Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/uZtc63eZBudog6DLPaA-W1yOVYE.roa
File: uZtc63eZBudog6DLPaA-W1yOVYE.roa (raw, json)
Hash identifier: i/jpJ23TgLm880ANy6cCV5B6lise/o5fp+lkT/HRBR8=
Subject key identifier: B9:9B:5C:EB:77:99:06:E7:68:83:A0:CB:3D:A0:3E:5B:5C:8E:55:81
Certificate issuer: /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial: 018CC794FEE01F3174916A42228404CD48AA
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/uZtc63eZBudog6DLPaA-W1yOVYE.roa
Signing time: Tue 02 Jan 2024 00:31:19 +0000
ROA not before: Tue 02 Jan 2024 00:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59943
IP address blocks: 193.200.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fe:e0:1f:31:74:91:6a:42:22:84:04:cd:48:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Validity
Not Before: Jan 2 00:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b99b5ceb779906e76883a0cb3da03e5b5c8e5581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:72:35:3d:bb:96:9a:f3:b4:61:77:d2:2b:
a6:46:5e:65:3d:51:cd:b1:13:55:e8:92:ab:3b:3b:
52:74:07:0d:ce:23:b7:aa:39:9c:e6:e0:0d:69:61:
54:52:b1:ef:71:7d:93:cb:c7:47:ef:a5:7c:a4:72:
d2:5c:53:69:db:73:41:ac:92:bb:92:2e:9c:09:ff:
e5:3a:46:ef:f1:10:ab:a4:b0:19:90:9e:53:cc:7d:
91:22:66:76:a8:88:a2:82:6a:af:df:b0:0d:13:65:
31:a3:75:73:fa:c6:48:90:67:40:22:9d:69:69:bb:
99:1a:a4:b8:8f:bf:2a:dd:41:53:ec:f5:36:79:0e:
6c:4d:b3:50:04:d7:e4:ce:69:4d:84:10:cf:9b:9a:
62:c5:9b:b9:f8:20:3f:f4:ab:84:e1:8d:bb:a4:e8:
6e:1c:0c:fa:47:be:1b:93:86:bf:ef:53:0b:e9:b2:
a0:69:a7:2e:86:8f:5e:f4:e8:27:53:6d:91:1e:c6:
8b:20:a3:fd:19:3f:6f:0a:ab:12:9c:c2:a8:b4:62:
82:9e:b7:2f:03:f4:8b:10:1a:4a:4d:9b:60:54:7c:
ed:9e:9a:cd:d8:e8:87:2a:74:68:ae:61:45:04:3c:
d0:5e:5c:ff:b3:d4:6f:b3:46:6d:6f:a0:06:c2:d8:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9B:5C:EB:77:99:06:E7:68:83:A0:CB:3D:A0:3E:5B:5C:8E:55:81
X509v3 Authority Key Identifier:
keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/uZtc63eZBudog6DLPaA-W1yOVYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.29.0/24
Signature Algorithm: sha256WithRSAEncryption
43:95:b4:3b:75:55:6f:3f:94:a0:23:6f:19:87:d0:78:ee:79:
c4:93:06:08:1c:68:34:52:d5:67:25:25:32:e7:a2:68:2d:67:
24:5c:c9:08:13:7f:ee:c2:1b:0e:ed:3d:e3:e1:6c:47:84:1b:
63:69:0c:ec:a8:90:a2:de:d4:3f:fa:64:08:cd:2f:23:e5:14:
2d:ca:d6:99:81:ee:6c:cb:e1:07:b1:8a:72:ca:32:59:b0:9f:
de:94:bd:37:b2:f1:b0:49:27:b4:bd:95:a3:39:11:2a:f8:aa:
ce:dd:b1:24:6a:7a:c8:86:4a:8c:e0:c2:fd:56:8c:67:f7:91:
d6:aa:77:93:cb:df:62:81:2e:fb:d0:39:4b:4b:b3:99:e1:30:
ad:05:57:0d:42:8b:d8:e3:bb:68:33:46:aa:c6:42:3b:5e:54:
e1:5e:8f:b9:6f:4e:c1:83:b4:32:af:2a:ae:96:09:08:3b:02:
d7:ff:12:61:a3:26:d4:ac:67:10:ce:82:ec:68:53:f0:41:cf:
ad:85:3f:c4:9d:0e:0b:cf:14:82:00:f6:75:1f:04:b5:c2:60:
a2:61:51:9f:c3:5e:09:88:65:17:06:2d:6e:86:25:43:48:b4:
d7:8e:e7:88:0a:30:61:6b:7c:42:da:50:0b:f0:fb:52:05:a7:
12:e9:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:12:06 2024 by rpki-client on console-fra.rpki-client.org