Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/umqjjZRyrXSQ6adfC8FLvkMTUCw.roa
File: umqjjZRyrXSQ6adfC8FLvkMTUCw.roa (raw, json)
Hash identifier: LCAWdyOOmM3eJODjwRh2Ax2y1rOW/qi5CX8DGzFCRbE=
Subject key identifier: BA:6A:A3:8D:94:72:AD:74:90:E9:A7:5F:0B:C1:4B:BE:43:13:50:2C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AD80D5E0C21C14977DD61589D1BB8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/umqjjZRyrXSQ6adfC8FLvkMTUCw.roa
Signing time: Mon 01 Jan 2024 18:30:42 +0000
ROA not before: Mon 01 Jan 2024 18:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6718
IP address blocks: 80.97.49.0/24 maxlen: 24
85.120.222.0/23 maxlen: 24
80.96.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d8:0d:5e:0c:21:c1:49:77:dd:61:58:9d:1b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba6aa38d9472ad7490e9a75f0bc14bbe4313502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:9a:7b:4a:5e:6f:ed:c2:85:b4:53:4e:46:
70:9f:dc:d2:a7:b9:2d:7c:8e:2e:d3:38:e8:2c:57:
d7:2a:6a:b6:4b:fc:c5:4a:53:a7:55:bb:52:01:80:
cf:be:b6:82:61:11:40:b3:89:fb:41:48:25:f7:0d:
fe:7e:d5:13:22:b2:8f:25:a6:e8:39:5e:2a:1b:a9:
60:26:32:ce:cf:b1:4c:7b:28:e9:11:e7:d7:0f:bd:
d7:e1:f3:2a:ec:a0:b3:71:2d:ad:9f:71:a8:6e:c0:
a5:5d:79:08:97:58:11:d4:fa:07:c2:a8:1a:1f:dc:
fe:1a:96:d6:df:60:7d:c1:4d:1f:51:81:ae:b3:db:
e5:da:b5:ae:3a:2c:33:9c:8a:6e:3f:53:55:71:be:
06:38:8e:09:fd:21:df:b8:f2:64:14:df:1e:87:28:
7d:59:7c:9f:86:90:a4:cb:21:90:54:27:4e:b5:91:
f7:09:d1:b0:c4:48:bf:7a:8e:cc:90:60:d5:c7:94:
b6:66:1e:96:26:8d:a5:33:93:54:e9:b3:d7:56:dd:
58:da:fc:28:2e:35:a2:77:74:77:0c:28:70:72:31:
25:f8:b2:56:5b:93:fe:b1:f9:56:18:09:51:3a:29:
fb:8e:2e:3d:d5:9c:b6:aa:94:25:45:b4:1f:7c:e5:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:A3:8D:94:72:AD:74:90:E9:A7:5F:0B:C1:4B:BE:43:13:50:2C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/umqjjZRyrXSQ6adfC8FLvkMTUCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.42.0/24
80.97.49.0/24
85.120.222.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:0f:cb:6e:d8:8e:ee:87:18:87:4d:fb:f4:61:ef:2e:50:c5:
e6:94:72:ce:bf:75:71:c8:91:a8:43:62:e5:c7:f4:ab:70:28:
03:c9:d0:95:f4:40:07:74:d1:63:a3:11:d1:50:1e:58:8a:81:
88:6e:41:4b:98:1c:31:e0:6c:82:e8:8e:6c:a2:34:86:26:fe:
73:f3:4d:30:f2:1d:17:01:69:60:90:96:74:7c:1d:49:50:2a:
62:90:3b:0f:8f:13:eb:11:ae:86:89:90:fa:4e:3f:b0:10:32:
06:c2:01:c1:db:c3:3f:d9:4f:09:02:c3:0e:2f:85:2d:b4:4b:
1c:f1:e9:fd:1a:73:89:0c:b6:09:b4:b8:22:94:e6:5d:eb:e1:
21:7e:83:48:ef:f7:3c:51:3e:f7:ef:11:7e:b6:ab:7e:d3:81:
95:9c:27:5f:a7:76:4b:d1:30:90:fe:15:92:22:9b:8d:e0:d2:
01:3e:64:f3:14:fe:d7:ba:b3:98:d1:c7:da:94:31:e9:66:19:
2b:0c:49:48:b2:c7:e8:22:10:7b:8f:1b:6d:18:44:60:37:ef:
7a:f3:5a:24:7b:75:c3:f4:ca:e0:15:69:a0:c8:a7:f1:cc:ed:
ba:97:03:72:4f:34:a1:a0:73:95:9c:f1:24:2c:28:2b:b3:d8:
d5:bd:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org