Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/u-s0oy9wDiSII-o__xGMAV4AJaw.roa
File: u-s0oy9wDiSII-o__xGMAV4AJaw.roa (raw, json)
Hash identifier: vvCvmU/OXTFOBco+McSZu7g1PDFwFlbIs4LveQBPrWs=
Subject key identifier: BB:EB:34:A3:2F:70:0E:24:88:23:EA:3F:FF:11:8C:01:5E:00:25:AC
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 018CC50112554F29D008B06AD1248BB57D10
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/u-s0oy9wDiSII-o__xGMAV4AJaw.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.76.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:12:55:4f:29:d0:08:b0:6a:d1:24:8b:b5:7d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbeb34a32f700e248823ea3fff118c015e0025ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:6a:54:ea:8f:9f:26:99:62:87:55:91:87:
f6:ad:16:84:09:f2:8b:52:c0:51:7f:35:b2:18:9f:
5a:67:03:33:0e:fb:26:e5:66:de:7d:f5:85:04:4b:
18:03:82:e1:c9:61:84:7d:d6:24:64:c4:e1:7d:15:
44:00:e8:b8:1f:00:91:de:dd:94:58:57:b8:21:04:
7a:01:d2:17:29:5e:68:90:90:d8:38:32:b5:1e:7f:
1a:0e:75:cd:30:7e:92:89:95:b3:39:60:19:04:50:
3b:6c:89:5b:45:9c:44:18:27:d1:0e:24:65:e4:10:
ca:16:e5:20:26:b9:c1:ef:ba:e8:6f:4f:ce:0b:13:
5c:2e:9d:32:8f:e1:c5:ff:3b:c5:9d:46:90:81:09:
5a:ac:14:f9:28:23:53:a5:6f:5a:60:13:47:17:5b:
2c:69:99:a4:15:b3:51:76:42:d9:fe:2e:72:2d:41:
82:da:ef:40:c5:ea:7b:91:a0:ce:88:1e:83:3b:73:
d0:34:b9:0e:38:4c:fb:0d:bf:9b:60:5d:9d:d0:b7:
18:70:36:f4:dc:b3:22:b9:68:d8:ed:7e:6b:6d:6f:
fa:3b:d6:99:12:b1:0c:74:e4:05:97:79:de:d2:44:
25:c5:56:92:71:a1:cd:e9:32:9f:49:b0:b4:a4:70:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:34:A3:2F:70:0E:24:88:23:EA:3F:FF:11:8C:01:5E:00:25:AC
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/u-s0oy9wDiSII-o__xGMAV4AJaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.38.0/24
Signature Algorithm: sha256WithRSAEncryption
06:55:4f:e0:4c:c1:a2:cc:dc:4e:51:04:19:e4:a6:ea:00:a6:
fc:14:f2:19:7d:d2:1e:11:78:9b:1c:42:f8:8d:ad:bc:15:16:
ef:35:af:77:15:60:47:27:00:ce:f8:fe:8a:a4:5c:09:25:23:
08:2d:d9:ba:aa:4d:f1:56:c7:2a:aa:d6:e5:f1:49:b1:32:b9:
0b:9f:72:d6:d5:9c:b7:a4:b0:62:85:e6:d1:e3:73:83:fd:88:
6b:c3:42:a6:2f:2f:50:4a:b5:f6:c0:3b:fa:83:ec:ca:ec:58:
7d:0e:1a:53:f2:20:54:90:a5:3c:ed:dd:2d:95:9f:14:9c:ed:
da:d9:de:c7:c0:58:29:c0:25:09:0f:da:d3:2b:2a:4b:a8:2c:
88:3a:96:f2:5b:d9:ca:bf:82:e3:00:61:fe:da:3d:5e:22:5e:
0c:aa:53:9b:27:88:4c:6b:58:a5:e7:a0:fb:37:6d:a5:f5:a6:
30:4e:50:9c:c8:56:6b:11:74:29:fc:97:6f:9a:11:2c:5e:7b:
68:ca:c9:d7:9a:c8:e4:b9:4e:a4:fc:e9:59:29:3d:0e:ec:e6:
c3:39:95:1a:89:d6:4d:5a:8c:32:76:7f:5b:69:66:8f:25:fe:
1c:0e:98:60:71:9b:4a:55:1c:cb:83:a4:5a:e5:af:25:aa:69:
1f:ca:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:34:41 2024 by rpki-client on console-ams.rpki-client.org