Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/uHBvJvujUHwxrWwuxHQljY5dvT4.roa
File: uHBvJvujUHwxrWwuxHQljY5dvT4.roa (raw, json)
Hash identifier: VMuGFwZdN8udSy03Io/tnsF+brXRz/enmoOemgP26ug=
Subject key identifier: B8:70:6F:26:FB:A3:50:7C:31:AD:6C:2E:C4:74:25:8D:8E:5D:BD:3E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019077F9336FDA86597A1FBBF1F5C3184EB9
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/uHBvJvujUHwxrWwuxHQljY5dvT4.roa
Signing time: Wed 03 Jul 2024 09:42:18 +0000
ROA not before: Wed 03 Jul 2024 09:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202999
IP address blocks: 92.246.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:f9:33:6f:da:86:59:7a:1f:bb:f1:f5:c3:18:4e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 3 09:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8706f26fba3507c31ad6c2ec474258d8e5dbd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:e2:c9:3c:92:2c:7a:22:88:72:56:47:b9:
96:9f:45:c0:5a:4c:73:07:c6:86:09:e9:04:db:4d:
06:33:58:64:6e:56:02:1b:b3:3c:4f:9f:5c:07:a2:
06:c5:e5:2b:a7:cc:66:1b:07:a1:62:41:9e:fb:fd:
f0:d8:df:9b:d3:bf:09:fd:89:0d:dc:8a:cc:b8:35:
8f:19:ab:82:73:0e:57:f2:e2:7b:35:26:be:58:db:
f7:45:e9:5d:e8:3b:ad:1c:c1:6c:3a:42:f6:b2:9f:
5c:c1:45:a3:0a:b2:90:1c:ec:76:4f:40:5b:97:4d:
cd:b7:05:6a:86:87:0b:a7:5d:d0:8b:cc:f4:d8:17:
61:bd:8b:ad:5c:2d:1d:23:07:80:10:dd:47:d6:f1:
27:7a:af:88:f5:73:d8:30:8b:5a:6c:75:10:de:25:
ec:6d:0b:68:67:51:c5:1d:81:ad:8b:3e:ca:81:55:
57:db:bc:1a:0f:39:06:8e:ca:12:45:25:e5:32:cb:
db:8c:3c:17:bc:f4:42:ea:c2:23:02:96:e6:a5:20:
ed:28:3f:f0:11:21:1b:f0:39:4a:bf:21:11:db:f3:
f4:a9:11:f8:1d:ef:b3:c9:aa:b8:72:15:86:96:38:
a4:b4:8a:f0:e5:56:26:d9:7e:58:65:ef:c1:14:f3:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:70:6F:26:FB:A3:50:7C:31:AD:6C:2E:C4:74:25:8D:8E:5D:BD:3E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/uHBvJvujUHwxrWwuxHQljY5dvT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.77.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:66:4d:4e:78:87:00:60:5c:c5:d0:0b:80:6f:df:45:b9:80:
fc:df:34:0a:1c:40:a8:7c:4e:4d:f3:50:5e:f1:05:8d:d4:f7:
39:8a:99:c3:43:7f:00:dd:96:aa:4a:fd:67:79:ce:47:03:da:
e0:1e:ae:ed:5d:65:78:e3:a2:1e:9f:a7:5c:99:9b:cb:c6:3f:
d5:df:67:45:42:fc:ed:07:0e:66:f6:72:db:9c:f3:39:8e:25:
dc:be:d1:a0:69:ff:cb:86:84:8b:7b:da:71:39:c0:d9:88:76:
ee:99:59:7f:f4:5a:5a:e7:27:a1:74:f1:83:07:1f:03:1a:e3:
01:12:a0:cf:df:93:4a:f1:7b:4e:85:53:cd:2b:f7:ad:3b:61:
94:58:3f:ea:a4:04:8c:ab:8e:8f:95:cb:d1:1e:27:2d:fb:c8:
a0:66:54:30:d9:ba:3a:e0:10:19:a5:cf:cf:69:0b:0e:97:aa:
13:71:72:4c:3b:87:30:b5:73:bb:04:89:7c:f1:2d:42:28:25:
19:4b:92:fb:11:4f:c2:d6:f1:09:05:a5:c6:6a:50:d7:80:8a:
a0:83:d3:13:3c:d4:da:7a:f5:40:b4:87:2e:77:c1:29:61:ea:
f5:80:33:87:e4:c0:c0:2a:bb:b9:38:8c:4c:99:48:a4:1d:3e:
43:a4:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:27 2024 by rpki-client on console-ams.rpki-client.org