Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UiAeiwXjGLGW7bLAFWf7u5wSj7I.roa
File: UiAeiwXjGLGW7bLAFWf7u5wSj7I.roa (raw, json)
Hash identifier: 0qvxrbADnW37qFLz91+mqBQ46Km5Bi0Rkm5w3lFpAr4=
Subject key identifier: 52:20:1E:8B:05:E3:18:B1:96:ED:B2:C0:15:67:FB:BB:9C:12:8F:B2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC79522998EBBC6E0BC0172674550C99C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UiAeiwXjGLGW7bLAFWf7u5wSj7I.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52094
IP address blocks: 194.147.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:22:99:8e:bb:c6:e0:bc:01:72:67:45:50:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52201e8b05e318b196edb2c01567fbbb9c128fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:2b:77:3d:b4:15:4f:03:41:1d:eb:1f:49:
d8:f2:9e:8b:1a:66:52:b7:35:ff:10:06:3f:26:4a:
e2:8a:f2:d0:90:d8:42:64:c9:79:6c:0d:39:34:99:
7a:50:3c:92:e8:65:c4:8f:a7:5f:07:c4:7b:41:f4:
cd:15:fa:7e:a1:7b:9d:be:01:ab:5a:dd:ad:ae:83:
10:da:71:0f:ed:11:b8:08:d4:60:69:e6:7c:b1:91:
fd:89:7b:3d:d1:68:a4:ff:ea:62:2f:a8:df:93:62:
98:fb:2b:fb:e8:47:9f:be:2e:7b:00:66:d7:3c:28:
6c:7e:31:d7:c8:55:3b:4d:85:21:d9:23:3d:97:9a:
da:c8:55:45:5f:06:1f:e4:e1:4f:da:4d:9d:47:8c:
66:96:e1:87:bc:8b:cf:6c:11:aa:0b:d0:3e:f1:21:
f9:c3:87:1a:9d:e8:2f:85:6b:63:ce:33:91:f6:6b:
5a:e0:16:35:91:f2:80:a6:42:0c:62:90:a3:e8:58:
09:69:f3:e0:4c:73:eb:af:5a:66:f2:d7:0e:c2:be:
e4:71:cd:af:56:b0:2d:9b:19:c8:7c:73:bc:7d:0a:
44:82:2a:f3:f5:6c:55:52:06:18:66:6b:89:57:16:
92:6e:4c:28:75:d4:e7:e2:5b:87:ba:85:1e:68:97:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:1E:8B:05:E3:18:B1:96:ED:B2:C0:15:67:FB:BB:9C:12:8F:B2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/UiAeiwXjGLGW7bLAFWf7u5wSj7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.106.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3a:f5:f1:9a:9d:cd:a5:0f:33:9d:20:4f:12:93:8c:3e:fa:
1b:65:6e:1a:c3:25:98:cb:f4:3e:ff:d3:a7:5b:2b:74:14:ea:
a2:ee:c0:84:b0:fe:1b:19:82:c4:47:32:ef:82:4c:3b:98:79:
9a:8b:6b:2b:77:66:ab:36:38:4a:0d:26:05:7f:16:9a:c7:b6:
6e:1d:6b:64:dd:30:1b:6a:0a:27:11:1f:2b:e4:eb:c6:2b:83:
d0:95:e5:f9:61:64:b5:ac:2d:cc:05:dc:21:1e:2d:cd:ee:8b:
12:d8:43:e7:30:41:d4:5a:f8:fc:c5:a3:07:5b:c0:16:4a:37:
49:0c:f7:38:b4:db:73:00:20:7e:a4:17:1a:66:91:18:0c:1b:
9a:47:59:33:18:94:c5:dc:23:63:b2:d8:fb:01:7d:92:aa:ac:
03:72:bf:d8:1a:b8:13:f0:1b:ee:3e:da:e6:1b:a0:ab:a9:cb:
57:2a:76:ba:62:b3:2d:35:4e:aa:59:f5:cf:c2:6f:1c:35:e0:
16:d4:20:ed:ed:ed:c2:44:3f:77:56:7a:0e:ca:9a:df:b2:1a:
c1:b3:df:32:da:01:b1:3d:dc:3d:27:07:f8:3f:e2:e3:81:69:
83:f2:53:c0:3d:bb:5a:4f:7e:be:39:00:b5:67:43:ce:f7:f6:
e6:5e:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:17 2024 by rpki-client on console-ams.rpki-client.org