Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Uti1SAy92Et_CTVjlf6pZIFZkwQ.roa
File: Uti1SAy92Et_CTVjlf6pZIFZkwQ.roa (raw, json)
Hash identifier: yWMGjwV2TYPWxrCWoa6gi2AZUYT3T+LO4rX8llj8d08=
Subject key identifier: 52:D8:B5:48:0C:BD:D8:4B:7F:09:35:63:95:FE:A9:64:81:59:93:04
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 018CC6B826D3C21722D07469D250FA816E07
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Uti1SAy92Et_CTVjlf6pZIFZkwQ.roa
Signing time: Mon 01 Jan 2024 20:30:06 +0000
ROA not before: Mon 01 Jan 2024 20:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16340
IP address blocks: 95.174.32.0/19 maxlen: 19
82.115.64.0/19 maxlen: 19
217.144.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:26:d3:c2:17:22:d0:74:69:d2:50:fa:81:6e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d8b5480cbdd84b7f09356395fea96481599304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:91:ec:74:7d:a6:47:e0:d3:52:26:8f:7d:
9c:07:16:eb:79:01:8f:61:8f:59:86:b5:b0:8b:f2:
e4:85:fe:f0:7c:ca:c3:c5:86:71:b9:28:64:53:d0:
6a:b5:20:21:dc:3c:6a:4d:43:c2:31:5d:f6:2c:eb:
4b:f8:cd:15:a2:06:8f:78:e4:1d:c1:26:bf:fd:b5:
8d:ef:73:08:bb:f8:aa:95:4b:fc:a8:b3:c2:47:05:
d5:cd:1b:a1:29:15:e6:eb:56:3b:0d:a2:1a:97:ce:
e7:02:fb:c8:65:d4:c9:78:10:c6:f5:56:5d:bd:b0:
b9:54:aa:9d:75:49:e3:00:4c:2d:a7:dc:12:af:a9:
c9:27:12:87:f7:86:cb:f9:4e:de:b1:88:73:9d:3a:
77:2a:8a:30:c4:a2:25:4a:28:3d:84:a2:a1:3b:22:
66:9d:0a:7b:57:3c:d6:5e:a0:f8:3a:82:92:c5:d8:
e3:f4:fb:59:09:9d:8c:12:27:e4:10:04:69:c1:3d:
3c:4d:45:d5:c3:cc:eb:ae:b3:63:83:52:2a:88:6a:
e3:8b:61:fe:83:59:f7:61:fe:8c:64:4e:3a:b2:27:
72:54:1d:06:86:7b:42:c7:4f:9a:ab:a4:69:c0:b2:
29:de:a3:dc:ff:48:b9:1d:27:e6:cd:e1:80:53:b7:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D8:B5:48:0C:BD:D8:4B:7F:09:35:63:95:FE:A9:64:81:59:93:04
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/Uti1SAy92Et_CTVjlf6pZIFZkwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.64.0/19
95.174.32.0/19
217.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:71:f3:c3:c6:19:ed:ad:3b:9b:e0:4d:75:f4:69:76:13:b8:
d2:d7:a6:40:27:24:39:0d:90:07:8a:5d:97:82:be:a8:7a:d2:
10:58:1e:16:c2:68:d9:8c:a5:14:e8:b3:02:42:25:a0:ad:ef:
1c:94:8b:4c:8c:6c:52:9d:15:33:1a:2c:52:fb:b1:b5:4b:cb:
c7:2e:af:65:a1:ed:4d:54:80:bf:02:b9:ac:4f:ce:64:bb:18:
b5:d5:59:9f:3a:3f:3f:60:6d:a1:25:b4:ad:ad:84:f9:ed:93:
75:04:b7:b4:1c:59:c7:fe:d2:64:e0:6c:be:0f:41:6b:9c:35:
31:10:9a:29:79:1c:0e:2b:0e:49:9e:bc:c7:d7:e3:9f:4d:c4:
58:17:4b:6f:8a:e2:7d:b7:7e:15:64:85:1a:dd:a9:d1:e9:f9:
57:f2:58:b4:ed:fa:34:3b:89:dd:56:b1:f1:ac:b3:9c:e0:13:
8e:39:21:19:71:91:ac:1b:9e:3d:7f:6c:48:6d:a2:d9:79:31:
a2:ea:c6:b1:9f:4b:5e:db:0a:6a:b1:d6:8d:71:db:89:a3:4f:
e9:ec:b2:6b:46:cc:c2:ac:b4:e5:41:ce:c8:74:f1:dc:4b:03:
6e:b5:c1:5f:13:24:36:ea:f4:a9:24:75:7a:46:bb:eb:2f:db:
c7:75:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:52:43 2024 by rpki-client on console-ams.rpki-client.org