Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/UoM7GZS22qIm_xwu48_5lIS3d5E.roa
File: UoM7GZS22qIm_xwu48_5lIS3d5E.roa (raw, json)
Hash identifier: B2YkWctj7HnoEfUInkkDB7kWzpC8mVEet27ugRM2Yjg=
Subject key identifier: 52:83:3B:19:94:B6:DA:A2:26:FF:1C:2E:E3:CF:F9:94:84:B7:77:91
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018CC794DE8879B8B1878956F845DA9AAE32
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/UoM7GZS22qIm_xwu48_5lIS3d5E.roa
Signing time: Tue 02 Jan 2024 00:31:11 +0000
ROA not before: Tue 02 Jan 2024 00:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 81.19.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:de:88:79:b8:b1:87:89:56:f8:45:da:9a:ae:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 00:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52833b1994b6daa226ff1c2ee3cff99484b77791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:1e:e7:6c:e3:3e:15:4a:93:1d:9c:4c:f4:
ec:23:b1:3d:e2:68:46:7b:b5:fd:56:5d:6f:53:83:
22:82:8e:52:ef:09:7d:89:24:51:d6:24:c9:1c:e0:
19:1e:83:f2:a6:13:bd:e3:8a:1d:83:f1:dd:b9:bd:
e9:2a:5a:0d:76:85:35:09:25:97:07:b5:29:31:52:
a6:59:3d:3a:01:e5:6d:88:7c:89:62:82:c3:97:ec:
1f:59:ee:bc:67:c2:27:e7:9d:46:59:e2:c8:25:76:
b9:cf:64:91:10:c4:c0:4c:4c:6a:06:28:e1:6d:df:
db:9f:bf:de:b7:eb:d4:3e:24:25:68:c9:8c:84:77:
11:7d:2d:be:90:07:7d:29:6d:d2:16:da:d4:93:b5:
4e:58:c8:27:37:e1:16:ef:b6:e5:dc:3b:69:8f:e1:
aa:a6:b6:b3:0c:a9:03:b5:f8:5c:5a:f5:5e:6c:3a:
a5:8d:d7:88:25:b8:82:73:1d:61:b4:fd:73:a4:6a:
20:61:bf:ce:a3:f4:7b:c2:ec:69:a5:74:26:45:18:
30:f2:fb:3e:62:85:d1:1a:4d:c3:99:b2:2c:1b:8f:
07:f0:fd:15:16:50:96:4f:93:b1:91:44:61:46:ed:
04:34:49:c1:bc:c7:2d:d1:cd:2b:51:9b:37:37:47:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:3B:19:94:B6:DA:A2:26:FF:1C:2E:E3:CF:F9:94:84:B7:77:91
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/UoM7GZS22qIm_xwu48_5lIS3d5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.137.0/24
Signature Algorithm: sha256WithRSAEncryption
28:56:22:02:ba:15:af:f5:d0:42:f5:e8:3c:72:f8:02:94:ba:
9c:f0:55:91:a7:3c:0a:07:c4:eb:e7:37:48:79:d7:4d:8c:cb:
85:80:16:35:1c:cc:f6:5c:96:17:83:df:43:70:87:16:34:e0:
e5:18:f8:7b:16:2f:42:a2:9f:51:76:d6:41:aa:ac:2e:fd:a2:
60:fd:d5:e4:45:20:8b:1c:e6:f2:89:ba:83:32:4a:d2:c6:41:
3d:98:78:e7:0c:48:dc:a5:3e:85:e8:94:a6:c0:7c:4c:be:80:
ee:d8:5e:3d:2e:4f:be:17:26:1f:2f:86:d3:f8:9b:05:5a:60:
9e:e6:ad:6d:20:0a:46:78:a2:7d:2a:11:4e:c7:1d:57:7c:53:
59:fe:3f:7b:bc:1b:68:d2:80:f7:70:89:e8:dc:5a:d2:d1:12:
4d:a1:d9:f1:da:0f:aa:97:72:0e:ac:ab:0a:fc:32:e9:6f:77:
44:35:25:d1:f6:5b:85:cc:5a:60:fe:68:8e:7f:81:62:e7:a0:
3f:92:b7:92:75:43:07:79:28:72:b4:4e:69:e5:ad:2a:b5:ef:
b1:bc:eb:ae:8d:8f:31:7f:3a:26:9b:63:ec:51:85:f8:ee:46:
e0:77:19:ac:6f:84:83:ad:04:0c:e7:92:25:7c:e6:9b:6a:68:
f6:65:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:26:15 2024 by rpki-client on console-fra.rpki-client.org