Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/cUWKAioA_J7gOte-XX6pWdeiQGY.roa
File: cUWKAioA_J7gOte-XX6pWdeiQGY.roa (raw, json)
Hash identifier: WvLaHJmcX6uN0fLjPxU/9RdVHA2dq8KLA1STC4+TWAw=
Subject key identifier: 71:45:8A:02:2A:00:FC:9E:E0:3A:D7:BE:5D:7E:A9:59:D7:A2:40:66
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 018CC79358BE03074F13A52BF3152C15D6FA
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/cUWKAioA_J7gOte-XX6pWdeiQGY.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35503
IP address blocks: 193.192.57.0/24 maxlen: 24
193.192.56.0/24 maxlen: 24
193.192.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:58:be:03:07:4f:13:a5:2b:f3:15:2c:15:d6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71458a022a00fc9ee03ad7be5d7ea959d7a24066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:cb:86:80:6c:c5:fc:62:2b:1e:00:a8:e9:
ff:52:79:6b:78:67:28:25:96:23:ae:92:cc:b3:aa:
d9:bd:fa:39:b2:c1:3e:24:03:6d:1b:4b:55:31:48:
f2:5c:65:7a:cd:1f:8b:d4:0b:ab:3c:fc:9f:87:d6:
29:a9:6c:b6:4f:02:00:fd:45:72:f1:0a:3f:8c:39:
98:12:fc:6a:20:1d:e8:ab:b6:fc:5c:fb:bc:b5:e7:
8c:21:d1:71:ff:a7:6c:21:3f:48:6d:48:c5:e4:df:
8f:be:e7:17:ac:7e:8d:82:77:b4:9b:45:c4:a8:74:
67:4b:29:29:34:80:cb:e7:75:5c:b9:91:2f:73:84:
36:21:be:55:7b:b2:8e:4f:a1:74:33:a8:d6:98:3d:
e5:42:19:84:1d:ad:a9:d9:e2:1d:29:86:3b:b8:b4:
ee:47:c1:c4:c5:06:6b:06:42:45:c2:e9:d2:22:c1:
03:c0:a6:32:ad:70:e6:c8:50:e2:00:3c:25:b1:61:
97:10:b7:de:35:95:d4:1d:e7:2b:93:c9:11:6a:d6:
00:ee:dd:27:83:62:6d:94:bf:39:7d:17:34:06:a7:
52:bc:a5:02:61:76:98:89:75:96:7c:bf:36:1d:7a:
ab:18:96:ed:2f:a5:3c:90:67:af:fd:93:b2:58:12:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:8A:02:2A:00:FC:9E:E0:3A:D7:BE:5D:7E:A9:59:D7:A2:40:66
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/cUWKAioA_J7gOte-XX6pWdeiQGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.56.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:bd:32:bc:d0:3e:1a:80:96:6d:fa:d3:72:c7:48:6b:80:9a:
fe:57:78:19:3b:af:7e:34:a3:54:35:68:74:5e:49:fb:a4:b3:
57:e9:67:6e:62:fa:2b:59:00:fe:67:42:a4:b9:89:70:41:69:
43:de:af:fe:4c:a4:e4:05:6f:46:54:2c:36:ef:95:c4:67:35:
af:3f:9c:9a:a4:08:64:bb:60:67:5c:be:f2:67:61:5b:bc:39:
0b:50:6f:74:6f:36:bc:62:68:8e:ad:f5:e1:52:88:9b:e7:ff:
25:04:be:02:f9:db:c9:46:52:d6:70:7d:62:c1:25:f4:fb:64:
46:e2:5d:4d:31:d3:f9:dd:22:a3:b0:c1:0b:82:97:37:cb:13:
9f:39:4d:34:fc:c9:35:76:0f:88:a0:86:6b:a8:91:f3:e3:ff:
1a:55:41:79:a5:f5:f8:2d:df:3b:d9:bf:2e:a7:38:6a:bc:35:
2f:7f:bc:0e:e9:13:59:42:52:fa:99:db:6e:2f:16:25:01:71:
21:6d:28:63:e6:7e:2d:18:8d:21:30:38:87:23:03:c3:d2:d9:
6c:b5:97:f1:75:0b:21:68:f5:cb:7a:25:27:fc:5c:20:97:b3:
6b:3a:18:47:03:4b:cd:5a:e2:65:ef:c7:02:25:f6:30:9d:f0:
f8:88:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:28:47 2024 by rpki-client on console-ams.rpki-client.org