Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UlQNx5pA3iQlLZduL8bU27n9930.roa
File: UlQNx5pA3iQlLZduL8bU27n9930.roa (raw, json)
Hash identifier: hZP8JUau5htuvuJMKauVk6jSqOyFSrpp73D0pXNArsw=
Subject key identifier: 52:54:0D:C7:9A:40:DE:24:25:2D:97:6E:2F:C6:D4:DB:B9:FD:F7:7D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE9FFA6FD689D3DF772EB2344EB03
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UlQNx5pA3iQlLZduL8bU27n9930.roa
Signing time: Tue 02 Jan 2024 06:29:30 +0000
ROA not before: Tue 02 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49421
IP address blocks: 2a00:1728:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e9:ff:a6:fd:68:9d:3d:f7:72:eb:23:44:eb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52540dc79a40de24252d976e2fc6d4dbb9fdf77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:ab:67:fb:c2:fb:ad:2c:f3:94:7a:22:b1:
98:ec:d2:35:5b:a8:62:ca:cf:e3:3d:39:1d:da:26:
c7:e8:f1:1e:9e:b5:f4:0e:00:38:d1:ca:7f:df:ea:
fe:a2:82:93:f6:b2:10:19:c2:ac:d2:0c:15:ff:0e:
95:a8:75:b4:18:b0:59:de:6a:7c:6b:a1:12:cb:13:
62:2d:da:30:5e:a1:ee:1b:56:e9:3f:94:ee:e5:a5:
69:14:e3:eb:5e:ce:0f:94:98:30:63:53:40:3b:34:
67:b3:79:f2:dd:e8:3e:0e:af:82:40:3e:ba:32:a7:
7a:7b:23:9e:c6:a9:3d:44:3c:56:74:2b:be:59:ff:
ca:7a:69:57:9d:7d:0f:de:93:e4:23:d9:03:80:71:
4b:1a:c3:0e:29:a6:f8:c7:79:75:4d:46:61:11:41:
71:79:b9:5c:eb:29:cf:7b:86:e7:b9:ee:67:bf:a5:
7f:26:22:16:cb:11:c9:14:8a:68:ea:08:cd:fb:ca:
99:63:67:a6:98:ed:54:1a:6b:da:21:3b:ce:91:c3:
f2:15:d7:7a:77:4c:ad:f6:55:18:0d:d6:78:ca:28:
ad:3d:9f:4d:f8:b2:5c:9d:f5:20:7c:99:21:c8:d9:
29:2e:11:59:41:5f:03:fb:d0:5d:dd:e5:8d:57:e5:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:0D:C7:9A:40:DE:24:25:2D:97:6E:2F:C6:D4:DB:B9:FD:F7:7D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UlQNx5pA3iQlLZduL8bU27n9930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1728:2a::/48
Signature Algorithm: sha256WithRSAEncryption
11:e3:6d:14:3c:8d:aa:c4:63:d9:de:7c:bb:c5:2c:25:db:ff:
8b:16:3e:90:ef:7d:75:4c:ed:62:01:5b:ae:9a:98:7d:c2:46:
75:d7:de:f9:76:43:da:57:58:e9:5e:45:aa:75:ce:e3:09:17:
96:93:8f:6b:53:a8:14:27:a9:70:6b:66:e5:90:b8:a1:3a:be:
06:fd:48:35:58:86:98:ed:79:a0:e2:00:27:bf:56:e0:f7:f5:
c1:6c:a4:e7:37:88:95:ad:d3:c6:10:70:34:8e:86:52:60:af:
eb:46:39:a7:ce:46:13:c7:de:52:3f:51:eb:e0:0f:23:f8:08:
04:fa:23:e7:d2:3a:d0:84:88:f6:df:3b:92:fa:bf:32:3b:23:
42:3f:60:0a:8e:dd:7d:be:41:45:94:55:d2:d7:ae:68:a3:16:
b9:aa:8e:02:30:c4:cd:4c:83:ec:71:f1:de:bd:d2:05:47:70:
ff:6b:ee:54:15:b9:9a:21:06:34:77:e8:3e:9a:11:f0:db:41:
1e:54:0d:2e:89:1e:1f:ec:e8:51:4c:3c:12:64:b8:18:2b:bf:
92:4e:96:fa:a6:35:b3:22:ce:25:c8:51:01:4b:3a:6c:8d:5c:
13:28:7d:93:78:66:61:bb:92:dc:7d:98:06:b4:6b:8e:db:37:
b5:15:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:06 2024 by rpki-client on console-ams.rpki-client.org