Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/U-GwdYn22x6wc52P77sS1nkoYOw.roa
File: U-GwdYn22x6wc52P77sS1nkoYOw.roa (raw, json)
Hash identifier: NltJwpZJvpPRo87gk2uHwTkCJnlDGc1qdB+C2920fwI=
Subject key identifier: 53:E1:B0:75:89:F6:DB:1E:B0:73:9D:8F:EF:BB:12:D6:79:28:60:EC
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 018CC86EF58BA1966E00A72134350EBD7E47
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/U-GwdYn22x6wc52P77sS1nkoYOw.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 193.103.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f5:8b:a1:96:6e:00:a7:21:34:35:0e:bd:7e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53e1b07589f6db1eb0739d8fefbb12d6792860ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:73:ab:19:5b:5b:e9:44:89:33:1e:4f:38:
34:60:b1:cf:53:59:4d:c4:92:5f:17:7e:5c:11:72:
23:75:d3:82:f4:87:2c:50:13:66:00:18:e0:da:96:
b7:b5:bd:bd:28:d7:4b:11:90:30:6f:6b:33:02:ac:
14:87:d6:35:00:7e:99:cc:f1:a3:7a:49:1c:3a:e1:
cd:51:c8:29:db:c5:34:2d:ac:5b:85:eb:5e:4f:2c:
95:54:da:3e:5a:08:26:60:0b:ce:01:2e:e9:af:2c:
90:3d:43:5f:f2:4f:04:bd:ca:58:bd:66:14:22:83:
0a:b6:1c:45:25:46:8e:2e:66:89:88:14:67:c1:48:
0c:0b:51:c7:4b:d5:fa:85:ad:95:fa:a5:7e:fc:ad:
a2:22:6e:52:bd:e4:ae:f2:61:ee:dd:d7:f0:cc:98:
9f:91:5c:e7:d4:7f:6c:fe:7c:43:c3:40:55:8c:fb:
ff:79:d5:05:3c:5a:a7:4c:7b:17:83:ed:4e:be:b3:
95:1a:c8:06:11:ee:59:ac:f3:a7:77:2c:36:1d:b1:
4e:b8:75:58:17:81:11:db:bc:54:5d:11:03:02:65:
a8:d3:66:21:53:56:8e:ff:68:71:35:40:c2:18:b6:
49:ad:70:3d:11:b5:59:80:19:49:84:4e:cf:b2:6c:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E1:B0:75:89:F6:DB:1E:B0:73:9D:8F:EF:BB:12:D6:79:28:60:EC
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/U-GwdYn22x6wc52P77sS1nkoYOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.193.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fc:4e:6c:33:f4:4d:1e:a3:27:ca:7f:ca:d8:73:71:12:7b:
d9:9f:e6:35:65:37:be:26:1c:7b:fd:6c:7a:4a:3e:16:96:48:
3a:33:7b:c0:b8:dd:6c:6a:6e:43:2e:3f:63:82:3f:7a:a3:dd:
e8:fb:c6:6e:ec:65:9f:4c:6b:27:69:43:d2:ae:97:0a:31:de:
f8:ff:ac:d7:7f:20:b0:3e:41:03:73:33:c0:b0:52:69:d3:64:
4e:c6:b8:e8:7d:48:c7:0c:23:5c:78:e7:f8:a6:fa:36:58:2a:
b6:46:85:4d:c3:f9:14:61:b0:04:cb:92:e4:70:2d:2b:ad:49:
0b:af:b1:ef:c5:bb:0e:d0:3d:48:b5:89:cf:e9:78:2e:ab:32:
ce:74:57:bb:d0:d5:e6:61:b9:2f:dc:ee:f1:95:da:f4:1c:bd:
9c:aa:c7:b7:5e:be:b0:a3:cb:64:bf:b3:84:ca:ab:28:bf:2e:
18:07:ee:4e:90:e3:da:e5:61:5c:38:00:c8:8a:a1:5e:b8:f3:
1b:d4:af:d4:b0:66:bf:69:48:b0:2e:d0:b7:40:2b:54:ad:bd:
8b:67:cd:db:25:4b:da:0c:0d:31:d4:0e:3f:43:ed:10:f5:6e:
f0:78:8b:80:e4:05:f9:d8:35:f3:a4:17:79:ee:c9:1f:af:83:
ec:b7:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:24:28 2024 by rpki-client on console-ams.rpki-client.org