Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/ufkxsw_nEyBM5g6e5A3CO6jZr18.roa
File: ufkxsw_nEyBM5g6e5A3CO6jZr18.roa (raw, json)
Hash identifier: f3lt++7PE1ySOoPztST0waLITr5Tj9go8nlfG9BbSNI=
Subject key identifier: B9:F9:31:B3:0F:E7:13:20:4C:E6:0E:9E:E4:0D:C2:3B:A8:D9:AF:5F
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 018CC348B3200849549900F1BD05834DFC60
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/ufkxsw_nEyBM5g6e5A3CO6jZr18.roa
Signing time: Mon 01 Jan 2024 04:29:30 +0000
ROA not before: Mon 01 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58349
IP address blocks: 193.42.23.0/24 maxlen: 24
2a10:e5c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b3:20:08:49:54:99:00:f1:bd:05:83:4d:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jan 1 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9f931b30fe713204ce60e9ee40dc23ba8d9af5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:75:3b:9e:d4:0f:3a:d8:11:da:16:08:89:
8f:59:42:25:35:d5:92:76:6a:05:de:e5:a4:79:56:
db:95:1b:67:ce:6c:e7:b5:39:1a:a9:c3:ba:19:02:
a6:29:85:9f:b4:dd:e0:9a:e6:48:62:b4:fb:23:3f:
d0:b6:d4:8c:77:d7:87:fc:ef:f2:c5:82:cc:3e:77:
ab:58:9f:be:27:b4:2c:da:6d:ab:22:d4:8d:8e:7f:
2b:bf:c2:da:de:d8:ec:ef:3d:8e:ac:07:da:9b:ae:
c3:21:9c:21:da:49:54:ef:45:2c:3e:19:91:c3:2f:
36:d1:c3:8e:07:5f:50:ea:0d:96:05:28:e8:6c:5f:
8a:23:38:91:d8:28:5d:43:7a:ba:79:9a:b7:01:98:
f1:4f:24:70:24:34:a4:25:61:d2:da:d1:45:4f:c8:
ca:8e:86:22:2d:39:6e:8f:82:43:c7:e2:68:70:a6:
f9:0b:a9:9c:e5:67:a0:a3:76:74:8a:4e:85:6d:dc:
5c:d2:55:35:67:b7:09:41:da:89:e3:c6:1e:c0:32:
fa:4c:e0:f2:14:b0:b7:58:b0:22:9e:9b:b5:c9:bb:
c6:03:c3:bf:07:f3:ef:1e:f0:69:58:29:f7:9a:b7:
8e:8a:fa:57:2a:d8:8f:b8:6f:2e:04:c1:aa:18:29:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:31:B3:0F:E7:13:20:4C:E6:0E:9E:E4:0D:C2:3B:A8:D9:AF:5F
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/ufkxsw_nEyBM5g6e5A3CO6jZr18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.23.0/24
IPv6:
2a10:e5c0::/48
Signature Algorithm: sha256WithRSAEncryption
65:f4:ed:03:d2:8f:34:40:b2:e5:e7:ea:a8:0b:bf:60:1d:47:
ca:6e:bf:fa:8b:ba:a8:51:d4:59:6f:c9:3a:d0:bb:43:7e:3d:
d5:94:0c:d1:50:38:ac:e2:85:36:5a:3e:c3:85:75:28:f6:40:
d1:af:e8:de:9d:58:86:24:a9:60:c5:b7:23:b1:84:6d:ff:37:
65:e5:6c:29:52:8f:b1:6e:65:51:c5:f2:05:40:77:61:89:f0:
ca:33:9a:fe:aa:b0:78:4e:c9:e9:71:f2:f1:a8:96:6e:7a:9d:
4d:8a:20:b1:26:89:89:4f:32:dc:9d:67:d2:85:c4:91:eb:6b:
c5:be:22:51:7b:18:f3:fd:4a:8e:2d:e5:2f:7c:31:d4:c3:be:
7f:8c:6d:c4:bb:41:d8:cd:6c:b0:a9:f1:a6:d7:dc:1e:f2:a1:
58:ed:46:99:45:55:f6:2b:46:d2:98:66:1e:41:4f:f9:03:fc:
f9:70:06:79:67:e8:87:cb:4c:06:59:36:24:da:66:41:80:49:
39:f8:7f:cf:3f:1e:50:d8:f5:b3:6a:ed:a6:f6:35:7b:38:d1:
d3:2c:c7:f5:f1:37:bb:65:a3:21:bb:cd:61:57:d7:31:e1:b6:
3c:66:82:98:05:89:9f:37:b4:2a:8a:f9:5e:d4:8c:b3:fc:66:
c2:2b:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:50:45 2024 by rpki-client on console-fra.rpki-client.org