Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/uvy3ixxS4yg57yjrUvgjR0xJmxc.roa
File: uvy3ixxS4yg57yjrUvgjR0xJmxc.roa (raw, json)
Hash identifier: 2dyqaECUtaD8T85RxjQKqDtOonb4c32ef6SLNew+vRw=
Subject key identifier: BA:FC:B7:8B:1C:52:E3:28:39:EF:28:EB:52:F8:23:47:4C:49:9B:17
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 018CC3B6F088B03203A557497F98D2E15175
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/uvy3ixxS4yg57yjrUvgjR0xJmxc.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13639
IP address blocks: 156.114.20.0/24 maxlen: 24
156.114.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f0:88:b0:32:03:a5:57:49:7f:98:d2:e1:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bafcb78b1c52e32839ef28eb52f823474c499b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:18:27:23:f1:01:e0:75:e9:87:90:d7:e0:
a9:6e:20:56:6b:99:6a:c9:f2:3b:5e:ff:d2:b3:ad:
f3:a7:40:cb:84:66:57:f0:f4:5a:80:7d:cc:81:ac:
98:60:2a:0a:44:50:43:63:d6:83:a9:2d:19:eb:8e:
cd:d9:a8:12:d3:c4:1b:3c:94:f9:65:5d:36:07:be:
1f:52:64:56:3d:ad:ee:50:81:71:8c:72:55:b5:a2:
72:5b:07:71:93:cb:cf:51:c8:ca:99:77:e9:93:38:
b8:be:68:e3:75:6f:c9:41:6b:90:6d:3d:73:bb:31:
af:1b:d5:71:5c:ef:4a:76:95:c7:52:f3:cb:dd:51:
01:dd:f0:40:ed:5b:42:4d:22:09:02:df:cc:47:db:
08:f3:62:ae:12:dd:45:d7:ec:d3:e3:87:2f:e1:cc:
09:22:60:e6:b1:0c:73:3e:60:ae:6c:ff:90:3b:12:
1d:65:a0:bc:a4:1b:28:c8:60:3b:94:01:46:5c:97:
8b:4e:01:ff:a2:4c:7b:cd:9a:e4:a6:f1:ad:76:f9:
f5:28:f7:5f:a2:e0:83:0a:91:33:fb:4b:91:30:e5:
4f:eb:4a:d7:96:dd:c3:b6:0f:61:ea:90:e3:ea:ae:
c5:65:75:72:19:f9:12:3d:8d:d8:06:f9:79:4e:7a:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FC:B7:8B:1C:52:E3:28:39:EF:28:EB:52:F8:23:47:4C:49:9B:17
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/uvy3ixxS4yg57yjrUvgjR0xJmxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.114.20.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a1:f8:f0:18:b1:06:ab:13:c5:ab:52:7d:1a:9f:52:b3:2b:
53:b6:e4:48:18:31:1e:27:96:55:c4:68:cc:b6:d2:5d:aa:da:
88:78:9c:30:fe:4f:67:c7:ee:18:b2:31:41:4d:6a:6a:5e:e8:
41:b0:7a:ae:cb:46:5a:a9:6d:6e:8b:12:e1:9e:a8:e1:f7:b6:
e7:ad:3e:94:92:f9:11:92:b2:8d:ec:03:71:48:e3:72:e6:42:
53:df:1a:a5:39:e5:9c:04:a2:aa:79:4b:18:15:f0:87:2d:b0:
5f:1e:ab:a9:74:04:1a:5e:b0:31:3e:f6:8c:49:cf:5a:8d:e7:
0a:59:59:ff:be:d8:f0:62:df:a5:ce:17:dc:c8:c5:e0:f5:36:
60:7d:7c:21:a7:e8:f4:8e:0c:cb:55:36:c7:e2:fb:3e:9c:ea:
8b:3b:b7:ae:f8:38:cb:ee:c0:e2:39:27:6f:05:4f:99:d5:c4:
6b:c1:6e:8d:f7:43:4e:72:10:ff:32:8f:43:c9:30:b0:a0:ce:
b8:4d:ec:22:13:39:89:5f:eb:fd:17:f8:06:39:b9:32:f4:6b:
7d:23:3f:87:ce:c2:9e:e0:b0:cc:01:1c:51:53:3b:fa:a2:0e:
44:20:90:ca:01:42:fd:13:35:da:b1:1a:93:42:0e:a8:6b:42:
69:40:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:56:13 2024 by rpki-client on console-fra.rpki-client.org