Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Uu5ilHXUU8RgCTG1i2j1-I5qWgE.roa
File: Uu5ilHXUU8RgCTG1i2j1-I5qWgE.roa (raw, json)
Hash identifier: +aJPrCfUqdXQealgBHBsF4y2RwvpOyJmX6B7fkHXO84=
Subject key identifier: 52:EE:62:94:75:D4:53:C4:60:09:31:B5:8B:68:F5:F8:8E:6A:5A:01
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348D3BB69F3EB09B50C25613A311D68
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Uu5ilHXUU8RgCTG1i2j1-I5qWgE.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16114
IP address blocks: 194.209.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d3:bb:69:f3:eb:09:b5:0c:25:61:3a:31:1d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52ee629475d453c4600931b58b68f5f88e6a5a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:05:b8:cd:db:a3:29:ed:31:11:63:e2:4e:
95:5d:ce:4c:b6:9f:ba:be:bf:7d:c2:fb:40:67:2f:
af:24:b5:5a:4f:41:f3:93:7d:54:29:7e:20:da:c4:
a4:23:1a:30:40:ac:d5:f9:2b:c7:80:91:0f:40:0d:
af:18:b8:ec:ce:b9:ab:77:bf:a3:3a:1d:9a:0d:7b:
3d:8d:42:b1:29:3c:47:2b:ca:e8:3e:0e:f7:bd:8a:
87:e5:21:c7:2e:32:0d:ec:eb:81:87:39:66:5b:4e:
ea:8e:17:e9:d1:18:bd:0a:7d:2e:a1:27:10:ca:5a:
c2:2c:af:93:d9:55:fc:de:0c:db:b2:d7:7a:4b:bf:
08:e7:a4:8f:17:73:25:1b:3f:0a:3a:19:a8:22:87:
aa:4a:a7:5c:f0:26:50:63:64:9a:b7:ce:29:1f:fe:
6d:31:ee:67:bf:ec:8b:0c:48:c6:8d:49:4d:c1:d6:
ec:a5:56:16:26:5d:76:27:57:b9:2f:56:14:01:64:
ed:29:dc:5d:72:8e:8a:51:1a:8d:a6:bd:19:ae:65:
08:bf:a5:fa:bb:58:c5:2d:e0:fc:ab:e4:78:ff:37:
da:c4:5d:68:10:6f:0b:1d:77:62:64:9b:4d:c3:27:
a1:a9:23:19:7b:6d:50:4d:de:4f:be:f1:eb:e9:56:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:62:94:75:D4:53:C4:60:09:31:B5:8B:68:F5:F8:8E:6A:5A:01
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Uu5ilHXUU8RgCTG1i2j1-I5qWgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.241.0/24
Signature Algorithm: sha256WithRSAEncryption
47:51:c5:10:e4:13:c6:e7:44:15:8f:54:cc:80:43:eb:8a:3b:
95:ff:70:f4:fe:0b:e0:b2:1b:5e:7a:90:31:34:f9:57:03:66:
62:8a:68:b5:77:ba:0a:87:ea:f3:70:8b:8d:44:6d:c9:1a:1c:
7a:64:45:54:01:05:cd:29:28:db:c6:81:94:62:64:07:1f:40:
9e:cc:1e:50:90:8b:11:7d:68:ec:45:33:d4:68:89:0c:2c:1d:
72:c9:e1:17:e0:b5:32:33:f2:9f:79:5b:4c:7a:5a:62:5b:6d:
0c:2b:3b:cf:12:1b:10:a3:3f:13:3d:72:c5:54:b7:a0:b9:d2:
82:ce:ba:f8:25:f3:d3:5e:11:f8:b8:f6:41:d7:cc:77:7a:4e:
ee:fb:a2:fe:42:42:43:79:f0:5c:d2:27:1c:c2:3b:8b:d1:c8:
ce:84:30:86:3d:fe:94:32:c0:22:90:cb:5a:ec:1a:b6:a6:1f:
e8:6c:f9:0c:c7:ce:bf:c0:ef:0d:3e:88:5b:b9:eb:e4:80:d6:
a5:08:28:22:cd:c1:44:cf:78:fa:98:3c:6d:9f:ea:36:c9:0c:
bf:99:ae:cd:be:18:94:6d:df:3c:77:75:24:68:34:b1:a9:05:
48:e5:16:ac:b7:e5:38:9a:f7:ee:b1:fd:d0:3c:b4:e4:cd:9a:
d5:f7:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:51 2024 by rpki-client on console-fra.rpki-client.org