Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/TUlcCVfUnR68umxuc3psaln0sew.roa
File: TUlcCVfUnR68umxuc3psaln0sew.roa (raw, json)
Hash identifier: WjGNi7YNMa1yfY1701my4d244cKgwam/ySc7XvdmELM=
Subject key identifier: 4D:49:5C:09:57:D4:9D:1E:BC:BA:6C:6E:73:7A:6C:6A:59:F4:B1:EC
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 018CC56E383AE465E75DFD5D6E6B0B512B4B
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/TUlcCVfUnR68umxuc3psaln0sew.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24632
IP address blocks: 195.184.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:38:3a:e4:65:e7:5d:fd:5d:6e:6b:0b:51:2b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d495c0957d49d1ebcba6c6e737a6c6a59f4b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:f9:49:92:d6:d9:34:16:3a:6e:85:d0:8d:
79:41:be:f6:de:f3:ea:d6:3a:4b:4a:c7:eb:2a:d4:
83:26:ed:4a:b5:8a:62:3b:de:9e:5c:52:91:ad:bc:
96:e6:8a:50:83:fb:59:ac:6b:00:e0:61:cf:c1:a6:
c2:8d:16:8b:25:5e:ab:ea:83:ae:43:68:8d:7c:cf:
b8:ed:93:af:65:77:43:28:18:ef:93:8f:28:9e:62:
a6:53:d6:c9:7d:32:62:87:12:51:d2:b2:ce:26:a5:
91:34:ea:2c:14:74:9a:99:59:56:07:a5:2f:82:c9:
51:7f:fa:3b:c6:e8:2b:e9:ee:6b:03:d4:31:9c:cb:
62:a4:40:27:b8:98:45:96:1e:14:3c:86:eb:0e:9f:
98:fc:82:2b:c9:af:64:da:93:ad:71:b3:9d:2a:64:
23:7b:6a:9c:09:b5:e3:14:12:3f:c4:62:7d:c6:df:
d8:b1:c2:16:13:54:fd:7e:b4:e7:79:c0:54:ac:bb:
ff:eb:ce:8d:b2:00:c0:75:dd:78:93:3c:c0:73:6b:
e0:0d:d0:b3:7a:3a:d5:d1:b5:be:2a:0d:82:82:ee:
00:67:e9:e2:80:0a:8a:45:26:09:56:db:cc:75:99:
0b:e3:5e:47:14:e5:41:c3:6e:7e:f9:a7:c7:b2:97:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:5C:09:57:D4:9D:1E:BC:BA:6C:6E:73:7A:6C:6A:59:F4:B1:EC
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/TUlcCVfUnR68umxuc3psaln0sew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:40:7d:37:37:fa:3b:d7:40:65:50:10:4b:14:90:d7:e8:e5:
22:4e:60:e1:58:83:a3:e7:1e:09:91:89:d1:b9:a4:a3:9f:d1:
27:de:3d:5e:53:6c:f7:5f:13:ca:c0:ec:d4:14:d9:cf:fb:e1:
91:80:44:c2:84:09:02:b9:86:e5:7c:03:2f:58:da:3d:68:15:
d4:c5:b5:f1:5b:f4:ea:29:92:82:22:2e:e3:e6:c3:94:86:15:
63:58:56:e2:50:b6:03:a4:53:20:bb:67:01:b3:dc:e9:f0:bd:
59:71:d2:3c:86:d0:be:dc:9b:5d:41:97:8e:6a:e6:c2:7e:d9:
8b:ad:f9:82:40:d1:d8:c6:7e:49:50:85:8a:39:a9:a7:53:7b:
b7:6f:e1:2d:7e:cf:3e:09:15:fc:28:d8:15:37:8e:ec:f2:00:
57:2f:7a:b6:a1:d2:ae:ef:62:28:21:c2:6c:51:ff:74:e1:6b:
1d:6c:35:a3:51:5a:ac:d1:9b:0d:41:2d:7f:d1:34:7a:43:da:
57:11:48:16:04:86:13:d1:52:46:4d:e4:25:13:1e:7d:3c:9f:
48:95:eb:f3:1c:f1:3e:24:e6:71:a4:54:26:42:14:14:b5:c6:
11:fb:fe:fe:e8:87:6e:45:61:13:ea:12:b2:32:da:ea:b7:a0:
12:ef:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:43:37 2024 by rpki-client on console-ams.rpki-client.org