Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UW_9l3RCEt1nzHokVl-Re36uM1A.roa
File: UW_9l3RCEt1nzHokVl-Re36uM1A.roa (raw, json)
Hash identifier: +hMmvShJH1JjS4ZlaeUOYQEPNPMhM3i4TAW6mmOmXHc=
Subject key identifier: 51:6F:FD:97:74:42:12:DD:67:CC:7A:24:56:5F:91:7B:7E:AE:33:50
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01922A448DB4DB122FDF16E7BC5FC32FFD61
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UW_9l3RCEt1nzHokVl-Re36uM1A.roa
Signing time: Wed 25 Sep 2024 17:39:48 +0000
ROA not before: Wed 25 Sep 2024 17:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 43.240.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2a:44:8d:b4:db:12:2f:df:16:e7:bc:5f:c3:2f:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 25 17:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=516ffd97744212dd67cc7a24565f917b7eae3350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:ca:eb:28:56:91:a3:03:d7:01:40:67:8a:
98:f2:bf:56:e5:dd:ff:8c:d6:87:e7:85:86:d5:e8:
f4:f2:fc:52:7b:ac:bb:fe:c0:ba:c8:cb:a6:ee:50:
0e:8f:78:89:03:9b:8c:74:2e:b8:62:d9:e4:1b:6f:
ec:77:1e:dd:20:d9:3a:e0:fe:1e:32:47:a0:d4:7c:
39:ab:51:eb:b6:a7:43:05:ff:92:ce:7e:00:0a:e2:
40:7a:1e:0b:36:30:ea:ae:77:a6:00:3d:ec:2c:d6:
1e:d7:9f:39:eb:1b:06:a5:7f:6f:6e:ef:1a:a5:e2:
ac:1b:45:74:fa:b5:86:fe:7c:9c:26:df:2c:8b:c4:
ca:2a:44:1c:00:6f:38:8b:bc:62:2b:57:17:16:c3:
cd:dc:22:94:64:d6:31:91:03:c8:86:e0:76:23:d2:
02:30:69:c7:cb:27:1a:3a:fa:57:ee:ea:f2:7c:a9:
84:f1:8c:68:76:d2:60:da:60:ab:e8:e4:4d:57:c2:
5a:7c:44:e7:8e:31:c1:16:b4:e6:01:88:e1:ce:28:
c4:33:c1:50:fc:fb:67:f8:24:6f:60:82:26:ec:36:
da:a1:76:09:9e:11:03:ce:df:bb:b3:1d:c2:ac:0b:
41:8e:be:b0:09:df:d1:ad:3b:2f:9b:e8:0a:0e:fc:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:FD:97:74:42:12:DD:67:CC:7A:24:56:5F:91:7B:7E:AE:33:50
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UW_9l3RCEt1nzHokVl-Re36uM1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ba:03:93:d4:42:32:ca:e1:23:11:91:7d:1a:9a:7b:85:5e:
ff:53:c9:76:82:1c:f6:ff:81:80:52:c6:3c:52:34:ed:59:9c:
45:fc:67:ce:69:7d:54:95:0c:06:17:c1:68:75:52:cd:30:05:
84:28:ad:5b:19:8d:0d:bb:7a:18:6f:92:bb:89:b1:e8:54:10:
34:60:7c:13:c1:10:40:5b:83:d1:fe:9b:37:f3:7f:00:d2:d7:
37:c5:b1:23:58:2a:05:92:e8:48:06:3c:b7:65:f7:07:76:7b:
d6:67:d7:45:e2:92:90:3d:f0:33:29:d2:58:c4:a1:ed:fa:b6:
db:d0:84:c3:c7:b7:3b:96:eb:55:0f:12:1d:82:30:11:42:49:
e3:21:72:0f:dd:11:e4:e6:ca:44:fb:b9:1f:be:8f:f3:5f:df:
54:04:50:a8:11:74:fe:8f:91:11:b7:03:08:c1:91:9c:48:ab:
c2:4b:6d:d6:51:27:f0:3c:c3:67:62:ff:84:9e:e5:35:88:0b:
02:a3:5e:05:21:6f:f9:ad:6d:dd:ed:fb:9d:cf:a7:dc:36:15:
f3:e0:9b:94:29:58:07:67:fa:d6:d9:be:8e:83:3d:ba:a9:4c:
1d:4e:31:80:f2:c5:94:48:58:4f:e6:0c:76:61:6f:1b:22:e4:
58:5b:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:28:00 2024 by rpki-client on console-fra.rpki-client.org