Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/uxpAVGQdgWYB6NrHaOqH_bnAFN8.roa
File: uxpAVGQdgWYB6NrHaOqH_bnAFN8.roa (raw, json)
Hash identifier: tT69xs2aVVSdPUCI6iVQmIBqer88cJLZdLLPfHWkBdQ=
Subject key identifier: BB:1A:40:54:64:1D:81:66:01:E8:DA:C7:68:EA:87:FD:B9:C0:14:DF
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 018CC9BA66CA65313328BF01CC49454C845A
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/uxpAVGQdgWYB6NrHaOqH_bnAFN8.roa
Signing time: Tue 02 Jan 2024 10:31:25 +0000
ROA not before: Tue 02 Jan 2024 10:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 195.182.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:66:ca:65:31:33:28:bf:01:cc:49:45:4c:84:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Jan 2 10:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb1a4054641d816601e8dac768ea87fdb9c014df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:2a:cb:38:4b:57:54:c1:f1:2d:e1:81:86:
85:21:8f:d5:eb:2d:c0:0b:f2:12:4a:15:11:bf:4b:
b0:ee:14:a9:c1:41:0e:db:51:1a:2e:84:c8:09:b4:
89:71:13:f2:8e:d0:e9:c4:9a:cf:a5:40:3f:8b:b2:
6d:83:7a:89:d7:5c:a0:dc:32:fc:ac:a8:25:8b:f1:
25:8f:98:5d:6d:92:79:9b:14:08:c6:f5:72:51:37:
f4:f9:7f:38:0a:36:62:5d:cd:eb:a8:3a:7b:39:0b:
15:a0:4b:96:a6:ff:9d:c8:7c:4f:04:0b:26:f8:d7:
df:f0:e8:26:8b:b4:4a:ab:44:70:41:ee:c1:a3:44:
e9:33:a9:9e:87:e1:57:bc:96:6f:ff:62:8b:22:00:
7d:62:7c:1b:c8:8e:d9:29:95:59:4b:98:d2:c4:b7:
13:8c:33:d0:08:51:7c:23:20:b2:df:ce:fb:d1:db:
67:38:20:c5:20:31:5c:1a:48:3a:4b:b1:0b:8e:40:
81:68:07:85:8c:2d:ee:63:3a:96:fa:c9:ef:a0:af:
0a:15:ad:b5:c2:75:86:cf:b5:7d:6b:d9:c9:6c:65:
08:d1:c1:e3:3a:7c:21:9d:ad:61:41:0e:47:1e:4b:
99:28:ee:98:65:b6:7c:4a:66:cc:41:d2:c7:62:6b:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:40:54:64:1D:81:66:01:E8:DA:C7:68:EA:87:FD:B9:C0:14:DF
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/uxpAVGQdgWYB6NrHaOqH_bnAFN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.62.0/24
Signature Algorithm: sha256WithRSAEncryption
62:47:35:f9:a9:5b:ce:c6:5e:39:8a:aa:1e:b5:b1:29:98:93:
b0:30:45:6c:52:71:8e:be:1b:e0:85:dd:e1:57:2b:44:a4:96:
8b:3f:4b:e1:8d:8b:1e:bf:16:e6:0d:37:aa:c2:5c:0b:20:8b:
77:d5:d8:54:f0:3e:ee:f2:c1:ec:7c:a0:da:dd:ec:4b:d9:9f:
be:9b:02:0b:51:dc:a9:06:3c:9a:19:68:57:94:90:fb:86:ae:
31:3e:25:78:4d:5c:30:71:7e:67:ae:e4:ee:f5:07:9e:a1:70:
0d:3d:5c:99:46:d2:ba:66:c7:0e:25:53:0b:ef:e7:6f:e8:b3:
8e:c7:84:5a:92:b8:4a:73:3a:3b:e4:19:25:03:e0:21:a9:2c:
a1:8a:28:86:00:71:fd:4b:38:a4:a6:fa:ed:2e:f3:d9:fb:52:
3f:e6:70:47:a2:e9:03:eb:db:78:4f:37:ff:69:36:9f:1c:03:
0a:83:9a:d5:0d:96:f6:22:34:67:d6:af:c8:3e:64:4d:d6:6f:
c9:16:10:57:37:e9:bd:6a:d9:c2:50:04:70:33:52:e6:ba:a2:
58:87:6a:a4:8d:59:84:49:10:5c:47:34:13:97:00:05:5e:64:
6e:00:4e:7c:6f:c2:f6:c3:45:91:cf:5a:6e:66:3f:46:e9:a5:
09:55:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:37 2024 by rpki-client on console-ams.rpki-client.org