Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/U-YMaHS0vqJwPpWKmjsBImDiCW0.roa
File: U-YMaHS0vqJwPpWKmjsBImDiCW0.roa (raw, json)
Hash identifier: K2ZbvGcIZvpCrLHgRg5VnjtYtBYjWZd+yG9x7dQmrz4=
Subject key identifier: 53:E6:0C:68:74:B4:BE:A2:70:3E:95:8A:9A:3B:01:22:60:E2:09:6D
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 018CC9BBDAE376265CBF1D54FD897979F06B
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/U-YMaHS0vqJwPpWKmjsBImDiCW0.roa
Signing time: Tue 02 Jan 2024 10:33:00 +0000
ROA not before: Tue 02 Jan 2024 10:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206409
IP address blocks: 89.107.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:da:e3:76:26:5c:bf:1d:54:fd:89:79:79:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jan 2 10:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53e60c6874b4bea2703e958a9a3b012260e2096d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:a0:bc:cf:80:26:f0:94:b1:47:57:52:4a:
1c:74:58:ec:87:65:9c:3f:ea:8c:3b:20:34:2e:e1:
e4:7e:57:b9:69:2d:67:2e:d2:02:a2:be:f4:33:ff:
26:a9:1f:4f:31:79:97:5d:3b:c8:d2:b6:61:b3:1a:
df:b3:a5:fb:21:d0:c3:9d:59:5f:be:79:04:5b:32:
60:c3:b3:a9:5d:37:09:d6:c3:af:17:90:ee:4a:21:
f2:40:46:c6:cc:9a:38:15:fa:8f:92:85:fa:53:44:
f1:a4:f4:bc:80:08:d5:3a:82:bb:84:ac:58:ec:9c:
c7:8e:24:6e:e5:7d:dc:f1:d2:f6:22:7f:07:bc:6b:
12:de:69:6c:1b:d6:22:38:82:6a:14:b4:20:9b:60:
be:33:30:66:e1:1c:fc:6e:07:0f:93:7a:a5:6e:e0:
4e:d9:15:37:c3:90:1c:c7:c5:0f:c8:7a:dc:6a:88:
8a:8e:81:4f:c7:7d:83:be:9d:fa:03:39:44:16:78:
39:d9:9e:85:ae:94:13:6e:7b:ca:74:ef:c5:38:e2:
06:49:0f:93:7a:ca:e5:6d:e8:42:af:eb:49:6e:2b:
cd:f7:b1:4e:f6:1f:6d:e8:44:1b:08:97:db:b3:bd:
98:b0:1c:7b:ac:af:c7:12:4b:00:98:f0:5b:82:3c:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:0C:68:74:B4:BE:A2:70:3E:95:8A:9A:3B:01:22:60:E2:09:6D
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/U-YMaHS0vqJwPpWKmjsBImDiCW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a4:ef:74:eb:e1:7b:c9:4b:9c:36:3a:c1:7f:11:88:55:b3:
52:9a:ff:6c:53:ea:65:62:3c:d5:c0:e3:a1:bb:59:80:25:b3:
b5:0d:6a:a3:1a:58:58:3e:a6:3d:54:ef:b7:c1:2d:6e:8a:49:
19:45:7e:a9:b9:04:22:d7:74:fb:40:55:93:b5:ec:13:29:73:
4f:ef:9a:30:dd:47:cc:63:a3:c0:ce:f9:d0:7f:7a:07:2b:38:
09:23:0d:be:57:74:8a:66:8c:4f:47:c7:17:c7:91:a7:cf:1c:
71:11:dd:6b:68:03:c6:e2:05:81:64:c8:75:e9:fc:2f:c2:1e:
9c:da:2c:d4:2d:13:c2:c3:e7:e2:89:27:5c:c9:d7:90:49:18:
5f:cc:81:4c:34:8b:41:22:61:93:30:38:27:c8:23:9a:73:95:
6c:45:56:07:4f:4b:88:de:3c:59:14:ca:bb:c2:13:32:d9:cc:
20:3e:17:ad:11:5c:83:e9:62:33:1c:0e:5b:ab:71:89:14:f0:
ce:bf:12:90:32:1c:c5:f1:88:14:d4:a1:9a:06:44:90:27:32:
10:3b:24:05:39:b4:27:cc:5d:9c:31:1c:4d:63:a8:72:36:28:
31:e6:aa:b2:f4:b6:5a:8e:1a:6e:3e:47:82:e8:37:aa:1f:8d:
56:f8:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:43:26 2024 by rpki-client on console-ams.rpki-client.org