Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C_uVU-u3n9TKcm6d76j23PmwehI.roa
File: C_uVU-u3n9TKcm6d76j23PmwehI.roa (raw, json)
Hash identifier: hJfAGCymUM1UdOmG7pGh1QLQA3PLYh/KNuFjrgTEv1Q=
Subject key identifier: 0B:FB:95:53:EB:B7:9F:D4:CA:72:6E:9D:EF:A8:F6:DC:F9:B0:7A:12
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB632F05D06D6E66D50B7A824966E3
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C_uVU-u3n9TKcm6d76j23PmwehI.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:2f:05:d0:6d:6e:66:d5:0b:7a:82:49:66:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bfb9553ebb79fd4ca726e9defa8f6dcf9b07a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:9c:52:9e:8e:04:7a:aa:1e:73:f4:fb:df:
95:d3:8c:d6:1e:ba:d8:8e:4b:e5:a5:ff:5b:d1:39:
f8:27:04:94:57:2d:34:e9:0f:d4:68:ae:eb:fc:41:
7e:4a:81:0d:34:9d:1e:1a:f0:7f:43:e4:a0:dd:37:
09:c2:a3:9f:21:86:32:2c:9c:53:84:65:4d:1f:48:
0c:ff:a8:88:f7:2c:7c:a3:c1:78:20:23:d1:39:d0:
59:5a:20:bd:8d:5f:d1:bd:c1:b0:ee:4a:87:ba:53:
ca:14:6e:d3:47:4c:33:b0:d5:a1:66:ad:e2:5d:46:
e4:10:58:37:39:b6:70:ed:dc:f2:61:28:94:1a:41:
e8:70:f7:3b:fe:9a:47:20:8d:d0:d5:71:dc:19:23:
2b:0c:ee:d0:1c:27:d8:9b:d0:4c:1f:89:21:4f:26:
c1:c1:55:1b:4d:43:ce:0e:43:6e:b8:38:3e:ba:d3:
37:6a:08:fa:df:e1:4c:b4:1f:1b:59:e7:be:ad:a4:
ef:0a:83:d3:7a:60:27:f7:59:06:56:8a:ae:78:5a:
32:d5:be:1d:00:13:22:3f:03:77:7e:d1:77:7c:59:
53:69:74:22:a4:b5:05:83:a8:b9:f3:57:41:df:6c:
da:20:f9:89:16:d3:69:40:4c:99:90:e5:79:09:69:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:95:53:EB:B7:9F:D4:CA:72:6E:9D:EF:A8:F6:DC:F9:B0:7A:12
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/C_uVU-u3n9TKcm6d76j23PmwehI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
85:45:b9:18:45:b1:84:6e:34:96:f5:8c:7c:3f:97:60:09:fc:
1d:8b:ad:21:81:2c:23:e9:31:88:03:14:07:69:b3:c7:4d:a8:
73:89:f8:42:52:b5:44:a3:12:00:8d:6f:57:95:35:23:93:be:
c5:29:e1:59:1e:07:94:3f:70:6f:7b:89:92:35:7f:75:bb:96:
7c:7e:db:ba:09:52:1b:75:60:d2:db:f1:4c:23:4a:68:44:70:
c6:53:35:cd:23:88:89:e9:8d:84:6d:33:ef:82:e9:37:0d:8c:
9b:0c:fe:fe:5c:b1:c1:d5:93:90:de:cf:0e:06:9b:7e:cd:f4:
56:ea:df:f5:e8:57:c5:f3:a4:b7:1a:db:2d:dc:cc:30:f1:7e:
91:6c:58:a4:a2:6a:ed:4d:74:f5:6d:1b:72:fe:d5:00:e8:57:
8f:48:fe:fc:a6:0a:0f:f3:33:45:dd:2e:a7:f5:be:32:07:e2:
29:53:37:5c:22:b8:76:5b:c6:62:38:62:8d:df:fe:17:bd:df:
0c:bb:31:4f:ad:2d:3a:d0:55:fb:4e:1e:0b:09:f9:5f:bb:15:
e6:3f:53:6d:57:f7:ee:42:b1:a8:eb:f4:79:88:c8:49:e9:4b:
9a:34:cc:5c:ce:75:7f:85:b9:a9:52:29:7a:a6:cc:41:26:4e:
62:5f:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:05:33 2024 by rpki-client on console-ams.rpki-client.org