Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/G-uwc1HvHWPtYepzdn695m6w_28.roa
File: G-uwc1HvHWPtYepzdn695m6w_28.roa (raw, json)
Hash identifier: jTZ6NAelniw5WszLcachS1//0ZzORd0wj4RFexVgIfI=
Subject key identifier: 1B:EB:B0:73:51:EF:1D:63:ED:61:EA:73:76:7E:BD:E6:6E:B0:FF:6F
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 018CC26D869C7CF66C1772FDCDACC1885413
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/G-uwc1HvHWPtYepzdn695m6w_28.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.153.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:86:9c:7c:f6:6c:17:72:fd:cd:ac:c1:88:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bebb07351ef1d63ed61ea73767ebde66eb0ff6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:34:3d:6e:0e:fc:76:59:65:de:e3:b3:ab:
c1:5f:63:38:96:14:e2:35:fe:74:8f:7e:a1:ae:c3:
64:5c:21:54:e8:0c:60:2c:c3:97:c8:55:8c:82:68:
c6:47:f3:22:f2:88:b8:fa:d5:b8:43:c8:c9:50:28:
d6:8f:fb:c5:62:fb:1b:98:e2:b1:8c:3a:96:35:3d:
6c:94:d7:68:fb:30:96:71:50:43:ec:fc:93:c7:c5:
45:c9:22:33:93:10:d2:fc:8f:81:ee:a5:1c:e4:82:
11:76:ed:57:37:7e:bb:e9:7a:1e:3b:8b:b7:8c:d4:
d9:9a:93:2b:cc:73:9c:d7:c6:4b:78:23:89:ec:33:
07:d2:42:7a:f0:10:77:80:3c:ed:43:f5:f8:40:bd:
95:9b:04:8e:be:ea:8d:6e:fb:e1:d4:a9:69:48:9d:
b3:fc:db:57:7b:0c:7a:c1:f3:eb:a2:bc:0e:51:19:
13:df:f0:67:c9:76:84:f6:13:ac:2d:78:d6:14:3e:
fc:34:51:58:9e:a0:6c:6f:a9:60:74:3f:20:65:89:
e9:4f:80:0b:23:fc:1d:78:f4:45:9a:78:6f:9d:12:
2b:31:d9:1f:00:ab:72:bf:b6:a5:22:9a:af:1d:8d:
4c:59:41:7d:19:e7:7e:8a:c5:df:56:bf:7a:7d:4d:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:B0:73:51:EF:1D:63:ED:61:EA:73:76:7E:BD:E6:6E:B0:FF:6F
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/G-uwc1HvHWPtYepzdn695m6w_28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.248.0/24
Signature Algorithm: sha256WithRSAEncryption
12:42:83:59:ce:63:ed:32:9b:18:74:79:68:1b:8f:d9:d7:09:
24:78:cb:1c:16:5d:01:3e:06:10:b5:47:0e:ce:21:e3:96:db:
19:f7:1e:65:98:14:55:01:1e:7f:a7:b4:b6:57:3e:d0:74:3f:
bd:eb:69:03:bd:2a:38:97:14:93:b4:72:26:3c:8e:c3:7e:80:
79:9c:b3:d8:4d:6f:7a:6d:b1:c0:73:d1:3d:5a:2a:fd:d7:a3:
3a:53:f6:17:f9:4a:64:f9:18:f1:b7:03:70:da:8b:c3:cd:0a:
bf:7b:5c:e3:27:c1:03:65:98:e3:83:6f:cb:e4:0c:a4:2c:a5:
3e:0d:94:c2:cc:80:44:01:6c:77:2e:65:42:aa:92:28:c7:bd:
78:08:08:3f:90:d4:bb:53:ae:4b:55:22:5f:78:ee:b5:ca:aa:
50:b1:c6:76:b2:b5:18:9d:a5:33:4a:9e:75:ce:eb:19:cf:3a:
8b:df:f7:17:9a:9e:a8:4b:23:c9:ae:c6:52:af:0d:77:eb:89:
27:7d:b5:ce:05:5e:2c:13:9d:15:7f:8b:93:04:bf:06:64:20:
8c:23:a6:ca:5c:e5:54:1b:a1:13:e8:b3:55:f8:8b:f6:49:93:
cc:8d:f5:cc:f0:1a:70:f7:2b:33:bc:4c:3d:e5:15:6f:4b:6c:
6b:ce:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:38:03 2024 by rpki-client on console-ams.rpki-client.org