Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/URUFS_I2L7NhBx0pYrMenlfKuAY.roa
File: URUFS_I2L7NhBx0pYrMenlfKuAY.roa (raw, json)
Hash identifier: XPy0WkKwnhRp/2dXggrmHfSmdC2EV+LQUAJ3kncaags=
Subject key identifier: 51:15:05:4B:F2:36:2F:B3:61:07:1D:29:62:B3:1E:9E:57:CA:B8:06
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 01902F93BCFDB4E6656AFCF1FCD18989BB9D
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/URUFS_I2L7NhBx0pYrMenlfKuAY.roa
Signing time: Wed 19 Jun 2024 08:18:49 +0000
ROA not before: Wed 19 Jun 2024 08:18:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a04:5b81:2010::/44 maxlen: 48
2a04:5b81:2060::/44 maxlen: 48
2a04:5b81:2100::/40 maxlen: 48
2a04:5b81:2130::/44 maxlen: 48
2a04:5b81:2200::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:93:bc:fd:b4:e6:65:6a:fc:f1:fc:d1:89:89:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jun 19 08:18:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5115054bf2362fb361071d2962b31e9e57cab806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:a3:aa:31:20:ac:dd:94:de:43:88:f9:e4:
6e:52:a4:34:96:13:7d:c8:50:f9:6a:af:71:fc:ad:
6e:2a:11:63:4c:7f:57:4b:f9:24:bf:6a:18:7e:90:
f1:60:55:a3:cd:21:21:bb:19:68:fb:2a:b8:29:ee:
03:5f:ff:a3:df:c6:ca:9a:e8:ba:86:2c:eb:28:e9:
97:63:11:f5:7e:5d:03:3c:32:36:ae:07:2a:9f:69:
2f:93:48:77:00:74:45:d8:7e:03:0c:cf:fc:90:fa:
96:86:8a:e8:86:08:aa:f0:d8:81:1b:a9:e6:f5:10:
73:7e:84:71:d2:de:01:53:3f:3e:ec:56:2e:72:6c:
e8:0b:3b:cf:80:26:4b:d5:1a:a0:08:a5:41:cb:82:
7c:b5:3a:19:b0:0d:19:8b:ec:04:dd:0c:cf:81:4f:
cc:2a:ac:96:ec:c9:0e:6a:5c:5c:01:f4:bd:10:90:
57:9f:9e:03:f5:b3:37:81:53:b9:c0:74:e1:5b:70:
6d:70:6e:90:1f:90:8d:02:2c:00:a5:1d:50:79:e8:
ac:ce:4e:e3:d3:0b:f8:26:4c:70:3b:c9:6b:82:fb:
11:5b:f5:a1:c9:bc:e1:f9:f2:63:44:93:03:65:80:
d2:a0:0e:a4:46:29:e4:87:6c:b5:cc:7a:4d:20:0f:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:15:05:4B:F2:36:2F:B3:61:07:1D:29:62:B3:1E:9E:57:CA:B8:06
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/URUFS_I2L7NhBx0pYrMenlfKuAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b81:2100::-2a04:5b81:23ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:79:a3:74:9e:93:ee:60:95:da:46:44:b0:d1:7e:82:ba:bf:
e6:20:10:c7:cf:a9:5e:8d:2f:d1:bf:60:d0:40:5d:d4:2a:2e:
94:5e:7d:68:b3:4c:bd:93:ba:8d:26:5b:0f:31:d3:89:51:57:
bd:cd:47:bf:f5:bc:0e:e5:05:46:db:9b:a0:6f:ac:db:d6:89:
bf:93:8a:ea:f3:dd:8b:13:13:56:d6:0c:66:81:56:ff:1f:0f:
06:33:bc:95:dd:4e:f7:5a:fe:6f:6c:54:65:13:fa:fb:80:a7:
be:40:24:e8:3f:4d:31:a0:68:6f:6f:94:f4:2e:c0:ca:e4:27:
a3:78:b7:58:d0:0c:0f:1a:15:41:1c:bf:25:a9:a1:bc:23:31:
d7:a7:b9:4e:c1:9a:07:e5:c1:b8:23:9d:c4:56:fe:4a:c8:e2:
7e:50:7b:ff:4f:eb:9d:0d:6d:d0:84:72:67:fb:6b:ac:13:5b:
f2:2d:aa:5a:32:e5:9b:20:a2:71:af:10:34:49:1a:e2:99:f0:
c6:de:e2:df:68:11:89:b6:ac:fb:c1:97:ac:47:fa:f5:7f:0c:
fd:a0:e7:44:ca:1c:6f:ed:04:06:91:fe:e3:89:7c:af:d1:e3:
87:d0:d9:44:ce:97:ab:4b:9a:35:ea:1d:3b:f8:9c:c9:1c:c3:
77:38:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:53:06 2024 by rpki-client on console-fra.rpki-client.org