Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/9U2MOV-5Swhh-VYOcj0DIzPKSmg.roa
File: 9U2MOV-5Swhh-VYOcj0DIzPKSmg.roa (raw, json)
Hash identifier: CWyBmZ9HlfW4AmKUF3ZPQ/I5papiTRt/mcQxLmS0oHU=
Subject key identifier: F5:4D:8C:39:5F:B9:4B:08:61:F9:56:0E:72:3D:03:23:33:CA:4A:68
Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Certificate serial: 018CC5DC478AEC8234700B927E32AEF96C3F
Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/9U2MOV-5Swhh-VYOcj0DIzPKSmg.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49646
IP address blocks: 193.169.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:47:8a:ec:82:34:70:0b:92:7e:32:ae:f9:6c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f54d8c395fb94b0861f9560e723d032333ca4a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:e8:3d:d7:4d:1a:4c:15:a0:97:a0:63:a0:
80:0e:e5:91:10:e0:9e:dc:57:51:6f:0f:0a:e5:f2:
d6:fe:7b:e3:da:85:34:5b:24:fb:2a:56:4d:42:a5:
f7:51:b2:32:65:20:49:ee:b1:7a:8c:af:87:81:e6:
30:cc:b5:54:56:98:c3:9f:1c:81:94:de:05:d4:59:
22:b0:48:22:a5:fd:fb:40:ea:8c:e6:3b:e6:d7:30:
c3:d5:1b:74:ba:6f:62:87:7f:9f:25:47:ff:1e:40:
79:20:11:19:e3:81:cd:6d:52:a1:ed:6f:ac:8e:8d:
e7:31:8a:8b:5c:23:86:43:e1:e8:40:7b:1b:19:d1:
bf:71:7c:b3:28:d0:72:af:2c:23:a4:09:41:05:8d:
76:bf:88:62:1c:c1:cb:fc:02:45:9f:3c:38:07:a3:
e4:de:45:42:5a:6d:9f:43:90:6f:1c:34:0f:53:14:
39:ac:9f:d3:0e:d9:45:88:7c:58:36:ce:89:56:49:
6c:ad:2b:de:c4:04:dd:79:7b:5b:27:b8:65:0b:03:
7b:2b:45:cb:1d:66:a4:22:61:50:89:bd:25:68:ff:
1d:13:d3:0f:0a:0a:1d:3c:f5:75:8c:36:12:af:cd:
e7:82:d2:c0:e2:cc:36:07:98:6e:b0:de:4e:b9:df:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4D:8C:39:5F:B9:4B:08:61:F9:56:0E:72:3D:03:23:33:CA:4A:68
X509v3 Authority Key Identifier:
keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/9U2MOV-5Swhh-VYOcj0DIzPKSmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.156.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:80:2e:ce:47:50:79:b0:37:14:8b:9b:2a:62:76:55:7e:10:
97:55:b1:f9:4c:5c:0a:d1:cf:28:81:cb:00:ed:4b:51:85:c9:
7f:21:92:41:f2:43:1e:4d:27:00:8c:77:79:39:05:63:82:30:
25:e6:a8:d0:93:af:6b:aa:24:54:4f:40:15:e4:59:2b:c3:d3:
07:d6:1b:41:a6:8a:2d:50:57:ea:a8:93:e0:1b:ed:91:fb:8b:
1f:bc:98:f1:65:ed:14:67:b9:b1:e7:02:c2:d3:f5:1a:9c:1d:
19:7a:14:0a:5a:f6:04:e9:64:d2:86:74:0a:b8:e0:33:f7:b6:
c0:8a:6b:ef:07:c7:5e:93:70:58:eb:7c:e8:cc:28:ff:c5:1d:
b3:97:60:be:69:53:ff:8a:22:bf:ba:f3:46:35:7b:34:d1:21:
84:1c:e2:fd:b3:f9:bc:53:4a:1a:52:52:41:66:9f:94:92:65:
12:4e:19:6d:0c:78:51:8b:98:0a:a8:c8:1c:27:ce:de:16:c0:
bf:38:34:5b:1b:5f:61:4a:5f:d4:0b:22:04:30:06:68:2a:de:
1c:3d:84:96:3e:02:4d:05:a4:df:f5:0f:4d:cd:bb:f5:d6:fb:
18:b5:9c:19:b2:dd:10:0f:22:e0:5b:7d:dc:cc:f6:c2:4b:f0:
8e:0c:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:59:06 2024 by rpki-client on console-ams.rpki-client.org