Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/UwOthpZ3uwZRNCcRZ_TdJnVSqNA.roa
File: UwOthpZ3uwZRNCcRZ_TdJnVSqNA.roa (raw, json)
Hash identifier: xKgOIMk0pTpUl8G7morMrDz0WvgAh2G2Q3BXa7TW/RM=
Subject key identifier: 53:03:AD:86:96:77:BB:06:51:34:27:11:67:F4:DD:26:75:52:A8:D0
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018DC029817B01212CE75F8C13E33C32768F
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/UwOthpZ3uwZRNCcRZ_TdJnVSqNA.roa
Signing time: Mon 19 Feb 2024 06:59:21 +0000
ROA not before: Mon 19 Feb 2024 06:59:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215501
IP address blocks: 5.134.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:29:81:7b:01:21:2c:e7:5f:8c:13:e3:3c:32:76:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Feb 19 06:59:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5303ad869677bb065134271167f4dd267552a8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:59:a9:5d:f5:1d:ee:4a:e6:0c:6f:67:6c:
d7:7e:a3:fa:2e:ae:a8:b2:d3:62:87:64:cf:40:69:
13:08:0d:9d:3d:f8:08:5e:ca:97:28:10:a4:cc:3a:
37:3c:64:67:d4:9c:78:a2:3f:61:2a:ca:31:26:1e:
c9:16:cd:b4:61:50:15:d8:21:d2:9e:c6:29:67:2a:
b0:b8:5d:29:b8:3e:56:7f:95:81:d7:15:25:8b:10:
0a:0e:76:78:f3:45:f5:25:38:d7:08:60:2b:a2:f7:
3c:a6:5f:9b:e9:83:8c:e7:90:b3:ea:c9:b2:28:a2:
13:82:bd:66:5a:ce:44:a4:8c:ec:da:d3:36:39:e5:
b6:57:bf:f1:e1:eb:5d:3d:7e:04:6b:25:88:4d:8a:
22:21:da:5c:66:fc:47:15:61:bd:99:de:d5:ee:81:
c2:95:cd:7a:d9:da:bc:17:7b:dd:bf:86:23:8e:6a:
c5:c6:cf:34:7c:6d:8a:e3:8f:fb:b9:3e:b6:48:28:
4b:b8:d9:e4:3f:45:c6:6a:60:0d:38:63:0f:27:17:
aa:83:1c:59:f1:8e:c2:85:88:77:f2:23:03:ec:56:
d2:dc:65:4f:8f:1b:c7:08:d3:75:3f:44:9a:c1:0a:
73:6d:c3:1e:03:a0:17:2f:56:4c:bf:32:39:75:22:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:AD:86:96:77:BB:06:51:34:27:11:67:F4:DD:26:75:52:A8:D0
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/UwOthpZ3uwZRNCcRZ_TdJnVSqNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/24
Signature Algorithm: sha256WithRSAEncryption
31:61:5b:3c:4d:b5:fe:7e:b4:70:29:3c:ad:65:00:65:bb:63:
2e:5e:07:8f:d7:e1:e4:3f:9d:b1:2f:bb:64:1e:40:4a:a6:43:
45:a5:87:a5:5c:36:b3:49:b5:10:a6:73:4d:ba:1a:62:9a:cd:
76:c9:11:5b:18:81:65:6e:69:4f:bb:d4:b1:ad:33:5a:cc:9f:
2b:45:ee:0f:cb:00:63:2e:cf:d0:83:35:83:d0:ab:32:f2:53:
68:76:32:23:9b:38:bc:bf:88:3b:41:67:16:f9:64:cf:f3:01:
01:b0:f1:2d:9e:47:01:3b:41:08:b6:c7:23:11:c3:ad:8e:c9:
33:4e:e6:8a:02:aa:c8:d7:db:ee:eb:01:c2:46:b5:92:27:74:
dc:19:52:b5:35:64:8d:67:34:00:33:e6:c2:e5:c4:bc:18:6b:
52:66:fd:a3:63:39:72:cf:a2:ef:c2:07:7b:38:03:77:4c:66:
a7:4c:ec:3c:7a:10:c7:c5:a8:b3:05:30:0f:5a:b2:28:e4:3f:
3d:70:79:49:ed:bc:82:d5:6f:6e:e1:24:03:22:8f:05:52:1d:
99:40:52:7a:50:4a:78:04:62:35:b8:09:a3:dc:07:2c:bf:f1:
60:54:3b:9f:ae:d0:30:4f:46:3c:f7:98:fa:fd:2b:b4:a2:8f:
b9:d9:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:36:35 2024 by rpki-client on console-ams.rpki-client.org