Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/URj_UTgWE_G6G9uLU6hkWNH-RaI.roa
File: URj_UTgWE_G6G9uLU6hkWNH-RaI.roa (raw, json)
Hash identifier: P9sg5DKSVDlVlo6+y1ZL2atJbzawfiG4f1nV6Rex5Go=
Subject key identifier: 51:18:FF:51:38:16:13:F1:BA:1B:DB:8B:53:A8:64:58:D1:FE:45:A2
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 018CC5005E5F73E49E811BAE8B24853AD69C
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/URj_UTgWE_G6G9uLU6hkWNH-RaI.roa
Signing time: Mon 01 Jan 2024 12:29:44 +0000
ROA not before: Mon 01 Jan 2024 12:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 83.137.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:5e:5f:73:e4:9e:81:1b:ae:8b:24:85:3a:d6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 12:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5118ff51381613f1ba1bdb8b53a86458d1fe45a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:9b:32:2a:57:91:ea:fe:fb:64:67:57:4d:
d8:c3:3a:54:51:1f:01:17:2e:5c:62:82:7b:f6:05:
f2:10:97:57:ce:52:c6:18:ac:aa:9c:c2:f6:62:ef:
ce:bb:92:29:60:69:4c:47:e2:db:f8:ea:c5:b6:0a:
29:bc:05:93:3b:97:37:b7:5a:d4:66:47:aa:05:2f:
38:37:80:e5:82:1e:e7:a7:06:a6:00:63:af:23:e3:
3c:34:22:c1:d8:1c:be:4a:c7:64:98:b0:4c:0a:f6:
62:ea:08:52:08:38:59:43:80:19:b3:36:40:49:25:
90:37:2d:15:88:49:4e:d9:d5:5f:8d:b9:59:6d:ae:
37:36:d5:ec:c5:11:c0:bf:c3:b6:4b:b4:f8:3c:6a:
57:5b:03:72:e4:cf:7e:5a:6c:58:c8:17:ae:05:46:
78:0b:ae:42:72:fb:32:1e:09:4e:98:40:b3:0d:60:
e1:93:36:d3:e6:fb:3a:9a:43:4f:37:29:81:fb:8c:
a2:71:64:2b:53:3f:27:e9:e7:2a:35:ef:17:c2:3b:
64:39:cf:51:e3:14:9f:a5:0c:79:d9:b3:50:1f:d6:
9c:34:74:5b:8b:f7:a0:0f:47:1e:d3:2a:3e:23:11:
70:c0:0e:e3:54:77:47:6e:1d:97:58:39:cc:20:2b:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:FF:51:38:16:13:F1:BA:1B:DB:8B:53:A8:64:58:D1:FE:45:A2
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/URj_UTgWE_G6G9uLU6hkWNH-RaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.245.0/24
Signature Algorithm: sha256WithRSAEncryption
12:58:0a:77:3d:78:d1:1f:ba:b5:32:af:09:c7:f8:d8:09:e2:
ac:58:1c:04:7c:36:e2:22:09:eb:d5:5c:f0:dd:6b:30:b9:3d:
a9:3a:a1:c2:9e:cc:52:d6:fa:f6:d7:fd:78:5c:a2:fe:d7:33:
d4:9f:4d:c7:22:f3:62:52:b6:93:52:96:c4:8d:57:a0:b0:8b:
f5:f2:b9:2a:c9:f0:b1:66:ad:54:85:03:6a:ab:12:55:77:98:
0a:3c:76:fc:74:35:5f:22:dc:14:06:6a:f7:19:d6:ef:ac:62:
c4:0f:82:34:74:8f:56:dd:b1:74:74:d9:65:5b:b7:ac:64:0a:
69:89:24:38:a9:a5:d5:90:a8:94:23:5e:84:66:76:d8:19:27:
77:f9:b6:fe:ef:cf:65:b7:63:71:f8:30:52:c0:9b:a9:de:51:
df:5b:43:d5:82:cb:85:e0:7d:b3:6a:46:9d:1f:f9:d8:33:6a:
74:88:ba:83:fb:3f:28:1f:fe:70:53:7a:ee:31:b6:a3:a3:46:
3c:d9:f7:38:91:c5:2f:ba:20:ed:7c:05:11:94:9a:e3:37:d6:
ae:13:97:e3:06:6a:ce:9b:01:50:20:c6:3a:2f:29:b7:8a:41:
68:92:83:33:92:d7:51:57:35:eb:2a:ff:d2:87:6b:db:cc:38:
8a:b5:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:48:33 2024 by rpki-client on console-fra.rpki-client.org