Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/uIvph77W26DlFet3QS96Gp2FJ_c.roa
File: uIvph77W26DlFet3QS96Gp2FJ_c.roa (raw, json)
Hash identifier: 5GDa/2YFtbaUm6OqyZGEqSZGJa2jGGVCXHAK34nVxgE=
Subject key identifier: B8:8B:E9:87:BE:D6:DB:A0:E5:15:EB:77:41:2F:7A:1A:9D:85:27:F7
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 0192D224C1588340B745379A546536694258
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/uIvph77W26DlFet3QS96Gp2FJ_c.roa
Signing time: Mon 28 Oct 2024 08:01:17 +0000
ROA not before: Mon 28 Oct 2024 08:01:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207684
IP address blocks: 194.92.64.0/21 maxlen: 21
194.92.72.0/23 maxlen: 23
2a0a:3a40:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Nov 2024 22:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:24:c1:58:83:40:b7:45:37:9a:54:65:36:69:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Oct 28 08:01:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b88be987bed6dba0e515eb77412f7a1a9d8527f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:fb:50:7e:56:e9:2d:f8:6d:4b:69:5f:dd:
2b:21:da:87:1a:ba:ac:9f:ec:8a:e4:f1:bd:6b:d3:
a7:de:f5:6c:5b:77:07:df:2e:47:2f:13:68:b0:4b:
16:49:18:a2:53:72:43:41:9c:2d:48:62:42:c3:31:
3c:56:e0:01:96:3e:ed:92:31:79:fb:23:9f:14:01:
79:97:c7:3b:df:8d:7b:85:a3:9f:26:f4:b8:f0:24:
dc:b2:e9:eb:98:47:16:96:4d:7b:5f:fa:67:61:47:
b6:59:62:ad:8f:08:ca:37:e1:67:80:55:39:d2:be:
b6:57:28:91:14:e1:5b:c6:d2:9f:2d:e2:57:f1:c5:
89:b1:b4:35:68:8b:9e:8b:77:d5:1c:18:a2:5d:f0:
ee:20:42:4a:57:33:b1:83:48:21:18:3b:50:bd:c6:
49:28:62:ed:62:d3:d8:64:16:ac:e4:51:aa:5e:0f:
80:87:7b:e1:e1:ed:73:fe:79:3e:5a:05:57:38:81:
b3:a0:c8:b4:f2:69:f9:34:32:01:f3:54:97:98:2d:
73:9a:33:53:6b:b5:73:7e:a5:84:f0:9e:fc:b4:fc:
1c:75:44:da:a4:2f:3b:da:15:0c:e5:96:78:f1:b4:
87:2a:06:e5:a9:64:1c:09:44:b2:7c:89:85:78:90:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8B:E9:87:BE:D6:DB:A0:E5:15:EB:77:41:2F:7A:1A:9D:85:27:F7
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/uIvph77W26DlFet3QS96Gp2FJ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.64.0-194.92.73.255
IPv6:
2a0a:3a40:1001::/48
Signature Algorithm: sha256WithRSAEncryption
2b:40:a3:c4:1b:16:60:3f:01:98:ed:3b:d9:b1:9e:3b:24:3d:
1b:c9:0f:6b:e8:5f:c5:6d:24:5a:22:da:89:31:80:2e:a0:5c:
1d:f4:a7:93:9d:72:89:46:39:76:c5:44:fe:50:0d:b9:74:12:
8b:ca:f8:9b:11:4c:0a:6f:ba:c1:e0:f0:6f:a0:c6:5e:ef:0e:
42:0d:9a:49:db:87:84:fd:58:14:9f:86:eb:ef:4f:db:e0:c3:
0b:26:b4:d2:99:bf:8e:11:68:91:38:94:e7:2b:1d:93:c2:69:
d8:88:87:9c:f5:22:e4:23:8e:b9:59:4b:fc:3d:92:78:63:1d:
b1:e7:f3:e3:3d:05:d9:47:ea:ca:23:3e:3d:6e:f4:d3:4f:89:
98:8e:b1:3a:5a:03:a1:0a:5c:d6:8e:11:6a:9c:f9:d9:18:4b:
7a:b3:e4:5a:02:09:80:5f:65:1b:40:6c:a7:14:c5:db:88:fd:
d8:52:81:76:5f:d5:93:e8:12:67:ab:73:88:f0:48:c7:b8:35:
84:d6:e8:ff:74:77:79:d7:77:c9:19:97:24:8c:7a:4a:c7:d8:
f4:ad:eb:a2:31:23:9d:6f:e2:91:bd:f5:cc:24:17:c6:2f:16:
cc:b8:21:40:8f:a4:ee:17:29:29:fc:77:ed:44:15:3c:62:d9:
ee:b2:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 04:36:24 2024 by rpki-client on console-ams.rpki-client.org