Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/uJkEb2U_aUiY-E_PaEjicwkOgDI.roa
File: uJkEb2U_aUiY-E_PaEjicwkOgDI.roa (raw, json)
Hash identifier: 9PeVVFIAi2ngxXUgdpiMU/8y4bxCROSOtgTtDVWRyxg=
Subject key identifier: B8:99:04:6F:65:3F:69:48:98:F8:4F:CF:68:48:E2:73:09:0E:80:32
Certificate issuer: /CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Certificate serial: 018CCA2BE57B026A945ED80A97F530DCF4E5
Authority key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/uJkEb2U_aUiY-E_PaEjicwkOgDI.roa
Signing time: Tue 02 Jan 2024 12:35:23 +0000
ROA not before: Tue 02 Jan 2024 12:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9063
IP address blocks: 185.53.156.0/22 maxlen: 22
2a02:2c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e5:7b:02:6a:94:5e:d8:0a:97:f5:30:dc:f4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b899046f653f694898f84fcf6848e273090e8032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:5d:3a:c9:68:c0:15:60:53:11:11:49:1f:
4c:91:07:df:03:e0:7a:0b:c0:0a:9d:a1:31:0b:d2:
f0:70:36:51:b5:00:03:27:77:91:c5:f9:df:d8:01:
aa:6a:12:5f:9f:d0:f9:73:90:1b:e5:e3:bb:45:a6:
4c:2b:c0:8d:a5:82:88:f1:d4:4a:cf:21:c1:1b:91:
57:09:59:9f:9d:cc:da:b6:1f:ba:b7:19:4e:00:0b:
11:a1:80:e8:51:00:11:9d:38:46:99:fd:e9:e4:5d:
ba:9a:64:05:ea:c4:e5:db:58:fd:36:ad:66:e4:ea:
77:cc:5c:7f:3a:20:f7:53:90:cb:1a:1e:40:7d:2b:
3e:59:63:40:b9:2d:2b:8f:25:30:27:ad:a8:de:f5:
58:75:25:80:4a:08:a5:8b:07:85:08:ae:4c:2d:83:
8a:4b:16:8d:73:4d:84:a9:ad:52:91:1d:60:ba:a1:
21:b8:1e:de:0d:a1:2a:db:ad:57:a9:ff:e9:c5:27:
31:56:e0:8d:92:78:3b:25:b4:a9:c6:e7:12:fb:af:
aa:30:40:e5:dd:87:fa:22:86:f2:8d:12:78:42:94:
68:c6:e8:55:f3:23:dc:49:b6:be:ed:0b:c0:75:a5:
04:90:a7:24:1a:e5:89:50:77:88:5d:89:20:48:33:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:04:6F:65:3F:69:48:98:F8:4F:CF:68:48:E2:73:09:0E:80:32
X509v3 Authority Key Identifier:
keyid:6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/uJkEb2U_aUiY-E_PaEjicwkOgDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.156.0/22
IPv6:
2a02:2c60::/32
Signature Algorithm: sha256WithRSAEncryption
da:9d:03:e5:19:40:1a:95:55:a4:01:b6:9d:fd:bc:16:f0:40:
85:dc:ac:ce:d8:36:85:7d:4d:0f:66:4d:5d:17:d7:85:0d:3d:
57:a1:d0:96:99:98:a2:06:81:51:3d:02:0b:1d:96:1e:86:23:
d9:c5:f1:1d:90:57:ab:ef:0a:74:79:78:89:90:21:11:1e:44:
a7:d9:fa:de:76:e1:4c:81:79:e7:03:73:ae:e5:28:b1:34:51:
58:38:1d:21:8f:00:3a:75:b9:1c:e4:23:6d:0f:0f:05:e2:4a:
b2:4f:71:ea:47:d9:79:57:54:88:fc:42:85:8e:f6:91:ae:30:
8e:70:f7:56:1e:c0:78:dc:f2:2c:8c:15:21:3c:79:d0:ef:c5:
8a:12:8e:e1:15:5d:9d:26:4d:2a:4b:d8:94:d4:d9:8a:28:11:
c6:ba:d0:82:b7:8e:27:d6:eb:4c:5a:76:1b:e6:ac:a5:f3:ec:
3e:d8:8f:03:e4:c3:96:e5:a1:31:a5:4d:c0:01:27:c9:75:39:
f4:ad:07:8a:7e:86:de:e6:27:b6:01:60:1a:30:6b:04:38:d1:
ab:43:e8:a4:a9:c5:95:8f:3f:84:c4:b5:d9:0d:a1:18:90:77:
5f:4a:b2:c6:91:c4:f0:13:e5:7b:34:cc:7b:70:27:c9:bf:37:
6c:33:12:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:36 2024 by rpki-client on console-fra.rpki-client.org