Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/u6golbr2qnYt09fL2axwOkKGkT4.roa
File: u6golbr2qnYt09fL2axwOkKGkT4.roa (raw, json)
Hash identifier: RRhhzxS0L2BIVJai1RnMKs+4GRKrCVvn8uv/+ivehDk=
Subject key identifier: BB:A8:28:95:BA:F6:AA:76:2D:D3:D7:CB:D9:AC:70:3A:42:86:91:3E
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC80137889C28F7863FC33EE1D3D7177C
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/u6golbr2qnYt09fL2axwOkKGkT4.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60253
IP address blocks: 92.205.192.0/20 maxlen: 24
92.205.80.0/21 maxlen: 21
92.205.156.0/22 maxlen: 24
2a00:116a:200::/40 maxlen: 40
2a00:116a::/40 maxlen: 48
2a00:116a:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:37:88:9c:28:f7:86:3f:c3:3e:e1:d3:d7:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bba82895baf6aa762dd3d7cbd9ac703a4286913e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:c9:15:f4:84:08:e0:df:4b:21:5e:a7:55:
44:47:55:c7:7f:e4:2c:26:fe:d1:15:1c:bf:2a:39:
c7:5d:d1:25:7e:2f:96:78:10:87:7c:c9:63:11:05:
f0:b5:6f:7c:74:e9:11:e9:1d:97:72:b9:69:5b:78:
18:8d:d4:31:71:00:de:58:36:7c:d3:c5:f5:a8:38:
d3:2e:70:97:cb:e6:6a:9c:9d:b3:fe:7b:36:80:13:
2f:2c:5c:22:ab:65:c7:87:de:ae:5e:2c:66:86:41:
14:25:0a:40:7d:80:f9:36:24:6a:d7:d6:9b:8d:6b:
1b:ab:76:07:1d:f3:2d:68:22:ec:9e:8f:66:a0:67:
26:5a:17:36:19:9f:b3:00:66:2e:e2:1b:75:c0:ac:
75:d9:17:8e:ee:c1:4a:61:9f:1c:ba:34:fd:1a:4c:
ba:d3:bf:e8:fd:7d:72:5f:e5:10:1e:06:94:bc:2d:
ea:fe:6f:18:ce:7a:b5:b7:5a:ed:c0:9c:7e:8e:27:
33:18:77:cf:f6:d9:09:72:39:a4:bd:f2:fe:e1:35:
20:91:97:6c:e0:f1:ae:7a:e0:60:a5:43:ed:77:ee:
ac:3f:b9:e0:54:4f:b1:d8:d2:4c:9b:9b:1f:79:a9:
f7:34:6f:ce:a8:2b:a8:dc:7e:75:4f:51:9c:49:f4:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:28:95:BA:F6:AA:76:2D:D3:D7:CB:D9:AC:70:3A:42:86:91:3E
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/u6golbr2qnYt09fL2axwOkKGkT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.205.80.0/21
92.205.156.0/22
92.205.192.0/20
IPv6:
2a00:116a::-2a00:116a:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:8b:c8:04:90:7f:fb:2a:d8:cf:32:df:2f:f1:0a:cb:69:b5:
5c:af:f4:99:96:bb:2f:e6:db:21:51:df:5e:5c:4b:ea:40:e1:
e1:3e:93:ba:3d:9f:55:c7:3a:04:3c:da:79:84:96:38:b8:99:
ea:e1:a3:00:09:4e:8a:42:63:64:f0:dc:28:a1:4d:2f:c7:24:
12:2b:d2:36:a6:d5:26:14:a5:3d:3a:66:31:c9:b2:ac:dc:0a:
79:37:bf:36:e0:6e:82:7d:9d:89:3b:49:12:07:79:29:49:f1:
af:a4:5c:e4:3b:a6:28:cc:8e:23:09:16:e3:3e:5f:49:c8:2d:
74:c4:ea:2f:34:e1:c1:54:d5:6b:39:e7:af:b0:5e:46:51:8f:
4e:90:aa:bb:0b:c0:d0:b3:39:16:b2:1d:c9:e2:11:cb:7c:4b:
17:b8:60:7b:df:2f:f4:91:32:b1:00:09:75:61:ab:f4:30:e5:
9b:02:64:f9:b4:14:8c:63:a7:60:3e:b4:5f:60:a9:64:23:12:
a1:af:02:98:68:5b:f2:14:27:e9:97:e8:90:0b:6f:a4:cc:89:
94:75:65:d1:17:b8:5e:b8:33:f7:7c:04:34:36:0a:70:d3:31:
92:05:d8:03:90:24:3f:56:37:29:c3:4b:2c:19:d4:2e:d5:84:
87:10:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:37:00 2024 by rpki-client on console-fra.rpki-client.org