Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/ueCqBZVRGFBQvlxmLZ9EJ58c_5s.roa
File: ueCqBZVRGFBQvlxmLZ9EJ58c_5s.roa (raw, json)
Hash identifier: X6BudFj0n/Ymet+5k4JG9etNAapG69Q2mgXdLmRaQbk=
Subject key identifier: B9:E0:AA:05:95:51:18:50:50:BE:5C:66:2D:9F:44:27:9F:1C:FF:9B
Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial: 018CC3B670E73E51EBD49F6E05D7ECBC1111
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/ueCqBZVRGFBQvlxmLZ9EJ58c_5s.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200023
IP address blocks: 146.19.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:70:e7:3e:51:eb:d4:9f:6e:05:d7:ec:bc:11:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9e0aa059551185050be5c662d9f44279f1cff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:21:8d:c7:9e:7a:e9:52:5c:c2:90:33:05:
99:b6:25:cf:be:eb:3e:4c:e9:55:0a:b5:8f:07:9a:
8e:e7:ac:71:29:0e:cd:c6:fd:58:00:b1:a6:a1:85:
8f:22:af:ef:ea:d9:34:6c:c4:5f:ea:82:1a:19:2d:
8d:44:d1:7e:9c:77:e7:e9:c7:18:bf:fc:cf:6a:4e:
f4:54:4e:f3:41:a8:ec:1a:e8:93:ab:cf:af:ec:f3:
c8:31:34:b9:ee:62:9d:f9:d6:5e:bd:f5:82:f3:4a:
32:0d:d9:fd:ce:54:21:f7:72:2c:cb:ca:52:19:06:
c2:a6:4e:25:1d:05:ea:12:97:a6:9f:5a:bf:f5:fb:
92:c0:af:12:a9:0c:82:cd:3e:2e:a9:70:9d:dd:ce:
91:0c:7f:e1:26:29:df:35:13:a4:40:ef:61:ad:83:
c3:5f:36:25:5c:4e:a0:8b:ae:9c:f7:0e:f5:47:95:
0c:dc:3b:2a:6d:53:7b:cb:05:26:91:6c:00:59:2c:
20:f9:b2:e9:d1:a4:52:21:3e:5d:60:46:53:01:4e:
09:9a:b9:20:96:fd:62:2a:b2:45:2e:7b:39:57:5e:
e7:96:a4:aa:a2:a8:81:5c:1f:8a:af:a6:d4:f2:4d:
5a:67:c8:5c:bd:c8:fa:da:d3:cd:d5:3e:fa:a0:48:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:AA:05:95:51:18:50:50:BE:5C:66:2D:9F:44:27:9F:1C:FF:9B
X509v3 Authority Key Identifier:
keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/ueCqBZVRGFBQvlxmLZ9EJ58c_5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.103.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:54:50:6e:02:9e:91:e5:14:f6:64:6d:f6:04:c1:ed:e2:55:
08:c7:73:50:ac:20:90:1e:32:44:b5:ab:e0:dc:66:f4:26:f2:
9f:b9:f0:0d:5f:4a:58:b9:30:9d:f8:da:97:21:2d:4a:39:08:
d9:14:9d:86:3a:0f:73:21:fe:d3:23:d1:d0:1f:17:ed:fe:85:
44:58:36:8e:0a:7c:a1:a4:f1:da:16:b8:80:25:d6:71:9a:d0:
b3:0a:fd:8d:4a:c4:38:72:27:ad:85:bc:58:be:59:de:36:77:
7a:c7:80:89:e1:c1:ae:f7:aa:bb:a2:f6:25:00:8a:ee:2a:1d:
7a:88:6c:ba:8c:a4:8b:19:ea:57:5d:63:d8:f8:50:13:14:07:
0f:c1:2c:7a:8e:1f:3d:76:64:79:e2:17:4f:40:c5:15:fe:8b:
4b:87:0d:35:2f:7f:4c:75:8f:3d:fa:7c:b7:76:02:e7:cb:03:
96:4e:18:4e:5a:dd:13:cf:fd:4c:66:88:89:8a:cd:57:0c:f5:
61:1a:c2:92:17:0f:b7:97:b1:41:28:91:3b:4b:0b:7b:0a:e3:
06:76:0f:95:9e:32:a2:33:06:f3:df:0f:94:83:cf:cc:2a:bc:
f0:fa:9f:56:45:97:a0:d7:15:06:b9:7b:fe:5a:1c:37:06:3b:
8f:8d:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:04 2024 by rpki-client on console-ams.rpki-client.org