Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/U_5TAAB6V7LAJUvdhFutJT6pmWA.roa
File: U_5TAAB6V7LAJUvdhFutJT6pmWA.roa (raw, json)
Hash identifier: v0mSb9I+RQt+Yv9UVXIhNOyx2PcELDpI6dbD7V7E3Hg=
Subject key identifier: 53:FE:53:00:00:7A:57:B2:C0:25:4B:DD:84:5B:AD:25:3E:A9:99:60
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 018CC425457FE3195B5B0FE99977B0147CFD
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/U_5TAAB6V7LAJUvdhFutJT6pmWA.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205116
IP address blocks: 212.6.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:45:7f:e3:19:5b:5b:0f:e9:99:77:b0:14:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53fe5300007a57b2c0254bdd845bad253ea99960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:b0:21:2c:4e:e8:66:54:48:6c:19:f6:74:
e9:2e:c3:7a:8d:97:10:7b:da:01:31:89:4d:6b:24:
a7:fa:25:2f:59:1d:cb:1d:a9:d7:36:e7:85:84:2d:
d8:29:9d:bb:91:7f:96:cc:66:7f:a0:98:77:3a:69:
4f:da:09:3b:dc:1c:f9:27:5f:cd:3a:e0:76:19:30:
00:c1:23:20:a3:b4:ab:a7:46:71:f4:0e:a1:84:19:
ff:4e:8c:f6:37:80:d4:16:1f:dd:79:f8:8f:8f:8e:
2c:c7:0d:e2:05:8e:c0:cb:29:f5:59:d7:56:8c:87:
25:b2:8d:3c:9d:36:21:43:f8:06:6f:68:19:3f:5a:
c8:7b:27:ed:8a:fd:02:ad:e8:98:8a:c7:28:42:cf:
bc:c6:5e:4d:e4:52:3b:81:01:23:6c:e4:00:43:cb:
f3:cf:fb:ef:3e:eb:0a:3c:28:02:79:cf:d1:83:6c:
34:59:37:31:06:18:42:db:5f:bf:aa:c7:d4:40:ef:
0d:99:ba:6b:48:a0:32:e5:a1:15:c5:ea:cf:7f:00:
2d:4f:b1:5c:69:f4:f7:4e:4c:8e:74:87:27:52:25:
68:7b:bc:9c:57:d3:41:a7:24:a6:9c:0c:1d:7a:ff:
74:32:fc:1f:87:e3:2e:72:25:c5:84:d4:6e:c3:5c:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:53:00:00:7A:57:B2:C0:25:4B:DD:84:5B:AD:25:3E:A9:99:60
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/U_5TAAB6V7LAJUvdhFutJT6pmWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.35.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d1:27:03:9e:bf:84:36:75:8f:23:ae:5a:01:e2:30:3b:db:
49:18:6a:55:76:0b:83:d1:10:78:8c:bc:03:04:69:16:0e:58:
99:8d:c2:91:39:24:da:32:e1:79:ae:1c:c8:a0:82:98:7d:95:
55:40:b5:0b:62:96:a3:fb:5a:8d:50:b3:08:db:b9:52:bb:c9:
45:ef:62:8b:fb:58:3f:36:06:9e:33:60:04:35:4e:e6:46:ed:
ff:95:10:a7:ed:04:bb:e6:53:50:90:09:4f:46:e3:97:b4:da:
1f:d5:c5:a0:6a:01:c5:3f:7f:e9:e8:11:f6:c6:e9:30:0f:fd:
1e:65:6c:f6:57:3e:50:14:b9:ac:50:de:35:7b:14:5b:0c:5b:
5a:df:a7:43:85:de:4b:cb:19:25:e4:5d:64:56:ab:d3:64:c3:
d9:66:4c:c2:75:62:df:9c:27:3e:97:f0:a9:5e:0c:53:76:fc:
aa:6f:d9:68:04:3c:6d:f6:df:7c:ed:74:f1:20:f4:db:dd:2b:
88:47:13:d6:ee:02:69:40:18:1e:54:08:a2:b4:df:43:31:94:
3c:b0:6b:ab:77:52:0b:8c:37:12:31:dc:fa:62:1d:34:e4:06:
7e:be:83:61:0b:a6:f2:5f:26:9f:7e:d8:6c:78:c4:2b:13:f3:
68:ac:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:03:26 2024 by rpki-client on console-fra.rpki-client.org