac168992f59215954ee17543afe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:6b:d8:6f:a4:15:37:95:0b:09:0b:51:19:
9d:b9:32:c3:6e:cf:57:ee:c4:95:f8:c2:0b:ad:51:
e6:aa:f8:e7:10:82:f2:a8:c6:5e:2d:88:f6:8c:8b:
10:e4:b3:81:37:81:66:37:19:20:a2:18:b9:a3:3e:
a7:c1:4f:6c:e8:10:74:4d:99:ea:42:44:b4:89:bc:
ce:f5:d1:7b:46:6c:e8:26:da:14:8e:c6:0d:97:b5:
ec:29:4f:60:a6:64:68:e3:87:ae:de:0a:64:9d:25:
09:d5:de:c2:57:e2:d2:f1:41:a8:0b:c5:21:da:1d:
69:b2:08:e0:49:93:e4:1a:e1:7d:63:1a:b8:94:18:
37:49:4f:ff:12:68:0c:85:59:56:48:2e:45:09:2d:
83:fc:f2:05:60:ac:56:56:37:5c:40:27:00:aa:e6:
ad:01:ed:94:18:60:38:77:cb:98:d4:75:30:28:24:
5b:c4:dd:73:6b:36:03:e0:03:9e:5e:ad:e4:4f:51:
e9:99:dd:68:a1:a4:53:c5:62:43:4c:93:58:63:7b:
de:94:9d:0e:7f:db:81:7f:c4:02:cf:02:6a:a0:f4:
f0:e6:0b:cf:5e:4e:9f:24:28:62:e3:ec:5e:68:4d:
33:04:94:98:3d:b3:d3:fb:fd:25:c3:5c:bf:3a:65:
6f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:00:3F:9F:AD:AC:16:89:92:F5:92:15:95:4E:E1:75:43:AF:E2
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/UMkAP5-trBaJkvWSFZVO4XVDr-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:bf:52:75:6d:ba:db:4e:f4:36:59:47:26:74:6c:d6:e0:e9:
d9:11:21:26:8b:e6:99:93:f6:c6:82:53:c4:30:0c:3e:d2:b6:
c4:a4:dd:60:41:57:4d:83:81:00:87:71:31:1a:1a:c3:b0:bd:
3b:16:09:7f:b5:c8:6b:c8:37:bf:8c:a5:19:3d:2e:e8:29:67:
65:d4:df:11:d1:8e:53:6f:78:61:29:10:bb:c2:a6:6a:79:21:
ba:a1:c4:b8:92:52:7d:49:f2:55:90:ce:e3:ac:3e:82:be:f8:
ac:e7:85:1f:2a:e0:56:1d:12:84:62:f4:ae:d8:0e:5c:ee:76:
6e:6d:32:5b:61:f6:64:d1:2d:f5:18:26:0c:46:a9:26:ec:af:
c7:60:be:b7:00:54:de:3d:0f:2a:66:6c:e1:c4:4c:bb:b6:07:
22:91:bc:f6:f4:b0:83:1f:d3:2a:7d:4a:a1:ec:c8:61:73:eb:
04:53:e1:62:79:0a:31:43:3d:37:47:68:5f:5b:f2:90:a1:3f:
27:a1:65:56:f5:d4:94:18:38:a7:cb:4a:ce:f9:15:69:e4:9f:
3c:db:48:3a:f3:20:25:46:c8:ae:2f:f5:cb:a5:8f:02:2a:c0:
9f:b8:5f:66:db:f7:a3:dc:07:6b:15:06:c9:06:a3:e6:41:04:
f9:27:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:28:47 2024 by rpki-client on console-ams.rpki-client.org