Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/UHU-_JOBaVxsKCpdeSO4q6ZYFFQ.roa
File: UHU-_JOBaVxsKCpdeSO4q6ZYFFQ.roa (raw, json)
Hash identifier: oH9KYJB07Hb0X5jqZpbAhA+QDjIh4rI6vQIwYC36tA4=
Subject key identifier: 50:75:3E:FC:93:81:69:5C:6C:28:2A:5D:79:23:B8:AB:A6:58:14:54
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 018CC4247D1D9A78F764D75C6D802138EFC9
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/UHU-_JOBaVxsKCpdeSO4q6ZYFFQ.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 194.53.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7d:1d:9a:78:f7:64:d7:5c:6d:80:21:38:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50753efc9381695c6c282a5d7923b8aba6581454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:f7:c9:be:23:5b:eb:aa:fa:77:f2:e6:17:
3b:7b:d2:19:32:24:da:25:c0:76:2f:2f:40:0b:53:
94:b2:32:16:29:f0:c2:9f:2f:90:45:90:c3:a7:d4:
27:f1:ce:fb:30:87:2f:cf:51:6b:d7:e9:46:3f:ae:
36:6c:54:ac:c8:45:69:64:7f:d5:03:73:7e:54:7b:
87:c6:36:49:62:56:e9:0d:7e:93:11:e7:c1:49:a8:
73:a9:c5:bb:93:5f:bc:81:a8:42:81:6f:62:16:63:
68:4e:05:6b:e0:e3:0e:fe:83:99:5d:1b:02:3e:f5:
03:1c:71:db:92:97:4e:b9:75:2e:7f:cb:81:fc:f2:
47:60:02:30:34:f8:e0:0a:f4:27:e1:18:56:bc:08:
e7:de:7a:64:46:72:97:ea:13:fa:11:62:57:93:84:
a6:da:36:67:9b:c2:92:69:14:b8:01:43:23:e4:c5:
de:82:b8:00:e7:cf:3e:51:97:c1:72:ab:4a:7a:6b:
f3:62:f6:e1:6b:4f:86:07:41:66:a5:ff:27:74:c2:
0a:45:ab:00:36:05:fd:99:82:30:9b:70:cf:a3:95:
49:ae:ac:31:e3:61:b0:d6:7f:a5:b7:ec:ce:eb:33:
82:15:35:0e:4a:8b:e7:28:9e:f1:50:b1:7c:d7:6b:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:3E:FC:93:81:69:5C:6C:28:2A:5D:79:23:B8:AB:A6:58:14:54
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/UHU-_JOBaVxsKCpdeSO4q6ZYFFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.175.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cd:46:88:1c:81:d4:95:24:d4:29:69:a3:d3:23:22:b0:1e:
64:f2:c3:a8:3c:d0:e0:24:fa:ee:0a:6d:7c:cc:51:a9:b3:dd:
e4:67:42:70:1d:e4:a7:ea:f6:4a:23:e6:b2:56:37:cd:39:7e:
20:16:72:62:ae:92:e3:d8:0e:86:9d:59:53:90:8d:33:a3:03:
8e:ac:31:24:3e:13:ef:c2:6d:b6:61:51:0d:74:be:65:8c:b9:
2a:80:a5:9b:3b:43:ae:25:5f:de:b8:98:b1:6c:7a:3e:0a:e5:
80:85:d6:65:e7:d9:4b:de:aa:98:ff:7f:3f:aa:72:57:84:73:
ab:de:1c:c5:da:c7:e9:b8:8d:11:f0:a9:5c:82:74:27:0a:b8:
74:e6:c4:23:d6:40:53:19:0f:a7:d7:bf:53:3f:93:8a:fa:d5:
0f:1b:b3:41:a8:9a:7c:ac:94:8c:43:d7:4b:d9:a4:4d:3c:46:
f9:fd:16:5e:03:61:53:34:0a:65:59:e2:95:52:41:0a:59:04:
d0:10:02:89:41:6c:dd:5d:32:a7:41:6a:dd:42:9f:ed:e2:d4:
68:30:c5:d9:ce:18:0a:93:ac:9d:49:66:12:ef:5a:92:78:c3:
f8:02:2b:16:9b:33:e6:e9:3e:f3:d6:43:d9:8c:a6:99:e6:3a:
3f:94:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:53:06 2024 by rpki-client on console-fra.rpki-client.org