Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/UrQha2f3dO4FOEfg7GZJLdE2ino.roa
File: UrQha2f3dO4FOEfg7GZJLdE2ino.roa (raw, json)
Hash identifier: dYhwEZCrjKc4dicTDgGhag40B+wQoOX2HIBghol7rRA=
Subject key identifier: 52:B4:21:6B:67:F7:74:EE:05:38:47:E0:EC:66:49:2D:D1:36:8A:7A
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 018CC86F90771E9FFB130D764B48E241D706
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/UrQha2f3dO4FOEfg7GZJLdE2ino.roa
Signing time: Tue 02 Jan 2024 04:30:03 +0000
ROA not before: Tue 02 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 193.9.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 07:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:90:77:1e:9f:fb:13:0d:76:4b:48:e2:41:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Jan 2 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52b4216b67f774ee053847e0ec66492dd1368a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:81:e7:7e:83:58:ae:28:37:0f:c1:8b:cc:
88:2f:9b:88:86:8f:a9:9c:b4:fb:35:90:dd:1a:fd:
cb:7d:46:06:f3:db:af:0d:10:d4:31:aa:1a:26:67:
2f:c6:df:55:b8:75:cd:bf:b3:68:22:7a:67:5e:30:
76:d8:96:b8:1a:ad:b4:36:0d:11:12:71:76:b9:95:
b7:1d:19:bf:9a:20:7f:c0:7f:e5:23:18:af:97:bd:
2b:10:84:dd:fb:74:4a:6a:e3:0f:ab:02:24:c7:d0:
6b:22:36:7c:1e:74:29:8a:47:5a:71:cb:8c:ea:3d:
9a:11:81:8b:1d:29:59:73:81:38:c0:c5:83:48:49:
06:ed:75:17:a3:ed:58:e5:be:8d:a6:4c:a3:87:42:
dc:a8:4d:8d:2f:ed:d3:ca:5c:80:35:00:af:4d:f2:
b9:cb:f8:c6:01:eb:6b:5d:7b:25:47:6d:49:31:3f:
d2:82:2c:a3:bb:c4:61:e4:8b:18:04:e0:4b:49:9c:
1a:6e:52:ba:5a:52:67:f3:00:12:54:90:a3:00:05:
01:51:89:de:dc:90:38:9e:65:eb:d9:16:12:07:c4:
ef:13:06:5a:2b:e4:19:45:9d:cd:6e:73:66:90:30:
87:8c:f1:db:dd:b4:e8:0f:a1:3c:f8:00:dc:35:05:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:21:6B:67:F7:74:EE:05:38:47:E0:EC:66:49:2D:D1:36:8A:7A
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/UrQha2f3dO4FOEfg7GZJLdE2ino.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.249.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9c:77:66:37:b6:b5:54:96:e9:62:b6:58:bf:28:fb:2e:d0:
f0:78:1f:74:35:57:81:50:eb:ac:b6:24:81:1a:ce:e1:9d:62:
6a:71:95:b7:f4:0c:ec:b2:ff:02:16:c4:0f:3d:7c:26:5b:0d:
5d:f2:c3:0b:bc:7d:01:d7:a6:5e:ee:6c:cb:51:3a:8e:0e:b5:
c8:bd:69:d5:8a:31:b7:30:82:27:99:fc:7a:77:60:86:37:62:
11:24:32:cb:ed:4d:5e:ad:d6:3c:36:ed:3b:f7:47:cb:c8:5c:
cb:49:7e:3f:e3:36:e0:4f:4d:4c:a9:17:38:63:42:d7:bf:74:
2d:43:eb:ef:8c:75:12:3c:e6:28:ef:f5:7f:a9:7f:7f:6c:b3:
87:78:c9:52:eb:46:64:f3:98:14:22:f0:47:de:9d:e6:58:e6:
89:83:b8:b5:9d:f2:60:69:32:f2:10:5c:87:fa:07:64:85:a7:
b4:00:8d:f5:58:7f:9e:c1:4e:a7:86:59:ca:d8:78:38:89:be:
d4:45:6f:db:9e:8a:de:a0:fa:19:13:a8:a3:42:df:96:42:d7:
f6:2b:64:eb:ee:3d:d8:40:2d:3a:60:bb:d6:37:e0:58:73:a7:
d6:8b:8b:b2:c1:78:4b:1e:9f:02:35:76:a4:fe:29:3f:1b:69:
75:4c:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:46:02 2024 by rpki-client on console-fra.rpki-client.org