Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/UbR_f9DhXyzNkbAZIVHt0mOFMg8.roa
File: UbR_f9DhXyzNkbAZIVHt0mOFMg8.roa (raw, json)
Hash identifier: lxI9XBkORts8cBaLkQeyRyUCp/GDcobJJbnF1uM1Lsg=
Subject key identifier: 51:B4:7F:7F:D0:E1:5F:2C:CD:91:B0:19:21:51:ED:D2:63:85:32:0F
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB5703441DFC443D02FDE23CABD9B
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/UbR_f9DhXyzNkbAZIVHt0mOFMg8.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41318
IP address blocks: 195.168.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b5:70:34:41:df:c4:43:d0:2f:de:23:ca:bd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51b47f7fd0e15f2ccd91b0192151edd26385320f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:65:cf:d8:9c:a1:d1:49:c4:d0:1e:6a:23:
a1:9c:f1:a7:64:b4:e8:ac:71:6c:84:6f:a7:2b:95:
31:22:59:40:91:4c:7d:fe:4e:8d:f2:8e:7c:15:39:
4a:37:e3:a3:a3:43:ba:5f:27:64:c5:39:1a:23:d4:
b6:44:65:a3:68:bc:51:cc:fe:aa:a5:b5:b7:db:76:
88:17:31:f6:ad:28:2f:01:27:21:d3:82:90:0f:e2:
3f:8a:76:8e:74:90:82:6d:d6:86:59:81:d8:ca:04:
5c:44:5c:40:cf:09:3c:40:4d:05:56:55:a8:f4:00:
90:e6:b8:90:65:13:c9:80:16:95:38:cf:4a:2c:42:
73:3c:b4:0b:69:99:34:9d:82:46:5b:ca:4a:89:2f:
12:33:52:3a:91:16:3e:89:05:be:49:ce:4b:f6:3e:
54:c9:df:04:65:32:73:b3:1d:40:22:e3:4b:10:13:
19:04:20:dd:5a:89:79:9c:a7:8e:ea:de:ba:ee:3f:
3e:4a:e2:d5:13:d5:5a:9f:aa:70:bb:a1:fd:17:81:
f7:76:93:87:95:6a:bf:24:23:64:9f:84:73:df:7d:
bc:95:38:91:23:15:3a:2e:df:8e:90:ca:64:ef:e3:
c9:3b:b2:d6:77:d2:54:38:34:ea:6f:1a:cf:42:c3:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:7F:7F:D0:E1:5F:2C:CD:91:B0:19:21:51:ED:D2:63:85:32:0F
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/UbR_f9DhXyzNkbAZIVHt0mOFMg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.208.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bf:73:d7:4c:f3:ba:9b:c2:e9:8a:5a:c8:47:69:da:53:0e:
10:25:42:7c:bd:9a:6a:a6:c9:25:bc:42:38:d2:6e:ce:b2:ee:
9e:21:ff:0e:a1:ac:67:be:66:9a:13:f4:1d:fe:f4:12:29:b0:
63:a9:14:06:27:05:43:a7:9f:34:1d:0a:cb:8e:5b:01:6d:d9:
d2:29:ce:66:f5:ad:ab:60:ed:02:6d:5e:99:91:be:74:08:aa:
27:f8:52:58:d1:3b:77:62:04:08:46:aa:48:43:53:d1:85:a4:
2e:c9:97:73:e7:21:82:ee:1c:43:46:b9:f6:f9:98:96:58:ea:
b7:2c:03:3d:f2:50:21:13:ae:f6:96:f5:fe:da:85:16:08:fe:
47:ec:c1:2d:a6:a2:65:9e:dd:62:4e:2d:40:ee:57:39:2e:93:
af:e9:fb:88:8d:02:35:f8:97:b8:de:6a:5a:39:28:57:56:9c:
57:af:48:83:63:63:44:b6:2c:89:ad:23:64:dd:47:23:f4:8e:
79:75:14:fd:b2:0d:c8:61:43:38:eb:fa:97:8e:b0:e0:84:c0:
2f:57:02:78:4f:8c:c6:92:fc:b6:f6:87:ec:d3:c8:56:36:b9:
b5:f3:cb:2e:cf:e8:4b:49:96:bc:ba:9d:ff:a4:b7:e8:e5:02:
e5:08:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:13:58 2024 by rpki-client on console-ams.rpki-client.org