Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uahgpeCiJohfwRX0goUWQDDSjtg.roa
File: uahgpeCiJohfwRX0goUWQDDSjtg.roa (raw, json)
Hash identifier: ifhgtPne+LfkUcTJkIX5lDGXcjJwiylllIBLfSAr9uA=
Subject key identifier: B9:A8:60:A5:E0:A2:26:88:5F:C1:15:F4:82:85:16:40:30:D2:8E:D8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E7111365E77E8F9B32738287EA80
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uahgpeCiJohfwRX0goUWQDDSjtg.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39667
IP address blocks: 93.170.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e7:11:13:65:e7:7e:8f:9b:32:73:82:87:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9a860a5e0a226885fc115f48285164030d28ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:54:87:6a:22:14:1e:9f:0d:7a:bf:11:08:
ad:14:40:e9:d2:be:58:0e:06:4b:63:48:04:88:6c:
9f:57:6c:e9:29:53:a5:4c:53:4b:f5:74:c6:bb:51:
79:de:4f:bf:86:ee:25:c1:84:7f:4e:9b:40:7d:49:
b4:81:6b:2f:4d:0b:32:de:15:af:5a:d9:bb:5d:6a:
2e:46:82:42:89:2d:41:1d:2b:a5:d0:a9:84:5c:45:
0a:10:ff:3b:24:57:76:5a:f2:8f:55:19:0d:87:62:
a4:de:68:07:be:c4:9f:24:83:59:25:44:d7:ca:62:
ae:05:81:79:7d:dc:e4:9b:a2:54:46:15:d7:c7:82:
d5:00:98:b2:15:1e:ba:82:4d:95:e8:33:91:c7:30:
6e:81:9d:e5:6d:e7:9f:df:0b:2b:0d:3e:9c:c3:cd:
73:69:6d:ea:a0:81:7f:b7:c1:6b:da:90:b3:94:ff:
02:6d:22:2d:dd:77:21:33:3e:50:02:d6:04:df:21:
b0:52:6c:c2:c9:ee:5f:83:58:c8:07:f7:15:e0:3f:
12:00:d0:74:32:95:14:37:ad:99:31:03:f7:c9:32:
b4:93:a5:73:16:59:99:d2:df:de:fc:d2:a1:36:6e:
12:ba:28:cb:88:2a:2f:01:f8:7f:5a:d4:25:0d:16:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A8:60:A5:E0:A2:26:88:5F:C1:15:F4:82:85:16:40:30:D2:8E:D8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uahgpeCiJohfwRX0goUWQDDSjtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.217.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ad:72:cd:b3:49:45:76:05:0d:3c:c1:de:9d:bd:2a:c9:b4:
15:75:82:c0:60:31:68:5c:4e:aa:8e:af:ef:0a:29:56:11:f7:
9f:8c:5b:1d:e5:99:3a:a2:6e:5a:58:02:c6:dc:dd:40:b0:65:
3d:7c:9d:62:d9:ed:91:22:6b:4b:a7:a2:16:fa:22:fc:92:dd:
93:82:e7:81:45:60:96:45:e7:1a:21:c8:9e:59:0f:f8:18:ee:
ff:5c:f0:37:da:39:ec:ca:37:a6:74:a8:4a:7f:c4:62:e6:ce:
43:e5:dd:31:1b:8e:5b:9f:9f:37:5b:f7:76:5e:ed:ea:e5:5d:
75:b7:a8:d2:b4:92:d7:5e:31:4a:38:f7:13:2e:81:7f:6a:2a:
a5:ec:9e:b7:41:e3:26:75:22:ca:68:72:d3:3b:9c:e1:95:07:
66:e2:29:fa:12:ba:5d:41:3c:8d:40:25:92:a5:37:3e:a3:b5:
62:08:4e:f1:5d:6f:7e:5d:89:33:36:fd:0e:0c:21:1b:70:53:
22:52:bc:24:93:36:77:ad:a0:b1:15:fc:6e:b3:b2:17:88:a4:
03:9a:ad:d4:96:46:78:c7:2d:fd:9b:bd:f2:0e:33:fe:26:d7:
c8:06:18:5c:08:f9:bd:74:b8:34:d3:56:88:02:1f:0d:d1:64:
95:d5:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:08 2024 by rpki-client on console-fra.rpki-client.org