Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/UOeDKFSM1eT0i5BxloCHDW4IS-Y.roa
File: UOeDKFSM1eT0i5BxloCHDW4IS-Y.roa (raw, json)
Hash identifier: Gx9fOAOiEXOFRWDOJ609O3t26keGaPCRguFgInLHP8A=
Subject key identifier: 50:E7:83:28:54:8C:D5:E4:F4:8B:90:71:96:80:87:0D:6E:08:4B:E6
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 018CC7952984E80D9C34AB4F3CC7071D94F1
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/UOeDKFSM1eT0i5BxloCHDW4IS-Y.roa
Signing time: Tue 02 Jan 2024 00:31:30 +0000
ROA not before: Tue 02 Jan 2024 00:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42973
IP address blocks: 83.97.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:29:84:e8:0d:9c:34:ab:4f:3c:c7:07:1d:94:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jan 2 00:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50e78328548cd5e4f48b90719680870d6e084be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:94:b3:22:15:65:24:78:7b:30:9a:66:97:
75:ea:fa:e0:80:be:d5:d1:42:68:d4:d6:04:54:9c:
5e:a4:82:05:2e:f7:8f:2b:2f:b2:be:45:6c:b6:21:
e5:d0:c3:21:7a:fb:d5:b1:b9:4f:c6:8a:dc:56:a0:
54:d2:07:a4:e4:b3:52:1c:4b:75:1c:64:7a:c4:a3:
c4:86:e9:44:6d:eb:07:6b:6c:62:73:ca:cc:c8:4d:
fb:be:bd:2b:bc:9f:d5:28:42:0f:c0:bf:12:ab:fe:
1c:28:f0:aa:20:67:8e:71:10:b0:c1:c6:5f:7d:8e:
4a:bf:42:e9:06:0d:22:aa:2a:2f:60:6f:bf:85:f6:
58:43:0c:92:94:aa:c6:32:d2:60:82:ed:d6:ed:5f:
d7:4a:e1:15:11:72:e9:cb:9a:9f:3e:8a:24:2e:7a:
63:57:87:5d:d3:0e:36:62:70:ff:35:d9:1a:2d:07:
4f:37:87:5d:7d:12:20:64:9f:d5:85:8b:a4:ff:3e:
85:7e:c1:30:af:4f:b5:cf:59:62:33:32:27:53:1a:
18:5d:5e:e1:d5:7e:13:13:a7:54:d7:6b:71:da:68:
23:0a:f9:b7:8f:09:05:91:b3:a9:28:71:a8:79:71:
9b:8b:95:f3:83:b8:bb:c1:af:66:2f:5c:e3:77:3f:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:83:28:54:8C:D5:E4:F4:8B:90:71:96:80:87:0D:6E:08:4B:E6
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/UOeDKFSM1eT0i5BxloCHDW4IS-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.32.0/22
Signature Algorithm: sha256WithRSAEncryption
83:bb:b4:e4:9c:e9:1e:19:56:ae:47:bc:94:24:df:d9:36:70:
d0:15:d1:25:17:82:9a:76:83:21:73:11:0d:8e:78:f3:80:12:
17:ca:35:d8:7e:cc:d7:f3:0f:e2:80:68:d8:0e:8b:61:89:0f:
44:40:50:b1:c4:c3:f9:1c:79:7b:48:cd:cd:f8:8b:da:70:71:
49:9a:ac:c8:cd:54:47:b6:04:af:8c:fd:c1:6a:34:24:9c:03:
a3:f1:92:ba:4d:08:28:61:a3:2f:af:af:46:e2:4b:74:0a:8d:
cb:f0:3c:22:2e:a1:f8:c9:9a:20:b6:57:ee:78:9c:f5:ef:d2:
20:a5:9a:16:b9:b6:a9:f7:48:af:e0:6a:88:8e:c6:2d:e9:ad:
53:e5:01:36:d5:42:60:9b:7f:61:5c:e8:e6:a2:a6:de:fb:cf:
9a:a1:fa:17:f9:46:08:66:2d:30:fc:74:38:cc:32:af:3e:dd:
b4:46:f6:b9:d9:78:f2:eb:c3:13:5b:b2:b8:45:6e:b3:f2:f7:
6e:e7:b6:4c:ea:7b:63:37:7d:7e:e8:89:74:29:01:af:8b:d2:
9e:ee:6f:3e:fc:b3:80:b0:fa:e9:99:19:41:c7:18:0e:1e:b3:
5a:d1:f7:4e:5b:b8:ae:55:e4:8a:5b:25:26:e6:3f:8e:76:e4:
84:72:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:07:03 2024 by rpki-client on console-fra.rpki-client.org