Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Ud5hZdkp6jln1CdMXX_bG2UcvCI.roa
File: Ud5hZdkp6jln1CdMXX_bG2UcvCI.roa (raw, json)
Hash identifier: ZQHEw4Jqd7ul0veKX4uI9N1BqFb7Mb6yKzqiIIQYboE=
Subject key identifier: 51:DE:61:65:D9:29:EA:39:67:D4:27:4C:5D:7F:DB:1B:65:1C:BC:22
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E9421B6262EC77CF19CB4D996414E
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Ud5hZdkp6jln1CdMXX_bG2UcvCI.roa
Signing time: Mon 01 Jan 2024 14:30:07 +0000
ROA not before: Mon 01 Jan 2024 14:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51703
IP address blocks: 213.153.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:94:21:b6:26:2e:c7:7c:f1:9c:b4:d9:96:41:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51de6165d929ea3967d4274c5d7fdb1b651cbc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:61:6f:d5:20:bd:fc:4a:74:ad:f8:e6:12:
ef:53:76:08:c4:ac:91:9a:9e:34:13:b0:4e:9b:46:
ad:d8:a3:86:2d:c4:10:47:44:01:3e:75:96:84:a0:
01:8b:f1:31:48:f3:5c:95:d7:fb:78:7f:c4:1f:c4:
13:40:57:8c:97:b1:8a:50:39:56:ac:de:23:7e:a2:
0e:4f:69:b8:1b:1b:fc:85:9b:35:f1:cf:d9:0d:19:
45:aa:85:4f:3b:5b:1c:fd:10:61:68:d4:a1:ed:4b:
6e:26:e9:a5:d6:c4:9c:ac:9a:e1:35:2f:b4:e8:c8:
aa:73:8d:fa:6a:bd:30:dd:57:04:db:df:4f:de:ba:
74:07:c4:90:9d:90:a7:7e:d4:3e:92:a4:19:9c:f5:
12:ca:df:33:b8:ad:a8:15:d3:05:d4:fb:df:62:d4:
12:e9:db:8a:43:38:6a:b0:53:4f:dc:5e:80:07:e3:
09:6c:cb:75:1e:be:e2:d0:96:69:af:98:98:47:34:
2e:39:84:e9:9f:74:91:4c:ae:fa:21:a5:e0:07:0b:
9b:5a:76:e4:c8:96:9f:c2:76:d0:df:7a:06:7b:fd:
aa:cd:72:60:a3:c6:bb:de:4a:a1:e0:8f:ec:3e:4f:
94:f6:bd:37:41:2f:b1:85:38:eb:f9:5f:b3:18:17:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:61:65:D9:29:EA:39:67:D4:27:4C:5D:7F:DB:1B:65:1C:BC:22
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Ud5hZdkp6jln1CdMXX_bG2UcvCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.153.172.0/24
Signature Algorithm: sha256WithRSAEncryption
13:13:f0:a6:c4:cb:00:03:49:c8:92:21:48:83:5b:1f:20:47:
45:c4:22:15:b2:62:91:6c:68:a0:a2:d8:e0:e5:e4:0a:6e:75:
c6:a4:48:7e:da:d8:a7:54:ad:e5:48:90:f0:b7:ae:ad:33:3b:
f6:50:3b:c8:8f:f1:d3:05:17:db:32:74:90:6c:c7:fd:73:09:
a5:82:d1:1a:f0:60:fa:eb:1d:94:c9:be:4a:89:fb:7d:d0:ca:
cc:54:cb:5a:db:12:28:0d:7a:73:e7:7d:f9:55:55:dd:ac:57:
d4:bb:97:f3:9e:8a:31:8a:a1:8b:00:cd:a2:bf:c1:c2:69:dc:
2c:14:25:35:c9:df:14:84:c0:25:a9:14:8f:3b:72:8c:3b:26:
55:68:c2:b2:ba:ae:cf:05:c2:85:36:14:33:b1:2a:fb:87:ba:
07:1e:51:99:4a:78:23:48:05:94:f5:be:52:d5:21:39:52:65:
fd:0e:84:49:d6:ef:fb:d0:9a:20:54:eb:98:d0:5e:cf:a1:0c:
e4:74:e3:1d:2b:2f:5d:0f:1f:d6:86:01:76:9b:dd:13:09:5d:
c7:94:57:64:88:6a:20:3b:78:d2:11:af:8a:e0:6c:24:f0:bf:
26:45:19:f1:bf:22:fb:da:a6:be:08:80:63:ec:12:e1:23:ec:
f8:5a:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:47:49 2024 by rpki-client on console-ams.rpki-client.org