Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/Ul8d-PhrQhAea_JXNZ05IhlGuXM.roa
File: Ul8d-PhrQhAea_JXNZ05IhlGuXM.roa (raw, json)
Hash identifier: 3NAQGI1Wg8PGUy9YROweAtBifhcVK5HK9KBiVBef4K8=
Subject key identifier: 52:5F:1D:F8:F8:6B:42:10:1E:6B:F2:57:35:9D:39:22:19:46:B9:73
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 01903B186B418EF85455CA419B9EEE3AE1BB
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/Ul8d-PhrQhAea_JXNZ05IhlGuXM.roa
Signing time: Fri 21 Jun 2024 13:59:34 +0000
ROA not before: Fri 21 Jun 2024 13:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 185.218.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:18:6b:41:8e:f8:54:55:ca:41:9b:9e:ee:3a:e1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Jun 21 13:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=525f1df8f86b42101e6bf257359d39221946b973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:d4:38:97:6c:17:34:e3:0e:1d:45:71:b3:
fc:de:b7:80:0e:62:fb:44:37:bc:0d:ca:72:d6:30:
c5:b8:f5:b1:06:bf:e1:23:88:5f:c4:37:66:1c:16:
e7:98:34:d2:38:e6:2a:89:0c:92:09:ff:28:fe:ca:
91:25:9b:fa:3a:da:dc:15:47:d3:05:0d:da:51:07:
6d:31:d9:c0:b8:75:c3:1d:cf:de:bd:45:d2:2c:01:
c5:d9:1a:12:1a:80:5c:d4:e3:54:be:da:6b:d2:e9:
a7:bc:5c:a8:38:8e:80:9f:d7:cf:71:34:86:68:19:
7d:c3:fb:60:5c:f6:78:b9:41:61:cb:9f:f0:a8:96:
b5:24:22:cb:13:f0:93:4b:48:96:e4:43:ce:20:f1:
26:0b:f7:76:b1:e2:c2:4e:77:e9:ab:45:cc:08:96:
c6:f3:67:01:35:29:be:9f:9b:8d:53:3c:e3:1f:b8:
74:15:ae:a6:0b:b5:b2:a1:e6:0c:3b:a0:a3:ab:10:
11:a9:68:5f:46:84:32:9e:46:5c:c6:86:5b:26:e4:
bb:a5:bc:12:71:c8:2c:a3:36:65:1b:3a:9d:ef:13:
1a:47:6a:dc:79:57:0c:45:c0:d9:8d:e0:4c:71:12:
82:16:d4:36:2e:62:a1:db:68:2a:b8:52:bf:ca:19:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5F:1D:F8:F8:6B:42:10:1E:6B:F2:57:35:9D:39:22:19:46:B9:73
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/Ul8d-PhrQhAea_JXNZ05IhlGuXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:29:e5:cc:74:35:f1:dc:06:ba:99:50:4f:b2:24:2c:f2:75:
c0:11:76:83:8d:c9:5e:a9:e9:5a:22:b7:c0:f1:bb:d0:a6:77:
b5:be:d2:11:02:3a:a3:70:b2:47:5a:51:b5:4d:b6:5b:5c:71:
38:55:87:0e:15:12:e7:ee:dd:90:42:7e:cc:89:ed:30:49:3d:
55:25:86:50:9b:cb:de:fc:eb:5c:52:e8:00:20:bb:0e:01:55:
3f:0c:1f:f2:d1:a4:08:f2:c4:35:8e:14:28:d7:02:1a:37:fa:
6b:95:b3:d5:b1:73:16:31:f3:75:72:fe:57:04:2d:cc:0d:ef:
91:04:d4:2c:20:06:ea:11:e6:31:88:ee:b2:95:35:5b:2e:d4:
2c:f3:27:eb:6d:3f:3a:dd:d9:b6:5c:7a:f1:5c:86:87:d3:9f:
34:6c:94:7b:ad:ad:34:91:1f:dd:6b:3c:67:da:7f:ca:51:f1:
31:85:26:5b:bb:ed:0b:96:35:cc:92:5e:e2:5a:db:fc:18:43:
ba:c7:c8:d3:20:ae:6a:9a:a5:7b:86:23:f0:23:7d:ee:94:f8:
9b:08:9d:2f:9f:67:84:79:37:73:48:79:3c:b1:b4:b8:8d:6c:
ff:a5:77:40:2a:e2:cd:46:b3:ce:cc:b1:95:b1:bd:8b:b3:47:
1f:e1:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:18:13 2024 by rpki-client on console-ams.rpki-client.org