Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/u0k3VYBJJB1GPeWB1kaE9RvdkTQ.roa
File: u0k3VYBJJB1GPeWB1kaE9RvdkTQ.roa (raw, json)
Hash identifier: oArujvYkNDHNMOkBkezX8UG1z37SLjfuskmkC0puE3w=
Subject key identifier: BB:49:37:55:80:49:24:1D:46:3D:E5:81:D6:46:84:F5:1B:DD:91:34
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 018CC64B5D8A5FD3252FD88651812B091F8F
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/u0k3VYBJJB1GPeWB1kaE9RvdkTQ.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62121
IP address blocks: 91.209.39.0/24 maxlen: 24
193.46.69.0/24 maxlen: 24
195.242.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5d:8a:5f:d3:25:2f:d8:86:51:81:2b:09:1f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb4937558049241d463de581d64684f51bdd9134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:1c:ff:4a:64:31:cf:fd:28:e0:5f:a1:f5:
9c:59:fb:07:2f:a6:8e:0e:74:e6:21:48:bb:16:4e:
8c:d7:92:88:e5:2c:5a:1c:b2:5e:10:98:80:b2:e5:
30:c2:b8:bd:16:a7:19:39:e5:65:bc:5b:a1:3f:1d:
21:12:a3:2b:a2:48:2f:7f:92:ce:81:72:a8:3e:97:
3e:cd:10:f4:50:ad:63:f7:18:11:ac:39:14:4d:4b:
32:0f:72:ff:11:d3:e7:fe:25:33:1d:82:f6:b3:79:
1b:7e:41:db:29:23:0e:3b:5d:79:ad:f0:2f:8c:07:
f3:b4:a2:e8:ad:66:50:17:fd:16:f4:ee:7c:0a:08:
4b:f2:9a:a8:43:92:fc:b4:fd:96:94:46:be:55:99:
a9:7a:88:1f:54:e7:d8:94:97:50:43:4a:e6:39:93:
96:da:0a:ca:4a:69:db:78:51:3e:54:5b:98:2a:09:
57:20:26:2b:f7:0f:99:6e:a3:28:85:e1:d9:4e:ef:
02:89:70:07:96:38:41:1d:4c:e3:e8:3b:9d:0f:e9:
6a:a1:cd:3c:cf:27:a2:5b:9c:8f:16:2f:11:1a:2f:
b7:27:bf:d3:aa:a4:3b:c9:1a:ef:88:f4:67:47:10:
6e:21:26:03:4d:f1:2b:89:af:3f:f4:92:64:64:48:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:37:55:80:49:24:1D:46:3D:E5:81:D6:46:84:F5:1B:DD:91:34
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/u0k3VYBJJB1GPeWB1kaE9RvdkTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.39.0/24
193.46.69.0/24
195.242.130.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:c3:02:ff:38:1c:17:b9:72:3e:1a:1b:9d:a6:68:d7:89:a8:
6b:cf:9b:ff:1b:3b:4b:ae:e2:78:de:44:ec:50:13:26:38:d7:
99:42:80:8a:ba:23:5b:14:bd:a8:66:90:5c:7b:26:40:47:ac:
00:ae:b1:f8:eb:29:90:de:66:dc:6a:4c:5f:a2:5e:e4:a7:54:
0e:af:cb:e8:2a:af:a3:d4:f3:14:7b:4a:4a:1a:b7:63:5e:8e:
c2:bb:b3:65:4f:18:03:60:fa:0a:fc:95:48:9e:66:22:a1:8a:
47:6d:42:ce:a4:48:63:9b:92:2a:e4:a2:5d:94:f0:00:53:c6:
4e:c3:98:ba:49:a9:ab:43:f1:02:c8:e6:f5:52:f1:ef:9b:6a:
a1:e2:ab:19:7e:bb:e8:d7:1f:f7:42:0c:c1:8d:58:ed:52:60:
d6:04:7e:20:f9:df:9b:b1:41:52:b8:b9:a6:a9:bd:60:af:dd:
97:77:85:b4:ee:45:05:4a:fb:b5:08:5b:1c:f5:15:c4:7f:ff:
df:6f:c0:2d:41:64:3a:be:db:5e:fd:28:9e:9b:17:ea:df:3a:
f5:cd:1a:87:5d:80:ec:eb:1d:38:b3:f8:7d:c1:99:34:00:96:
44:d9:38:81:b6:0e:f3:b9:3a:de:d3:56:36:49:9a:55:71:a7:
c3:d7:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:57 2024 by rpki-client on console-ams.rpki-client.org