Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/uUWSm5VxIwXwseXJJkBBLZ0GkMw.roa
File: uUWSm5VxIwXwseXJJkBBLZ0GkMw.roa (raw, json)
Hash identifier: FkccSqUaO8smuB5t646UhJjUwLBCtf8lDYPB4qzL2b0=
Subject key identifier: B9:45:92:9B:95:71:23:05:F0:B1:E5:C9:26:40:41:2D:9D:06:90:CC
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 018CC56EF268AAC3EDDBC1D1F77434C10434
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/uUWSm5VxIwXwseXJJkBBLZ0GkMw.roa
Signing time: Mon 01 Jan 2024 14:30:31 +0000
ROA not before: Mon 01 Jan 2024 14:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44863
IP address blocks: 193.138.246.0/24 maxlen: 24
193.138.245.0/24 maxlen: 24
193.138.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f2:68:aa:c3:ed:db:c1:d1:f7:74:34:c1:04:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jan 1 14:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b945929b95712305f0b1e5c92640412d9d0690cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:54:3e:87:fe:1d:22:e5:e5:ad:1d:bf:bf:
69:8d:72:c5:4f:f0:d8:fb:92:7f:e7:66:2b:22:c5:
f1:f5:3e:86:8a:a9:fe:b1:32:09:69:a6:e3:a9:33:
d8:e5:de:70:b7:f4:74:b0:a5:9d:8a:6a:51:23:5f:
e5:7b:8f:dc:3d:ee:98:2c:f1:78:34:fb:15:59:e8:
1f:5f:4a:43:93:9b:b8:37:14:8c:05:76:85:80:79:
02:95:26:fd:d7:3b:bb:c7:47:3d:f4:91:8c:4e:8a:
4d:e6:f9:8d:4c:48:e3:84:40:69:d2:8c:b2:35:8f:
db:bf:2c:59:0b:ba:ea:94:17:32:ee:12:59:8b:f6:
db:f8:79:4c:cc:de:f5:d0:ee:05:07:98:66:18:07:
02:d7:f1:93:60:2b:5a:d7:18:06:5a:5b:e5:1a:79:
a2:46:9c:86:6f:9e:33:c8:d8:ec:56:ef:b0:ce:84:
ad:15:46:dd:e0:09:6d:b0:7e:cc:a4:c3:3f:4d:53:
45:ba:e8:18:ab:37:a5:c5:28:21:29:20:f7:29:60:
cf:2c:54:ca:a4:13:a9:01:0a:f0:ce:11:4f:46:bc:
e6:41:90:5d:b2:3f:ca:70:e9:29:d8:79:29:05:09:
dc:3a:24:26:19:f6:8b:58:2b:ad:c3:f1:43:62:ee:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:92:9B:95:71:23:05:F0:B1:E5:C9:26:40:41:2D:9D:06:90:CC
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/uUWSm5VxIwXwseXJJkBBLZ0GkMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.245.0-193.138.247.255
Signature Algorithm: sha256WithRSAEncryption
53:a8:06:b7:8e:09:0e:0a:fe:06:26:e7:40:69:0f:c0:72:a1:
d7:91:16:ba:bf:e5:6c:e5:da:5c:4e:ed:1f:44:3d:3a:7b:b2:
2f:cb:cf:31:5a:5f:54:43:da:85:8b:fc:8f:67:f5:72:7b:9a:
0a:8b:de:79:db:8e:43:f6:63:6a:97:a0:b1:31:bb:25:90:11:
c5:39:6d:8d:5b:00:d9:99:9a:53:30:06:0d:9c:76:77:58:7f:
b9:e8:e0:0c:61:81:e8:f0:35:28:56:db:9e:2b:b1:b9:19:b4:
b0:da:ac:10:ac:f3:45:18:9a:59:f1:43:3d:53:e8:0d:40:09:
ca:54:39:29:3b:5d:b9:a5:ca:cb:6d:23:14:a1:d0:e0:42:6c:
83:d0:16:4a:89:8f:ce:00:80:20:77:f4:92:7d:ee:3e:9a:d0:
c8:d7:0a:ad:a2:f7:b4:e1:98:ce:57:66:66:e3:9e:ad:18:7a:
4d:d0:58:70:55:03:af:a0:6f:05:32:b1:03:6e:43:00:46:ff:
43:67:4c:94:c3:5d:dc:10:d6:8c:42:fe:36:a2:96:e6:34:42:
41:48:4f:ab:96:9b:62:13:12:2d:21:3d:f5:f6:3d:6d:ed:2a:
a3:d2:d2:dd:ae:22:f6:dc:3c:62:70:c1:b2:a7:e6:0c:96:52:
2c:67:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:48:54 2024 by rpki-client on console-ams.rpki-client.org