Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/URDK-YtdNEkv-SwPQJCXSIMBAi8.roa
File: URDK-YtdNEkv-SwPQJCXSIMBAi8.roa (raw, json)
Hash identifier: bc96ND3sr59ol4+7bjWnqMvwLXY1CXUospsjTlxZnqY=
Subject key identifier: 51:10:CA:F9:8B:5D:34:49:2F:F9:2C:0F:40:90:97:48:83:01:02:2F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01919769DC943117DC171C94A017B91E8CEA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/URDK-YtdNEkv-SwPQJCXSIMBAi8.roa
Signing time: Wed 28 Aug 2024 05:16:22 +0000
ROA not before: Wed 28 Aug 2024 05:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401109
IP address blocks: 87.120.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:69:dc:94:31:17:dc:17:1c:94:a0:17:b9:1e:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 28 05:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5110caf98b5d34492ff92c0f409097488301022f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:60:d0:3c:eb:64:e4:5a:72:8e:ed:7d:73:
6e:b8:32:9a:f2:4f:01:99:a9:6b:28:22:f2:1d:56:
da:c0:6f:32:1b:c6:ab:c7:df:42:01:b8:ec:69:de:
33:e0:b4:36:f8:ce:dc:f3:50:1d:84:a8:24:83:95:
5d:80:09:ea:fb:ed:9f:f5:ed:1c:22:f5:4c:e7:44:
41:e9:2f:42:97:5e:7a:2e:df:2c:6b:85:3f:22:fa:
ed:8f:cf:34:0a:ff:65:bd:a0:f7:8d:77:76:06:df:
ba:88:e8:1e:c6:90:98:51:0e:c6:66:8b:a2:14:62:
de:15:ed:7e:f9:3f:dc:39:46:61:1a:f9:02:48:20:
dc:ca:8e:ba:1f:2b:64:78:34:63:fe:cb:2a:0e:1a:
b9:13:d4:e0:24:37:b1:65:1f:78:2e:6b:87:6f:2f:
6d:7b:a7:a2:ee:e0:3a:7b:37:ed:75:6c:9c:10:c8:
a0:f7:b5:74:07:a2:38:d1:c8:37:c8:92:74:98:01:
02:ad:e4:78:a6:1d:4e:a7:1a:d8:fa:64:28:61:4a:
c8:13:d5:4a:ae:b6:71:01:b8:b0:d5:77:ef:d6:b9:
ca:b6:2b:de:9a:ce:04:c2:4b:04:e3:01:cd:88:9f:
7c:b1:d5:d3:5c:dd:b5:c7:80:04:67:8e:b8:c7:82:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:CA:F9:8B:5D:34:49:2F:F9:2C:0F:40:90:97:48:83:01:02:2F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/URDK-YtdNEkv-SwPQJCXSIMBAi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.120.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:2f:4e:83:8d:1a:09:19:66:c8:6b:8a:3b:35:1e:99:f1:6c:
0e:93:be:e2:d2:44:48:63:38:3e:83:f6:a2:74:fb:68:6e:9c:
f7:c1:c9:97:a7:d0:03:46:bb:d7:3e:cf:2e:09:d6:00:f5:b6:
27:72:74:25:63:03:98:2f:e2:1d:9e:48:1b:18:36:dc:fb:53:
0d:40:b5:01:99:73:c6:e3:ff:6c:d4:57:91:a6:30:d9:60:e4:
fd:87:5b:60:5a:e2:c3:98:bb:a4:35:15:09:88:b3:f1:53:10:
f2:84:e1:a3:a6:47:eb:ef:db:bf:67:a7:52:04:a7:f8:16:9c:
56:d3:c7:0c:83:cd:08:db:f6:c0:cc:80:0d:6c:6d:8e:28:f1:
36:20:90:f4:70:a6:e1:f8:2b:33:04:68:8a:02:88:94:9a:7c:
75:5f:60:72:1b:55:37:c2:10:c1:54:a7:48:db:ff:8f:5a:18:
57:52:42:4c:33:71:2d:4f:01:7d:d8:bf:5f:c1:cb:31:9e:91:
b2:ab:6f:3f:68:fd:df:ec:73:d3:3f:23:9b:7f:92:bf:62:ae:
d2:0f:63:7a:ba:24:ac:f1:14:9d:fd:3b:9b:26:61:c1:de:da:
46:5d:ba:01:fd:79:bb:7b:6c:36:b6:0c:8c:95:15:58:a6:82:
3e:c3:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:17 2024 by rpki-client on console-ams.rpki-client.org