Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UPjpZ_LJzWqf7yCD1wwkRGtjsAw.roa
File: UPjpZ_LJzWqf7yCD1wwkRGtjsAw.roa (raw, json)
Hash identifier: 3ObRKjBTzmvSmORISMXg2yBIggAje0sQFr0FPFHK8UE=
Subject key identifier: 50:F8:E9:67:F2:C9:CD:6A:9F:EF:20:83:D7:0C:24:44:6B:63:B0:0C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019010A6F108000706ACF68A604B0D53E566
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UPjpZ_LJzWqf7yCD1wwkRGtjsAw.roa
Signing time: Thu 13 Jun 2024 08:11:34 +0000
ROA not before: Thu 13 Jun 2024 08:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:a6:f1:08:00:07:06:ac:f6:8a:60:4b:0d:53:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 13 08:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50f8e967f2c9cd6a9fef2083d70c24446b63b00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:68:9b:de:52:ff:80:7f:a9:fc:c9:7a:01:
af:93:d1:f7:df:c7:0f:aa:24:fb:71:c4:89:9e:46:
e8:9e:fa:97:87:ee:0f:ce:9a:51:67:a3:f4:4f:79:
85:66:49:29:4f:9e:9a:e5:92:10:a7:65:e5:2f:ab:
ad:80:f2:4a:f0:05:2e:87:44:60:6a:6e:9a:b1:ea:
d8:14:02:0f:39:10:b5:68:01:ad:82:8f:20:5e:c2:
98:fd:e8:e3:70:0d:b7:7c:bb:72:97:a0:34:eb:ca:
61:6d:86:0f:f6:e3:91:4b:87:f5:5f:ea:f4:3c:94:
71:04:95:3c:f1:b3:98:19:4e:2b:bb:98:be:49:0e:
5c:2f:5e:84:75:af:5c:e5:9a:d4:75:8c:74:5b:55:
d8:92:da:26:ef:57:11:ab:9f:14:9b:d6:d2:38:db:
56:f0:6e:29:50:14:17:31:1e:cb:94:b2:8a:d7:15:
ca:07:ac:14:16:ff:a9:bb:19:e3:37:1a:52:d2:62:
57:59:50:30:25:53:fc:b3:ad:63:69:83:45:7b:a8:
79:87:06:bb:fc:d9:96:45:1b:ba:01:02:b4:9d:2f:
c0:ae:1c:f1:a6:f0:a3:21:d3:e6:c6:8a:9a:60:f9:
39:3a:d9:74:3b:31:ab:48:c4:70:11:ce:c7:96:c6:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:E9:67:F2:C9:CD:6A:9F:EF:20:83:D7:0C:24:44:6B:63:B0:0C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UPjpZ_LJzWqf7yCD1wwkRGtjsAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:e3:70:1e:e7:c7:77:16:f5:f6:1b:8b:dc:a7:4d:26:ab:cb:
b6:c8:7f:38:80:17:df:ad:dd:31:e3:2a:3d:1d:66:96:a0:e6:
64:14:fe:63:44:6d:3b:d0:e8:01:31:e9:12:92:1e:33:92:86:
bd:59:c6:39:b9:6e:83:52:ba:93:af:78:dc:58:8f:27:d0:14:
1b:29:49:aa:2a:36:99:c3:71:c8:49:ff:92:7f:26:86:34:95:
cd:45:a0:a6:5b:02:75:78:e6:62:27:06:a5:4b:57:43:52:2d:
69:b7:f7:47:de:a4:06:8a:8c:f2:5f:2f:e8:f0:c3:7a:d2:9f:
c1:43:4d:a5:c5:21:5b:18:06:0a:28:21:68:75:71:a5:09:b9:
6d:4d:b5:a3:3a:94:da:c4:62:f0:18:7e:9b:f0:d0:c1:e1:6a:
f0:e8:1d:9f:eb:2e:ae:ba:25:a0:bd:c0:b2:f2:a7:06:71:0f:
35:58:f1:5e:e8:61:0a:02:44:e0:3d:a0:9a:91:78:79:76:a6:
0a:e7:f2:cb:ce:d6:9f:7b:cc:94:c1:52:8d:a6:c2:fd:7c:1c:
a2:0c:ad:31:81:cb:9c:6f:25:ad:e5:cd:88:6f:1a:d8:e3:0a:
1e:cc:6e:17:de:51:e8:72:b1:38:d3:75:d6:b9:64:2f:08:04:
80:9c:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 09:12:10 2024 by rpki-client on console-fra.rpki-client.org