Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/uW_hupTWx38OZe59UOL1V3Et7O0.roa
File: uW_hupTWx38OZe59UOL1V3Et7O0.roa (raw, json)
Hash identifier: MiP9OxCcR7tOawooXV3wOrJ/vFytDu9ElexHtvonS5s=
Subject key identifier: B9:6F:E1:BA:94:D6:C7:7F:0E:65:EE:7D:50:E2:F5:57:71:2D:EC:ED
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 0190DFA4D22E7209A63F692C42E3FBBAD7F4
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/uW_hupTWx38OZe59UOL1V3Et7O0.roa
Signing time: Tue 23 Jul 2024 12:50:39 +0000
ROA not before: Tue 23 Jul 2024 12:50:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 45.13.11.0/24 maxlen: 24
185.50.206.0/24 maxlen: 24
185.50.207.0/24 maxlen: 24
188.119.104.0/24 maxlen: 24
193.43.75.0/24 maxlen: 24
193.43.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:a4:d2:2e:72:09:a6:3f:69:2c:42:e3:fb:ba:d7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jul 23 12:50:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b96fe1ba94d6c77f0e65ee7d50e2f557712deced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:b0:94:58:d1:bf:d2:33:63:e6:1f:cf:b0:
fb:2c:77:3f:65:f5:2b:29:4b:96:05:77:da:d0:90:
3d:e6:17:b0:e3:ce:06:31:7d:bd:a8:74:6f:cb:a2:
b6:24:e3:65:3f:c3:c2:bb:d5:5f:d3:c8:aa:f6:63:
f3:9b:c7:dc:53:89:4c:54:3a:ff:5c:34:42:04:bb:
1a:ff:09:5a:ad:fd:c1:a0:28:f7:23:65:4a:51:81:
ef:71:c0:50:0e:7b:ae:9a:48:82:d0:5d:eb:5c:de:
5b:e7:93:dd:f3:97:5a:2b:e4:8c:cc:66:fc:72:3d:
09:20:99:b4:b6:12:84:f4:c2:a0:b9:13:b0:b4:ed:
82:46:38:24:0d:57:66:c4:23:82:ce:ce:81:b2:42:
3d:6d:44:6d:28:76:43:e9:1a:20:78:0a:3a:29:fe:
c4:94:44:c3:a5:d0:88:49:b0:3b:ac:92:1e:3b:60:
c1:75:93:c9:14:8d:02:a3:35:c1:71:c1:f5:7b:7b:
43:e8:4a:b4:57:0c:ae:d7:53:73:db:1a:ae:b6:ae:
c8:21:4a:e2:96:e0:c0:14:f9:4c:de:e4:53:97:fc:
f1:a7:02:69:3d:17:e4:0d:bc:77:14:96:70:b3:13:
e7:d7:98:52:51:48:e8:b6:5d:23:b9:a3:0f:bd:8e:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:E1:BA:94:D6:C7:7F:0E:65:EE:7D:50:E2:F5:57:71:2D:EC:ED
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/uW_hupTWx38OZe59UOL1V3Et7O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.11.0/24
185.50.206.0/23
188.119.104.0/24
193.43.75.0/24
193.43.98.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b0:18:b7:f8:d8:79:aa:7c:64:e5:60:39:ca:9c:bb:09:d3:
ac:1f:0e:50:ea:fa:46:e6:b3:f6:d7:c3:83:41:6f:09:10:3b:
30:73:e2:af:93:fb:f6:a7:d0:db:1a:a6:1e:71:41:e7:1e:17:
03:6d:48:df:c4:ac:75:17:98:72:16:87:e6:79:7b:83:9e:c9:
59:5f:a4:08:7c:53:55:e1:1d:92:87:9c:a8:4c:64:5a:18:50:
dd:c6:cb:60:9d:1f:c8:9c:4f:07:bf:73:27:76:50:78:24:57:
d4:d3:44:d6:a0:37:1f:04:4c:3b:bb:ee:60:8b:55:e9:ff:49:
a4:c4:43:46:44:55:e8:0e:1d:11:9a:70:ac:56:33:bd:87:71:
5d:be:52:60:fb:30:34:b6:e3:8b:bb:19:ef:0b:5b:15:76:d1:
f3:6d:0c:44:ad:ef:4c:02:5b:b8:56:ac:32:78:e8:90:82:b2:
76:e4:6a:d4:5f:11:81:b7:cd:cb:65:8c:b9:91:ee:77:66:3d:
38:d5:9c:de:3f:fd:74:db:82:db:8c:f5:13:f9:47:a8:fc:07:
87:00:5e:8f:7f:75:87:14:2e:e7:bc:a0:c1:64:53:98:6f:92:
70:71:71:98:b8:1a:c1:54:b4:35:c7:c4:6e:5a:db:90:c5:dd:
ad:36:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:41 2024 by rpki-client on console-ams.rpki-client.org