Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/uvsb5pXWbc8ymgGKHd_RjKmjzpk.roa
File: uvsb5pXWbc8ymgGKHd_RjKmjzpk.roa (raw, json)
Hash identifier: 5AO7zxRK4HVOMSlobq/xnW007CwLvtTbHH6zUz2jnZk=
Subject key identifier: BA:FB:1B:E6:95:D6:6D:CF:32:9A:01:8A:1D:DF:D1:8C:A9:A3:CE:99
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 018CC86F0EA5A9FC874C35C47509447E7F77
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/uvsb5pXWbc8ymgGKHd_RjKmjzpk.roa
Signing time: Tue 02 Jan 2024 04:29:30 +0000
ROA not before: Tue 02 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53856
IP address blocks: 194.145.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0e:a5:a9:fc:87:4c:35:c4:75:09:44:7e:7f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bafb1be695d66dcf329a018a1ddfd18ca9a3ce99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:6a:2c:cc:d0:fc:fb:86:20:4b:01:a6:37:
dd:bf:c9:ab:4a:17:31:53:e6:29:e8:8c:9e:c1:a9:
47:8c:0d:55:0b:e8:0a:0d:f0:dd:a0:b9:f2:45:23:
b9:34:66:20:6d:fe:e4:b7:f2:9f:73:08:44:01:42:
c3:27:cc:98:82:43:4d:5f:96:8a:6e:48:c7:f1:dc:
e5:65:c5:32:1f:c0:d5:95:ba:62:50:18:91:6c:90:
c7:2f:48:3d:9b:ed:ae:b6:56:ab:2c:5d:9f:67:5f:
97:80:fa:7c:d7:d3:06:f8:83:ee:7c:94:e6:e0:ca:
16:78:af:47:5c:d3:64:ff:34:38:fb:e5:47:ac:94:
57:6e:ca:05:79:1b:9a:5a:7b:20:42:4c:45:ff:17:
f7:ff:ce:8d:6a:a3:01:2c:e9:cf:82:be:27:64:19:
e5:c2:2d:c4:6a:fc:fe:dd:f9:cb:7d:d8:25:0d:77:
e4:9a:ba:a2:8d:d9:e4:1b:f6:23:68:ed:46:3e:a0:
0d:47:72:26:6e:3f:29:c0:bc:29:78:14:56:0f:ba:
31:39:e8:cf:9d:d7:aa:c3:d6:e4:28:90:02:6b:e5:
de:82:0a:4a:9d:a7:5c:48:46:e8:71:9a:fe:9b:57:
18:40:56:2b:f7:ef:12:44:13:8a:6b:ed:87:a5:48:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:1B:E6:95:D6:6D:CF:32:9A:01:8A:1D:DF:D1:8C:A9:A3:CE:99
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/uvsb5pXWbc8ymgGKHd_RjKmjzpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.117.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9e:6f:89:7d:46:88:7d:a6:81:b1:c5:af:3b:eb:4b:0d:3f:
8a:c0:bd:5c:26:74:a7:22:76:05:d9:b6:91:4c:6c:42:1c:13:
87:e2:df:72:c0:31:ab:55:7f:20:c2:71:35:39:d8:2b:06:40:
59:27:14:73:0c:07:fb:fe:c6:42:9e:e4:12:e3:42:3d:7d:37:
e0:0f:9e:9b:e4:96:de:52:f9:74:ee:d9:97:97:38:c8:48:04:
3e:ab:54:b0:fa:f6:4d:55:32:26:2e:06:a3:89:ee:0e:90:6a:
87:3e:0c:7b:ff:3e:c3:b3:75:ce:05:01:33:d8:77:32:53:4c:
09:ba:84:cf:19:d1:71:e1:a4:8a:11:bf:90:82:85:75:ef:76:
39:bf:44:c3:09:0d:6e:6e:f4:03:bf:b6:2a:02:6f:16:09:78:
19:4d:42:03:3b:04:96:db:cf:df:4b:f5:e7:01:a5:22:68:5e:
98:1c:d6:18:89:52:20:2c:b4:13:4a:2b:d4:d4:f2:90:36:25:
bb:05:03:49:bd:ed:3a:df:af:49:76:66:d9:23:2b:4f:d3:fd:
c1:ee:5b:19:e7:60:cd:c5:a8:94:49:7c:d9:be:3e:34:f3:b1:
cc:f0:7b:c8:dc:0c:79:d6:b2:1e:fa:d8:7b:c1:4b:db:d6:6f:
89:77:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:36:42 2024 by rpki-client on console-ams.rpki-client.org