Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/UO2X_mygtWGfJtSBrmvpX-4ZzGw.roa
File: UO2X_mygtWGfJtSBrmvpX-4ZzGw.roa (raw, json)
Hash identifier: 108pIuMq7LHTW5+yEMfaMtfEb+Wfix/ca9p/yoDKvbs=
Subject key identifier: 50:ED:97:FE:6C:A0:B5:61:9F:26:D4:81:AE:6B:E9:5F:EE:19:CC:6C
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 018CC94D1E06E4B266F2B9FF19EA87ED83A7
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/UO2X_mygtWGfJtSBrmvpX-4ZzGw.roa
Signing time: Tue 02 Jan 2024 08:32:03 +0000
ROA not before: Tue 02 Jan 2024 08:32:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 194.110.130.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:1e:06:e4:b2:66:f2:b9:ff:19:ea:87:ed:83:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Jan 2 08:32:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50ed97fe6ca0b5619f26d481ae6be95fee19cc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:eb:59:8a:8f:b3:b3:02:ba:f9:7d:b5:5c:
7e:b3:22:4c:1e:c8:1e:d5:8a:c5:9a:d4:bf:bc:5f:
b5:c5:43:14:c2:5f:a2:ef:a9:dd:f0:98:19:c1:29:
2a:c9:77:b0:25:11:58:07:a5:22:96:f2:20:f5:5a:
d9:37:c6:29:4b:62:34:0a:cf:b6:fe:e5:26:4c:c5:
48:d0:c6:54:e9:7b:01:f4:66:18:0d:94:7a:a4:16:
c8:ad:4c:13:97:59:0e:28:a1:d9:45:2c:a3:9d:4d:
f0:80:64:17:91:77:e8:ee:c0:ef:00:ef:6d:27:32:
29:ee:1a:12:80:b9:12:73:6f:cd:f5:0f:28:18:f2:
5a:2b:97:ad:29:f5:fd:2b:54:7d:27:67:c6:8f:9a:
da:6e:4f:0d:39:80:d4:e9:4b:1a:8a:b0:e4:08:b6:
d9:bc:8d:f5:ee:47:a2:76:a0:91:a4:de:5e:f2:ac:
de:6a:7b:90:57:25:65:2c:ab:94:86:f3:04:dc:0e:
ec:7b:28:29:29:57:48:4b:7f:18:1e:bf:2f:a3:6e:
b6:33:9a:85:49:c4:0b:1f:bf:24:bc:33:48:61:62:
0e:44:d8:51:9f:e8:9c:40:d8:1a:e1:60:6b:29:2b:
a2:34:7e:2c:2c:10:70:fb:ca:99:f7:e9:99:2a:67:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:ED:97:FE:6C:A0:B5:61:9F:26:D4:81:AE:6B:E9:5F:EE:19:CC:6C
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/UO2X_mygtWGfJtSBrmvpX-4ZzGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
06:47:7a:52:69:8a:9b:46:a5:6b:8c:ec:b0:23:ef:31:eb:75:
49:b8:ab:5d:de:b4:5a:91:ca:2c:5d:34:cb:96:52:f4:7f:40:
c3:f2:f3:4c:2f:a6:af:f3:df:e5:96:e8:cd:29:29:6f:11:5a:
9a:50:20:de:ae:da:99:43:80:c2:19:bd:21:7e:63:bf:53:5b:
f9:07:e1:43:04:14:b9:04:35:fd:16:bf:bd:84:be:96:38:b6:
24:7b:42:6f:29:71:93:e5:16:2e:8b:ce:ab:a8:6e:d6:02:b7:
42:29:7d:c1:14:4b:f2:88:29:5c:6e:9a:ee:1b:c4:1c:42:47:
09:55:d4:78:6c:a7:fa:f5:ea:41:f2:bc:cc:40:0a:e1:8a:eb:
5a:04:03:af:d3:fc:1d:62:b3:8d:cc:45:ad:90:33:d7:85:ae:
d6:79:70:2e:fe:a3:07:87:70:5d:b5:5b:21:30:0a:cd:67:cc:
92:a0:4d:0e:d1:bb:5b:02:fb:2e:11:57:fe:f8:87:a3:0f:d0:
70:3c:d5:79:5e:9d:51:44:5a:42:be:18:6e:ae:85:72:4f:10:
41:07:e8:b5:3f:64:2b:ff:58:81:d5:e3:ec:00:85:30:a2:da:
06:1a:2d:4c:f1:d3:97:cd:24:11:8f:45:b2:b3:3f:38:71:98:
a0:ff:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:16:16 2024 by rpki-client on console-fra.rpki-client.org