Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/uhlPpWOVxi9DjARfgEzE-Q2rntM.roa
File: uhlPpWOVxi9DjARfgEzE-Q2rntM.roa (raw, json)
Hash identifier: 64scGVKLtLebP9PFGyp2tTWpynWnr9FfT++lBkBPNI8=
Subject key identifier: BA:19:4F:A5:63:95:C6:2F:43:8C:04:5F:80:4C:C4:F9:0D:AB:9E:D3
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 018CC86F136BB13CE0C02E2DE031A92082CD
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/uhlPpWOVxi9DjARfgEzE-Q2rntM.roa
Signing time: Tue 02 Jan 2024 04:29:31 +0000
ROA not before: Tue 02 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45014
IP address blocks: 185.100.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:13:6b:b1:3c:e0:c0:2e:2d:e0:31:a9:20:82:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jan 2 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba194fa56395c62f438c045f804cc4f90dab9ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:3a:64:12:16:bc:93:83:fa:88:77:04:19:
b0:96:99:7f:42:bf:93:1c:44:83:96:cd:0c:a5:2c:
05:17:9e:c0:a2:7b:1e:45:64:f3:4b:74:27:0c:a8:
88:70:a5:49:1d:ea:d8:c8:c5:37:09:74:a7:b1:31:
12:13:64:68:da:61:56:29:cd:ee:6e:f7:83:92:52:
20:1e:78:d5:a4:70:a8:0b:f7:d4:11:f0:72:3e:d5:
f7:4f:f3:94:1d:3f:bf:d1:88:0c:64:8b:d8:ca:db:
86:0b:2b:8b:ba:e4:f8:95:fb:8c:7e:a5:5c:6a:31:
4a:a8:69:00:de:cb:76:dd:d1:60:17:96:72:bc:79:
a4:6e:ea:c3:c9:40:ec:58:1c:51:a5:2e:6b:a3:e3:
02:ac:ab:fd:74:88:22:b2:cb:54:54:ea:5c:3c:7a:
81:5e:57:50:ae:21:5e:b4:1c:1d:f2:76:83:a5:95:
a7:8c:18:2b:63:7a:c7:72:46:c6:c6:94:f8:f4:d1:
9c:5b:e1:6e:6d:d5:14:dc:fc:47:0e:08:b3:c8:da:
a6:0c:7e:69:17:84:30:1e:cd:0b:90:51:e5:bf:8c:
fd:8c:fb:ab:af:59:8d:ac:d7:e0:7f:88:ab:d5:1b:
eb:66:df:10:41:52:94:27:22:4b:bc:fd:7c:01:a4:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:4F:A5:63:95:C6:2F:43:8C:04:5F:80:4C:C4:F9:0D:AB:9E:D3
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/uhlPpWOVxi9DjARfgEzE-Q2rntM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.251.0/24
Signature Algorithm: sha256WithRSAEncryption
27:46:c1:6c:30:d8:39:7c:63:08:50:f4:a9:f3:3c:5e:4e:9b:
f4:5c:a6:08:77:89:46:7f:a6:4e:c6:3b:59:dc:bf:42:5c:43:
4a:58:d7:06:46:9f:37:c7:4c:47:52:27:0b:f4:10:4f:86:c2:
42:09:3e:2f:3d:a9:22:54:31:d0:dd:f9:ca:74:38:36:be:43:
3f:04:38:8a:61:ac:5f:ef:61:9f:4f:db:31:b0:01:bb:03:a3:
19:b9:83:f4:10:cd:22:cd:23:e8:29:93:aa:84:eb:22:94:28:
33:0c:f3:95:3c:50:76:b7:2e:e6:e1:ae:41:00:40:2a:83:1f:
63:42:50:e3:3a:8f:24:52:c5:b2:5b:c0:26:28:5c:cc:96:53:
19:e3:d4:bb:ef:e5:2f:c9:73:79:66:d1:60:59:85:2b:53:d0:
d3:bb:4c:dc:79:d1:4d:e7:9a:ed:39:60:a5:70:d5:72:f3:01:
73:98:54:40:e6:79:23:a4:29:24:f6:15:c9:d9:aa:8a:2c:e7:
cf:41:35:10:3f:a3:38:b0:0d:8a:35:94:cf:ea:6e:71:7f:21:
fc:5c:83:f3:70:27:e9:cb:9b:d0:b8:53:87:71:87:12:71:27:
da:1b:23:3c:6e:c5:d4:71:01:d9:b7:b7:fc:b3:38:83:2d:af:
f4:a9:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:06:41 2024 by rpki-client on console-ams.rpki-client.org