Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/UcdijfIbDIZR3BnRkgCEmtwfggI.roa
File: UcdijfIbDIZR3BnRkgCEmtwfggI.roa (raw, json)
Hash identifier: tp1Bv+fYRRdMuzE1TvJ1NXNCoN3YezGbxt5+JX/PBHM=
Subject key identifier: 51:C7:62:8D:F2:1B:0C:86:51:DC:19:D1:92:00:84:9A:DC:1F:82:02
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 018CC3B68402B410403E74D9B5A54C13CDF8
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/UcdijfIbDIZR3BnRkgCEmtwfggI.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49644
IP address blocks: 91.213.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:84:02:b4:10:40:3e:74:d9:b5:a5:4c:13:cd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51c7628df21b0c8651dc19d19200849adc1f8202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:28:dc:7a:ba:fe:94:5f:fe:9a:f6:97:a1:
4c:d8:57:b1:74:77:18:62:0f:92:d5:8a:cd:ac:e5:
50:82:1f:e6:4c:b0:87:71:3f:40:1b:53:95:61:fa:
5a:a5:c7:15:b3:54:e7:8e:0c:60:de:02:12:5a:3c:
b8:18:cc:65:aa:21:50:68:42:13:ad:88:dd:6a:4c:
38:ef:80:2a:e1:d5:d9:33:05:3e:34:31:6d:49:70:
30:5b:35:e0:6e:39:71:4d:be:10:83:6b:87:fe:c9:
10:2b:c2:ec:a4:f9:17:7b:c9:3b:9f:84:45:69:23:
7c:8e:14:48:b2:12:f7:c9:b5:35:70:b0:04:83:aa:
88:de:3d:b8:f4:b1:ef:0b:13:75:2f:61:00:9c:1f:
b8:02:c7:4e:3c:58:1c:33:f5:94:c1:a3:6d:21:bf:
d4:f0:38:d6:72:8d:ca:e3:75:a8:e6:52:4a:69:39:
e4:47:0e:56:0e:8a:85:38:87:4f:dc:6a:41:a5:47:
c7:df:d0:8f:b4:30:6f:12:cc:94:61:2b:c0:9a:87:
76:b0:9d:44:cf:be:d2:21:60:91:db:df:3e:b9:38:
b1:88:71:f5:1f:fe:c4:af:da:c6:84:18:92:ed:6f:
f6:b4:29:f0:df:06:e7:d2:47:9a:c4:1d:69:36:b6:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:62:8D:F2:1B:0C:86:51:DC:19:D1:92:00:84:9A:DC:1F:82:02
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/UcdijfIbDIZR3BnRkgCEmtwfggI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.51.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e3:b0:69:54:fb:fa:c2:ce:11:c6:55:f7:44:e2:a4:39:12:
46:9e:c6:41:11:a4:fc:74:0e:9e:8d:ff:11:5e:15:ae:87:c9:
19:e8:ee:f1:9c:a0:9b:e5:5f:71:ac:42:c3:53:79:0b:5b:4f:
c9:61:f5:c4:9c:29:2c:39:28:aa:7f:e5:01:0f:c0:31:60:e7:
41:7e:df:00:c8:80:07:16:43:3a:cc:30:6e:26:d9:ee:d6:63:
f2:37:6f:c3:be:17:c3:7e:b8:c4:cf:bd:e2:e2:1e:e7:58:96:
11:24:9c:1f:72:69:2d:73:ba:68:6a:12:44:18:c2:26:38:eb:
e2:49:07:13:8a:1f:51:19:37:55:1c:b3:c9:58:14:8a:f5:23:
3d:e2:07:e0:7e:a1:41:39:22:97:72:99:ab:5a:62:0a:d0:5a:
cc:89:53:03:c5:53:da:e9:84:88:51:8a:d3:44:7e:5f:8b:1e:
40:39:55:53:61:66:38:a7:c9:13:45:f6:d3:d5:f1:a6:4d:41:
16:ad:99:35:2d:37:10:d3:2a:6b:27:a1:2a:47:10:3d:e8:0b:
5e:e1:a5:66:4f:22:fd:56:2a:86:f0:69:f9:f9:e9:e5:74:f3:
a3:e1:5c:f1:7c:43:14:15:c1:b0:0c:0e:60:3e:d4:b8:b4:68:
16:5f:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:04:39 2024 by rpki-client on console-fra.rpki-client.org