Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/u4xBDvL_2FpacABdirqO9A0f3EY.roa
File: u4xBDvL_2FpacABdirqO9A0f3EY.roa (raw, json)
Hash identifier: hSHrEIN6y3W02cp3UI5I2S4bRviNKTI+M/AtsyD7nmc=
Subject key identifier: BB:8C:41:0E:F2:FF:D8:5A:5A:70:00:5D:8A:BA:8E:F4:0D:1F:DC:46
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 018CC42480C083F2DADF8F149773DE778D08
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/u4xBDvL_2FpacABdirqO9A0f3EY.roa
Signing time: Mon 01 Jan 2024 08:29:35 +0000
ROA not before: Mon 01 Jan 2024 08:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39918
IP address blocks: 85.112.73.0/24 maxlen: 24
212.98.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:80:c0:83:f2:da:df:8f:14:97:73:de:77:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 1 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb8c410ef2ffd85a5a70005d8aba8ef40d1fdc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:34:71:e9:6a:5c:40:1d:d1:6f:a9:a4:f6:2a:
17:57:1c:35:e9:8d:f8:e5:dd:a0:bf:3e:98:b9:ba:
49:2c:2b:92:3b:0e:02:32:69:94:18:8d:8c:88:37:
ef:92:59:ef:f0:81:f5:38:39:80:37:67:f4:79:6a:
69:a7:3c:ce:b3:47:ce:dc:c0:69:fd:7e:91:b1:1a:
7c:42:9f:93:ba:77:83:40:6e:6d:ef:46:e2:14:dc:
6d:6a:09:0f:93:a7:85:77:6b:6f:cd:be:46:76:d1:
17:00:0d:61:34:46:b0:ef:67:e6:8b:4f:5b:82:49:
56:e1:e5:31:06:95:bd:9c:ac:4e:4a:d4:0a:c2:6f:
d3:fe:32:a6:bd:fc:66:6d:8c:be:87:9e:47:3d:50:
a2:5a:ad:b1:24:0f:92:12:e4:32:67:bd:3e:e5:1b:
1e:ae:8b:ee:a9:5f:cd:62:c6:c2:7e:cb:86:4b:ef:
d9:03:a5:43:01:95:84:c7:f3:4e:ca:97:cf:24:34:
aa:37:d2:dd:26:ed:21:f3:dc:c2:34:a2:62:22:43:
19:3f:32:57:b7:2b:27:ab:16:fe:9f:a2:1d:dc:e5:
2f:c6:f3:b0:c2:b4:b0:19:db:18:46:dd:a1:b6:80:
36:b4:53:51:66:55:3a:c7:e7:eb:06:b3:24:50:77:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8C:41:0E:F2:FF:D8:5A:5A:70:00:5D:8A:BA:8E:F4:0D:1F:DC:46
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/u4xBDvL_2FpacABdirqO9A0f3EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.73.0/24
212.98.128.0/24
Signature Algorithm: sha256WithRSAEncryption
05:09:c5:2b:35:3c:06:16:5b:54:71:51:7f:fc:cf:e6:e2:7c:
3b:7c:84:cd:d0:ef:89:dd:0f:4d:39:08:c7:8a:94:e8:6f:a3:
95:e9:0b:79:26:40:26:21:fd:da:73:2a:07:e6:e2:dc:27:39:
a3:ee:c2:cb:2c:ce:17:a4:a4:78:6e:49:a1:02:2f:4b:3a:b3:
61:e4:63:7d:19:ef:dd:91:2e:79:20:c7:93:59:e7:f6:d6:48:
1e:de:89:8b:f6:cf:60:1f:17:32:f2:80:de:00:77:13:16:51:
a9:e7:ff:f2:87:8c:c8:e7:7a:65:20:75:e6:84:30:de:61:91:
71:2f:97:b0:cd:cd:2c:02:88:e1:ea:ff:17:3f:ed:9e:ef:e8:
1c:f3:4f:26:84:47:ca:c2:5d:20:29:44:3e:ce:74:8d:bc:c3:
b9:d7:c0:6d:d7:8d:0a:6f:88:d7:b2:a7:8c:22:9a:e3:90:d1:
56:e9:37:1f:37:fc:d6:9f:7e:8f:e1:df:c2:3e:34:9e:7b:3f:
fb:06:67:5c:02:a2:ae:62:a1:51:3b:41:ae:58:18:61:dd:01:
d9:3c:b6:52:db:51:f1:7f:10:75:c2:c3:dc:f3:e8:7b:82:16:
6e:5a:77:99:97:81:9b:1a:5c:82:24:db:4b:b2:bb:f5:bc:00:
61:a9:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:11:32 2024 by rpki-client on console-fra.rpki-client.org