Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/pu_g_GlUavg5iRMGZrkYeZflKqc.roa
File: pu_g_GlUavg5iRMGZrkYeZflKqc.roa (raw, json)
Hash identifier: KSEvf9/lZ617kiaibzQw0p+KVkzlX0BxGwRJ18ZIGRM=
Subject key identifier: A6:EF:E0:FC:69:54:6A:F8:39:89:13:06:66:B9:18:79:97:E5:2A:A7
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 018CC492442797BAEACB77FF45EAC9EC4D57
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/pu_g_GlUavg5iRMGZrkYeZflKqc.roa
Signing time: Mon 01 Jan 2024 10:29:29 +0000
ROA not before: Mon 01 Jan 2024 10:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30933
IP address blocks: 194.110.250.0/24 maxlen: 24
193.151.124.0/22 maxlen: 22
193.151.125.0/24 maxlen: 24
193.151.124.0/24 maxlen: 24
193.151.127.0/24 maxlen: 24
193.151.126.0/24 maxlen: 24
85.118.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:44:27:97:ba:ea:cb:77:ff:45:ea:c9:ec:4d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6efe0fc69546af83989130666b9187997e52aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:ae:be:e2:f1:14:ea:38:3a:73:fb:2a:97:
35:13:5c:05:33:b2:59:f4:87:37:fd:b8:ef:da:0f:
a9:b4:bf:46:49:76:05:90:ce:ab:6a:7e:4d:f5:0e:
86:17:4f:c8:b5:03:47:18:d1:f0:5b:b2:41:6c:66:
19:cc:75:a0:16:cd:25:5d:d6:d8:4a:9f:22:cd:ca:
2c:e3:3c:f2:85:78:0a:78:78:50:fa:4d:65:2b:53:
2d:82:15:09:1c:c5:f9:c4:92:93:a3:6d:40:d2:56:
20:d3:2c:82:dd:12:4e:84:6f:57:b7:59:26:59:17:
d5:87:50:a2:c1:63:d2:32:33:0a:58:07:5f:34:71:
c5:75:8b:06:16:63:5f:3e:34:d9:4c:b0:e2:fa:a0:
ad:6b:54:8d:14:2c:0c:7b:c4:78:f4:24:d1:d9:ff:
29:89:21:fe:4e:de:fa:b7:84:cc:b5:27:3e:7e:c5:
01:d1:e6:0f:38:e5:ec:c8:24:6f:e5:14:fd:47:20:
3f:06:ce:9b:5c:aa:4e:34:a6:67:73:42:91:17:97:
ac:35:14:7f:e1:78:c6:34:25:60:84:f3:e8:64:97:
72:7d:9f:1a:11:84:46:ef:b2:33:4a:63:41:33:15:
0a:1e:89:97:ab:1b:25:fc:7a:60:7c:9b:30:59:56:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EF:E0:FC:69:54:6A:F8:39:89:13:06:66:B9:18:79:97:E5:2A:A7
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/pu_g_GlUavg5iRMGZrkYeZflKqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.232.0/21
193.151.124.0/22
194.110.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6a:a6:33:a4:47:80:15:0c:b0:16:ce:cd:b8:1e:bd:78:d1:
d7:2c:cf:04:76:1d:f3:e3:59:f0:a6:07:53:97:91:03:38:08:
61:a3:ad:0a:f6:7c:fc:33:fe:f5:82:24:97:87:a1:c1:88:c3:
1c:c0:50:4a:2d:4f:42:26:6a:28:27:7a:59:ef:29:2d:a5:2e:
02:23:ca:77:79:71:d6:a3:b4:f9:c2:ca:14:d3:50:65:05:c0:
bc:4a:20:b6:a5:05:c8:f4:82:14:50:1f:3e:b2:cc:30:41:e0:
5f:df:f0:c0:58:cf:b3:c3:1d:9f:65:57:06:3f:37:62:99:9f:
f9:ca:05:0d:53:ac:60:83:b1:e8:c6:62:8e:fa:fe:1e:51:0e:
c3:b4:8a:0f:77:18:93:52:5d:9c:5e:26:ca:d0:c5:63:78:c6:
ca:28:ad:85:77:5c:de:0a:91:19:33:dc:e6:bb:fe:56:8f:5c:
33:d1:1a:17:13:f8:94:fa:85:c7:66:78:69:ef:d5:2b:8d:fb:
77:3d:22:c9:19:49:02:69:66:d6:af:9f:ea:f8:54:eb:2a:f9:
47:77:cc:9b:53:81:cb:82:d0:63:60:65:7c:57:47:22:e7:c4:
70:0d:83:0a:8b:cd:5b:1b:a9:92:a3:d3:3d:24:5b:7e:60:46:
c1:86:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:46 2024 by rpki-client on console-fra.rpki-client.org