Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/0Ufnk_87MEiVukE31PJd7kRuGjA.roa
File: 0Ufnk_87MEiVukE31PJd7kRuGjA.roa (raw, json)
Hash identifier: iMXW6vlZp74mnGq+L5CZEESt2VDoYkj0wtIdUBvfMAg=
Subject key identifier: D1:47:E7:93:FF:3B:30:48:95:BA:41:37:D4:F2:5D:EE:44:6E:1A:30
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 018FEDA6C885703F92DE57F010551BF4B499
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/0Ufnk_87MEiVukE31PJd7kRuGjA.roa
Signing time: Thu 06 Jun 2024 13:04:41 +0000
ROA not before: Thu 06 Jun 2024 13:04:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56911
IP address blocks: 95.131.203.0/24 maxlen: 24
195.234.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:a6:c8:85:70:3f:92:de:57:f0:10:55:1b:f4:b4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Jun 6 13:04:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d147e793ff3b304895ba4137d4f25dee446e1a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:db:92:21:89:5c:aa:d7:4c:85:b5:75:f2:
51:01:be:39:19:c5:0f:48:71:db:df:2b:5d:e1:f6:
d7:f0:2c:e6:db:f7:58:c8:97:43:3c:1a:44:d6:8a:
2b:fb:38:64:10:86:bc:24:46:72:23:4d:8f:09:44:
21:da:97:6d:81:be:02:e2:82:78:a8:50:04:f3:25:
8e:fb:50:b6:21:f4:f4:1a:de:64:14:7e:02:6e:a7:
6b:e4:db:b3:86:d9:5b:86:4c:6c:81:82:39:1a:9f:
e8:a4:83:f4:32:ae:e8:2c:74:80:0a:0c:8a:1e:84:
80:dc:6a:4b:50:31:b7:25:15:ae:8c:83:e9:a4:6e:
d2:f3:e7:23:b3:5f:f2:06:03:f5:9c:c9:63:8d:31:
16:49:7f:41:32:a1:a6:31:ee:32:40:5b:db:81:2a:
5b:6e:68:75:38:d0:5b:aa:47:2c:38:93:91:6c:c5:
95:d9:ba:9f:69:df:3a:45:c9:bd:2f:37:7c:c7:8f:
a9:c9:52:4f:da:7d:12:a2:db:7e:70:c0:9b:49:5b:
33:86:80:86:ea:fb:27:0c:28:9e:90:6b:a2:84:43:
46:85:0d:ed:e4:d5:b4:74:24:62:43:68:96:83:db:
b6:8c:6b:77:87:4c:94:ed:c2:3a:66:8d:c5:12:84:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:E7:93:FF:3B:30:48:95:BA:41:37:D4:F2:5D:EE:44:6E:1A:30
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/0Ufnk_87MEiVukE31PJd7kRuGjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.203.0/24
195.234.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2a:8f:92:fa:41:e0:62:ff:dd:a5:f8:70:66:cd:c0:27:b4:
96:e8:dc:8c:cd:35:5c:1d:6f:0d:2c:8f:31:0a:99:e1:bb:70:
e8:f1:4c:b3:86:7c:ad:a0:d8:48:ec:81:50:36:d1:30:bb:7d:
6b:7a:9a:b2:fd:61:f7:d7:0e:bc:18:52:63:bb:bc:ff:5f:ac:
eb:df:b7:d1:4b:9f:13:46:fb:01:f4:b2:7f:1d:1e:c0:dd:5d:
97:93:5b:7e:5c:5c:d4:35:e9:3e:d6:c9:36:1f:ba:b8:f3:b1:
ef:64:36:d0:f3:63:49:1a:f8:5f:25:cd:23:4b:4a:7a:55:be:
3d:1a:7e:07:d5:de:62:5f:47:ee:28:fe:a7:54:56:ed:68:c7:
4c:54:58:03:39:4a:63:43:77:0d:9d:b6:61:d0:61:4d:6f:aa:
89:69:44:b3:65:2c:0f:59:61:ba:e3:64:1d:2f:25:57:74:4f:
1c:73:b2:a3:4b:cc:0d:40:55:97:6a:17:ff:12:e4:df:ce:ff:
ef:fa:8c:46:5e:d5:11:e3:5d:69:d0:50:d6:34:88:07:34:36:
77:43:fc:06:66:fa:d2:a9:06:f8:d8:ae:19:07:78:78:04:fb:
34:13:0c:a8:db:d4:67:4d:08:c2:09:ec:30:c4:09:62:7b:5d:
d8:e1:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:02:52 2024 by rpki-client on console-ams.rpki-client.org