Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/UaSCQe7QGn1TW3LzT37P46q--KM.roa
File: UaSCQe7QGn1TW3LzT37P46q--KM.roa (raw, json)
Hash identifier: 45xeVH380V+vIDmexGK7CmUAedwPcT4vkkDYOiSL1sw=
Subject key identifier: 51:A4:82:41:EE:D0:1A:7D:53:5B:72:F3:4F:7E:CF:E3:AA:BE:F8:A3
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 018CC94DA20059DC8B5BACEECD4881DBF7B2
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/UaSCQe7QGn1TW3LzT37P46q--KM.roa
Signing time: Tue 02 Jan 2024 08:32:37 +0000
ROA not before: Tue 02 Jan 2024 08:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57028
IP address blocks: 194.6.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a2:00:59:dc:8b:5b:ac:ee:cd:48:81:db:f7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Jan 2 08:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51a48241eed01a7d535b72f34f7ecfe3aabef8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:39:c4:39:92:e1:4a:43:60:c2:79:26:31:
90:97:60:b4:fb:04:45:02:fa:e5:66:1e:cf:b4:e3:
4f:d9:c1:78:3c:77:7e:06:2d:22:c1:84:69:0b:50:
5c:51:bb:c7:01:a1:29:39:4c:f2:6b:c8:55:e3:7b:
9f:82:d8:2d:c2:06:89:bc:82:a8:b4:c5:04:11:f6:
87:a9:bd:34:54:43:37:c0:7b:fe:aa:bf:2e:88:f7:
4b:9c:2b:67:d2:65:07:4e:ad:50:77:22:78:3c:d2:
05:12:b5:3e:1d:61:7a:74:8d:dd:5f:54:6e:82:8a:
54:2f:28:f9:59:07:9b:e8:0f:43:ac:37:4a:f1:dc:
cd:73:9d:16:38:ac:c9:73:1d:93:80:11:0d:a1:20:
64:88:60:1d:f5:9a:c4:06:7b:3d:ea:8d:e2:da:7a:
a3:16:99:81:c0:b3:1e:99:44:d2:dc:27:ee:1e:02:
db:b2:90:c1:f7:3e:1c:9f:5b:50:7f:c0:4c:e4:c7:
bc:57:e8:bf:fc:85:06:7f:fd:c4:96:00:67:ff:48:
04:b2:ab:c6:0f:18:5b:6e:6a:05:f4:c7:15:3f:13:
65:35:ab:60:b5:78:73:82:68:f4:74:63:87:c5:7f:
14:5e:13:bc:2a:d1:14:2e:05:42:dc:01:d2:3d:50:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:82:41:EE:D0:1A:7D:53:5B:72:F3:4F:7E:CF:E3:AA:BE:F8:A3
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/UaSCQe7QGn1TW3LzT37P46q--KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:67:06:62:72:ac:89:ac:1b:03:6d:b0:6a:67:16:56:ed:2d:
37:0c:22:b4:fa:83:e4:9b:9d:92:88:f0:7d:c3:29:61:82:6d:
38:9e:b7:04:47:07:56:2a:dd:09:6e:a2:ad:ab:45:ca:37:a8:
03:78:3a:bc:c8:b5:b3:28:4f:12:2b:66:6e:cd:21:80:0b:bd:
48:09:12:3c:75:ee:02:38:16:57:87:3f:43:9c:72:59:35:8f:
c3:45:1a:ff:f9:42:d6:eb:89:c2:dd:d1:39:d9:e4:6d:b8:5d:
6a:ed:47:38:51:42:dc:e1:fa:76:d7:38:ea:f8:98:6a:e1:f0:
f3:a4:b3:69:ad:a5:ee:17:9b:17:6d:e7:11:2e:cf:0e:8e:c4:
bd:d8:c9:2e:1c:fd:48:04:3d:70:39:2b:f9:47:83:46:c0:27:
d4:b2:d0:3d:1a:19:46:36:a0:ab:3c:e8:8c:10:7d:c2:a2:1e:
23:5c:8a:d8:8f:5a:75:5c:6c:6a:c7:de:62:7a:3f:e6:43:53:
63:f6:64:31:00:27:86:70:c7:4f:02:68:db:04:33:e2:1c:29:
fb:ec:7c:84:8e:8c:ef:7d:32:44:c2:bb:37:f2:ff:a5:54:c6:
4a:d6:1e:33:52:17:ed:b4:d6:42:58:f4:a3:0b:93:a0:d6:a2:
c8:73:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:15:11 2024 by rpki-client on console-ams.rpki-client.org