Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/UBBSEb9zDZ0K7Tl3S_JpH4Sdw_U.roa
File: UBBSEb9zDZ0K7Tl3S_JpH4Sdw_U.roa (raw, json)
Hash identifier: GaWUffPm+k+RUa9VbpyhV8RaTzdB6n1B6pcpjQHoECw=
Subject key identifier: 50:10:52:11:BF:73:0D:9D:0A:ED:39:77:4B:F2:69:1F:84:9D:C3:F5
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC4936E5B16506B76601EEE5EE09AFBD0
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/UBBSEb9zDZ0K7Tl3S_JpH4Sdw_U.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210926
IP address blocks: 2a10:4646:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6e:5b:16:50:6b:76:60:1e:ee:5e:e0:9a:fb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50105211bf730d9d0aed39774bf2691f849dc3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:1b:8d:c1:57:95:9e:30:d2:d4:8b:fa:4d:
fe:36:80:31:03:76:b9:c9:d3:12:23:f9:b4:98:8e:
6e:08:63:c3:c7:35:72:e3:67:f1:ba:01:80:77:89:
dd:05:00:c1:d0:6a:b1:ab:e3:f9:02:78:4e:82:db:
5c:24:4e:b8:b3:d1:45:06:da:d4:fd:6a:73:18:d3:
91:14:e0:e3:34:d0:fb:4d:86:45:ab:92:80:6a:f4:
20:b7:67:10:48:78:43:a4:e5:3d:4d:3d:7e:83:b7:
65:bc:a1:87:31:d3:f0:f9:0e:6a:75:6b:f5:2c:b1:
51:6f:2c:9e:6f:d8:97:df:38:95:68:78:95:0e:e3:
9a:67:db:13:9a:49:94:f9:fa:72:32:b0:89:32:c7:
37:3d:37:54:8b:e0:11:6e:ac:5e:f3:23:57:27:3e:
71:84:83:b8:14:07:8d:37:77:8b:91:20:25:b3:a9:
79:21:dd:d1:5c:bf:a2:32:de:2f:72:38:25:16:d4:
41:14:56:ce:24:db:6b:be:1c:8c:7e:c6:90:bc:ae:
30:3b:e9:c4:07:25:9c:42:11:94:35:9b:39:9b:d4:
4f:50:a3:c0:e4:b0:d5:86:d8:58:ee:27:48:2e:60:
7f:f3:e8:23:6e:cf:01:c7:94:a9:54:1a:b3:46:70:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:52:11:BF:73:0D:9D:0A:ED:39:77:4B:F2:69:1F:84:9D:C3:F5
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/UBBSEb9zDZ0K7Tl3S_JpH4Sdw_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:110::/44
Signature Algorithm: sha256WithRSAEncryption
3b:c0:2f:cc:5d:26:af:05:d2:f2:44:6e:46:7c:8a:b5:d8:d5:
17:8a:92:6e:81:3c:33:47:47:8f:a1:94:40:c0:b9:4c:20:e9:
54:e0:9f:88:68:58:5d:ae:f3:67:6f:59:35:2f:4f:cf:00:19:
48:e8:9d:e9:66:6c:b7:15:d3:74:54:28:25:b0:0c:15:2b:12:
ec:d3:bd:4f:1b:3a:fe:2a:8e:03:6e:b7:00:d0:99:4f:6a:25:
78:52:46:61:b1:cd:1c:b0:e5:31:8f:a4:45:97:cf:b6:e9:7a:
52:50:06:be:83:a7:e0:1d:31:30:e8:49:e3:4a:6d:87:6f:cc:
bd:f8:3d:2a:a9:2c:2c:75:f4:51:ae:bf:61:c0:99:68:db:08:
3d:a0:f2:43:56:3b:b6:d1:2f:4b:92:a8:3d:15:de:1c:2a:62:
ba:be:8b:65:49:f8:77:c6:5e:38:90:a7:50:22:ad:05:0e:e8:
66:ca:85:a6:ca:f0:f5:09:d3:02:41:3f:38:3e:cd:55:68:d1:
ed:ec:f7:a7:a0:29:db:a6:f5:13:72:3f:9e:20:55:33:a3:14:
ba:75:32:44:eb:2c:f8:e7:9a:b1:45:ce:0b:f6:b3:4f:36:2f:
9a:83:f8:43:f4:65:8e:5e:07:b1:7c:71:b3:1b:76:89:ed:b0:
09:28:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:35:11 2024 by rpki-client on console-ams.rpki-client.org