Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/uLsg9UXwAn_Cp3aP5uxRgIyJYsI.roa
File: uLsg9UXwAn_Cp3aP5uxRgIyJYsI.roa (raw, json)
Hash identifier: GKSpFc1+b3n/nUm6q6kMrbne1DA8/pKHgQ+wOQRSRpM=
Subject key identifier: B8:BB:20:F5:45:F0:02:7F:C2:A7:76:8F:E6:EC:51:80:8C:89:62:C2
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 018CC5000EF42A3627FE88DF02AC64C36207
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/uLsg9UXwAn_Cp3aP5uxRgIyJYsI.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51945
IP address blocks: 185.190.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0e:f4:2a:36:27:fe:88:df:02:ac:64:c3:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8bb20f545f0027fc2a7768fe6ec51808c8962c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:1e:a5:89:f8:48:cb:22:b2:ae:6a:90:f7:
87:88:8a:95:df:27:98:2a:10:d3:e9:fb:72:2b:26:
75:94:56:cc:2b:26:a3:d3:bc:99:ad:57:b7:13:38:
a8:51:7f:ad:da:04:2f:66:a8:00:1f:69:76:c3:1a:
0b:2d:57:e3:b7:fe:99:c9:00:42:4b:39:07:09:b3:
a4:aa:0c:ed:35:68:44:6a:da:27:87:3d:4f:44:d4:
4e:0a:ac:a8:f7:47:fa:b9:4b:fa:78:9c:c0:60:58:
9c:c7:59:c7:49:15:85:36:9e:fa:5b:0e:eb:3a:e9:
3b:7d:7c:22:60:a4:6c:aa:29:03:27:00:3d:2b:93:
e7:f6:89:8b:59:04:9b:f1:2e:91:c7:b9:39:39:13:
73:0a:f5:d2:40:82:c5:ba:57:cd:da:2d:57:66:d2:
56:2a:ef:07:fe:1b:1b:28:68:97:49:dd:38:31:6e:
dc:46:05:a5:6e:f6:1a:64:13:54:d7:9f:f2:1b:60:
cf:9a:30:a9:5d:30:9d:bc:e0:51:bc:d8:2c:32:c0:
a4:ad:ca:d0:1b:76:cd:3d:d4:9e:df:af:f8:b5:51:
73:2c:ba:92:1c:5d:9b:f5:69:e2:bb:e4:c8:01:1f:
2e:b3:bd:5c:e6:02:b1:6c:c4:5e:c5:21:a6:32:4a:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BB:20:F5:45:F0:02:7F:C2:A7:76:8F:E6:EC:51:80:8C:89:62:C2
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/uLsg9UXwAn_Cp3aP5uxRgIyJYsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:08:26:65:42:b5:16:ca:1a:c3:05:8a:ff:1f:72:e0:9e:7e:
a0:db:b8:43:db:da:64:7b:a1:76:54:f1:7e:5b:f2:81:a1:24:
e1:61:10:1a:1f:53:19:a6:1b:ec:b9:36:f8:d2:ed:5d:ea:5e:
94:86:08:dc:62:f1:d1:4f:31:80:64:81:63:a7:fa:a5:0a:4b:
90:64:ed:e9:b3:bd:27:9d:72:b8:85:3a:fd:68:ef:d3:42:20:
10:93:56:47:e0:e1:73:74:21:49:43:31:e3:54:09:83:a1:ae:
20:d2:e8:f2:cf:5f:93:7c:94:f6:f2:96:14:7f:6c:a5:ae:4e:
34:eb:0a:db:3c:1e:ae:ef:1b:9b:75:d2:9d:66:cd:3a:91:dd:
f5:0e:8a:94:88:a8:12:d9:07:1e:1a:1e:59:92:7f:74:16:40:
02:07:87:e3:98:0a:5e:1d:73:b7:4e:51:5a:b9:13:b2:6e:b1:
06:88:5c:0e:26:9e:12:04:d9:1c:37:2b:d0:c1:a1:62:6e:ce:
80:97:32:dc:dd:e4:5b:53:11:f3:a4:9f:fd:ac:c8:c1:a8:2c:
98:9b:a5:2b:74:c2:3d:c3:2f:73:87:b7:d8:1a:68:c6:e2:9c:
01:6b:3e:7d:ef:15:af:5c:ad:ee:8c:66:7b:e8:b1:b8:c9:60:
5f:19:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:44:51 2024 by rpki-client on console-fra.rpki-client.org