Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/uTFhkZ2r_lKVtusmg42FiOjnfSc.roa
File: uTFhkZ2r_lKVtusmg42FiOjnfSc.roa (raw, json)
Hash identifier: aUl2MedU4hUxnyFDqzhJx8LMyqaTSvJU+TutfRo9V4c=
Subject key identifier: B9:31:61:91:9D:AB:FE:52:95:B6:EB:26:83:8D:85:88:E8:E7:7D:27
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 018CC7271AA0B118874E3191BAEF1750D01E
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/uTFhkZ2r_lKVtusmg42FiOjnfSc.roa
Signing time: Mon 01 Jan 2024 22:31:17 +0000
ROA not before: Mon 01 Jan 2024 22:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42473
IP address blocks: 176.119.152.0/24 maxlen: 24
176.119.155.0/24 maxlen: 24
176.119.153.0/24 maxlen: 24
176.119.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:1a:a0:b1:18:87:4e:31:91:ba:ef:17:50:d0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Jan 1 22:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b93161919dabfe5295b6eb26838d8588e8e77d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:93:12:36:59:4f:58:77:37:a9:be:46:24:
97:06:15:66:42:b1:5c:76:12:7c:34:88:2b:b5:f7:
b3:68:08:d4:01:8b:ba:ba:60:42:16:89:ce:e5:30:
ae:81:bb:6a:ed:b7:ea:3a:b1:a3:75:33:96:05:9f:
ec:c0:f0:40:fe:6c:67:12:bd:8b:3b:ae:f0:27:c0:
7a:80:f5:69:8e:1a:45:b8:ba:08:ba:f1:b7:92:2e:
29:8c:0b:de:6d:88:ec:25:12:55:be:de:41:0f:26:
f3:c5:38:46:26:b2:88:b5:cb:1e:58:34:df:d9:9d:
22:29:5b:64:2c:0d:28:4d:1d:a0:4e:d8:45:20:7e:
9a:3f:89:b5:79:29:99:14:40:5a:af:29:2e:d2:03:
b4:08:56:1f:2c:ae:98:e0:4c:70:dd:4e:b2:ed:a6:
3b:e1:cb:2e:46:bb:e5:25:86:33:d6:84:03:3c:0f:
12:39:87:09:b9:5d:0c:97:aa:0f:da:a7:1e:28:cd:
8f:5e:2a:74:6c:e3:64:0b:ba:6a:80:f3:f2:58:d4:
58:a9:40:b2:9b:16:73:f7:1c:30:9f:5c:53:56:ce:
60:ea:37:47:f7:17:2c:ca:92:3a:08:41:d5:88:d1:
fc:69:18:f7:af:45:90:a1:5b:26:d8:de:ab:e2:a1:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:31:61:91:9D:AB:FE:52:95:B6:EB:26:83:8D:85:88:E8:E7:7D:27
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/uTFhkZ2r_lKVtusmg42FiOjnfSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.152.0/22
Signature Algorithm: sha256WithRSAEncryption
45:97:e8:b2:6b:3f:3b:b8:17:09:6d:3f:58:85:62:06:09:8b:
f6:fd:c5:af:9b:e0:85:16:dc:ae:87:c4:56:e6:71:90:d5:6c:
97:19:ba:0f:b9:77:a9:f0:75:f8:05:2d:94:26:f3:65:09:ab:
d0:29:6f:04:5c:3c:51:e1:68:d8:ee:e0:53:2b:ba:d1:8a:7e:
86:3b:b4:78:5c:9b:6c:c0:41:ef:c3:ef:64:74:1a:4a:3b:60:
68:0b:ac:96:f7:b6:a0:ca:b9:60:ba:49:1e:48:9f:9c:d3:8a:
e9:58:01:8e:15:b1:b2:29:7f:1d:b8:fa:81:d3:a4:3f:dc:0a:
54:4e:d1:c8:10:df:ae:d0:1d:0f:57:29:7e:ac:06:d1:9c:24:
80:38:a2:52:00:09:5b:e5:d4:7d:8c:6c:af:7b:ed:c8:21:57:
da:63:89:cf:dd:a5:d6:15:5b:e6:ea:18:44:48:da:3b:af:a5:
a0:20:07:db:eb:14:31:81:b9:b3:0b:43:a4:e6:b8:7a:57:7a:
7e:45:ec:88:84:f1:50:3e:3b:e6:12:03:7c:08:f7:54:30:1e:
0a:d2:0e:d0:4e:b3:91:82:66:1c:03:a6:c5:e9:8b:86:11:9a:
f1:32:9e:31:b4:de:31:cd:9b:9e:09:72:dc:47:c2:5d:25:15:
d8:66:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:54:56 2024 by rpki-client on console-ams.rpki-client.org