Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/uoyPNFET3pgUDmA62gzrtfzDDxE.roa
File: uoyPNFET3pgUDmA62gzrtfzDDxE.roa (raw, json)
Hash identifier: CzryAxoLSu4WuXWgagG7XUUU5fm0A1dOtkKD/x40+iQ=
Subject key identifier: BA:8C:8F:34:51:13:DE:98:14:0E:60:3A:DA:0C:EB:B5:FC:C3:0F:11
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 018EF63709E74ED338A811B25AC8FBDFE2C2
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/uoyPNFET3pgUDmA62gzrtfzDDxE.roa
Signing time: Fri 19 Apr 2024 11:56:25 +0000
ROA not before: Fri 19 Apr 2024 11:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8814
IP address blocks: 194.135.152.0/24 maxlen: 24
194.135.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:37:09:e7:4e:d3:38:a8:11:b2:5a:c8:fb:df:e2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Apr 19 11:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba8c8f345113de98140e603ada0cebb5fcc30f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:c3:ca:a2:84:52:08:2b:5e:12:c8:83:ad:
a1:72:9a:6b:47:03:ca:17:19:e4:da:57:d3:d0:8d:
9e:d2:94:bd:88:48:51:0c:f6:54:ba:a1:e2:d3:4e:
e8:66:29:3d:6f:a6:28:5d:27:0c:49:21:d6:8c:c5:
12:c6:d7:fa:4d:cf:40:14:2e:aa:5a:13:00:92:6c:
7d:40:b0:c4:6e:78:04:1c:ca:40:3b:13:99:96:d2:
45:91:58:7a:8d:63:1d:bb:64:f0:13:ac:13:8b:74:
84:d8:7c:dd:a0:48:24:e7:20:a5:a0:23:50:48:3a:
e6:8d:40:99:97:2e:f6:60:08:ef:35:40:08:d8:c2:
b1:3d:bf:ee:dc:15:73:01:fb:db:be:fc:87:80:3a:
e5:26:ca:1e:11:2c:b0:a4:eb:a2:46:77:a8:d4:3f:
4d:96:8f:1a:99:e1:32:f9:d1:47:ea:b0:a1:eb:00:
63:3e:d0:2b:bb:a9:3f:a8:d5:52:33:55:75:e5:3b:
c3:43:92:65:41:34:07:f6:67:18:c8:68:e6:b8:0f:
41:5b:e6:3a:ef:a6:19:0d:8a:1d:0d:3e:9b:46:39:
49:17:1f:aa:95:47:27:ad:5a:9c:bf:57:11:f3:4a:
f0:1f:3c:06:83:52:87:24:45:ab:4d:ed:07:c0:85:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:8F:34:51:13:DE:98:14:0E:60:3A:DA:0C:EB:B5:FC:C3:0F:11
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/uoyPNFET3pgUDmA62gzrtfzDDxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.152.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:0c:ba:92:91:0d:37:5d:06:83:83:70:a2:29:df:43:4c:88:
3f:ca:fb:88:6b:51:d2:0d:b1:5a:27:66:57:02:47:f8:64:56:
34:df:5c:cb:3f:94:cb:9b:23:9a:0d:61:aa:3e:04:8e:07:1b:
ab:c0:62:0e:cb:e0:a3:49:83:98:0e:48:06:a6:82:79:f2:a5:
39:39:6f:87:e9:11:91:33:cb:dd:34:33:19:ee:92:61:1e:d1:
dd:ba:b1:2a:27:77:cc:3f:09:94:0d:3c:e4:42:69:bb:b1:8c:
8a:5e:01:1d:c4:63:1f:aa:32:a5:c2:6a:01:6c:3e:9e:34:b9:
f9:63:3e:e9:c5:3e:eb:cb:b4:a6:0c:eb:6c:c0:1e:ec:00:0c:
27:ec:ce:7a:62:b9:29:5d:0f:8d:59:43:56:3f:b2:71:03:d7:
7e:3b:c7:74:33:d4:f2:3e:97:81:b3:35:85:63:cd:a4:6e:66:
b5:8c:69:02:8e:2d:31:c3:62:55:69:64:0e:8a:37:7b:19:63:
c9:3b:fb:75:ef:59:f7:b3:1b:92:a1:14:bd:cb:9a:f9:3e:09:
c3:44:1d:e3:80:37:ad:11:38:49:83:4d:45:c7:30:2a:37:40:
8b:1c:46:d2:a6:d0:59:ef:45:64:e9:44:04:4d:1f:48:68:bb:
60:74:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:13:26 2024 by rpki-client on console-ams.rpki-client.org