Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uPXpBLQxxDxQZfdipsWHn0D_D1E.roa
File: uPXpBLQxxDxQZfdipsWHn0D_D1E.roa (raw, json)
Hash identifier: X3SbilTjtkXA0HE5in7Bfwe/Yl8/0ZizSuYQ+biJutw=
Subject key identifier: B8:F5:E9:04:B4:31:C4:3C:50:65:F7:62:A6:C5:87:9F:40:FF:0F:51
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01906FAF1D595A093681D0E61F91D0F8D8D0
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uPXpBLQxxDxQZfdipsWHn0D_D1E.roa
Signing time: Mon 01 Jul 2024 19:04:25 +0000
ROA not before: Mon 01 Jul 2024 19:04:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 46.38.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:af:1d:59:5a:09:36:81:d0:e6:1f:91:d0:f8:d8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 1 19:04:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8f5e904b431c43c5065f762a6c5879f40ff0f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:f7:52:ac:08:71:a8:89:1d:25:3a:d4:af:
02:03:c6:dc:77:58:b1:ed:46:de:79:52:b1:c8:bd:
d9:c5:b0:15:b7:9c:3f:f2:9d:57:d0:e3:c8:a4:1c:
b9:50:88:07:a7:10:48:32:8b:57:18:52:62:c5:98:
f0:64:45:5e:33:28:b2:5a:3c:d0:17:ee:9c:8d:41:
4d:7b:84:ff:07:3a:22:ea:e3:ca:cf:8f:c9:4d:15:
56:61:e5:8f:d0:6a:57:31:19:56:f7:b5:1b:16:c2:
39:ae:60:66:b4:30:32:14:32:d5:82:24:39:90:f0:
2e:53:ae:0d:23:34:b4:80:21:2f:17:b0:f5:76:46:
00:4c:60:b8:85:96:33:74:d4:f3:4d:2c:60:5b:f1:
a5:51:c7:8f:2d:00:bf:8c:13:89:c2:69:b7:d7:ae:
73:fd:a2:61:53:e2:fa:3d:25:ac:46:ca:41:10:c4:
b9:0d:f5:95:3d:ab:61:a4:e8:1e:41:f4:5a:4e:49:
b1:d8:26:ae:c4:61:2d:e1:75:c7:69:fd:7e:ba:f4:
24:76:1a:3e:15:0f:a1:fa:66:51:5b:96:e2:ae:5c:
bd:a2:f0:cc:08:01:e7:68:10:8c:2d:1f:a3:3c:68:
1d:bb:ac:fd:5b:be:9c:a8:de:3b:98:ef:23:8a:46:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:E9:04:B4:31:C4:3C:50:65:F7:62:A6:C5:87:9F:40:FF:0F:51
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uPXpBLQxxDxQZfdipsWHn0D_D1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:08:4a:82:a0:10:46:27:ed:9b:72:16:af:d9:3c:17:d2:01:
03:73:19:fe:7e:ab:90:15:fb:b8:e0:f1:81:47:a9:b4:5d:6f:
0c:c7:89:1d:93:9f:c6:a6:9c:9d:97:82:4a:20:41:54:87:4c:
0b:85:5c:9f:1f:b4:23:f4:fe:71:bc:85:c4:e3:3a:90:62:ce:
e9:7d:05:e0:fb:4b:8c:23:34:3f:09:d4:10:54:74:3e:80:d0:
e9:03:c5:a2:ca:1b:ab:10:54:c4:4a:8f:04:c8:6d:7f:af:d8:
74:ac:ea:1e:78:0a:e2:13:ea:43:8e:a0:06:49:ff:cf:20:b7:
00:5e:85:5e:a1:be:50:90:4b:58:6b:98:16:6e:65:16:9e:c1:
3e:d6:3f:f7:81:38:9c:41:49:b1:d0:ef:e7:df:36:21:f6:11:
9a:04:43:1c:95:3c:9b:92:3d:0a:a1:87:0a:ba:52:75:c9:d0:
bd:a5:99:fc:eb:bd:10:ce:e2:f1:8b:1d:f3:f7:6c:c4:c3:70:
0d:d3:3e:91:67:98:74:d3:2a:c9:13:61:48:04:91:53:86:9f:
6b:22:25:55:0a:65:9d:a9:eb:2f:ff:3b:83:65:11:f9:64:ff:
10:54:8d:dc:34:67:de:82:fb:1d:18:34:f7:59:32:e4:59:b6:
70:a9:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:06 2024 by rpki-client on console-fra.rpki-client.org