Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UMsqwx_jXbyYM97qQFJ0lzQx7RM.roa
File: UMsqwx_jXbyYM97qQFJ0lzQx7RM.roa (raw, json)
Hash identifier: vdyPzI7UncqU9MXg1GkzRksC9Nm9wwXxHX7wZw4USVg=
Subject key identifier: 50:CB:2A:C3:1F:E3:5D:BC:98:33:DE:EA:40:52:74:97:34:31:ED:13
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D3CB0191F461F4131155DAAAD696B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UMsqwx_jXbyYM97qQFJ0lzQx7RM.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210338
IP address blocks: 2a0e:aa07:e400::/44 maxlen: 48
2a0e:aa07:e02d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3c:b0:19:1f:46:1f:41:31:15:5d:aa:ad:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50cb2ac31fe35dbc9833deea405274973431ed13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:52:73:20:f7:d4:74:11:91:a4:bd:a0:66:
6c:43:da:68:c5:7a:12:58:e5:1a:4e:bc:54:7a:dc:
e4:e4:51:e8:97:c9:37:e2:26:b8:90:7b:ac:7a:ab:
47:51:d3:c8:fa:5e:83:e2:fa:ee:cf:ce:d1:a6:38:
8d:94:d9:be:ec:b8:84:48:f3:64:26:9e:fb:a8:97:
79:90:c5:5f:7d:40:6b:32:63:ed:e6:30:df:98:c4:
5b:4c:7b:8a:cd:d4:08:82:50:9e:5e:43:90:90:11:
81:ac:a0:28:15:e0:5c:82:44:1b:e8:3b:55:c0:8f:
62:2a:0d:5d:cc:fe:8b:7c:a7:be:97:29:30:dd:8c:
52:a9:b0:5f:a7:fd:b8:e5:0c:d5:a3:de:9a:3b:ba:
19:2c:84:dd:44:f6:8a:1c:91:b7:c5:26:a7:01:d8:
de:42:e1:d2:87:58:57:ad:0e:c9:0d:22:ea:2c:8f:
78:62:23:c4:12:0e:db:f7:31:be:91:cf:47:a1:6c:
72:ff:00:10:f4:55:78:ef:12:8e:5f:f4:19:16:03:
00:2b:67:0a:51:d2:49:88:00:a3:4a:6d:10:56:67:
52:e0:c1:07:b7:39:77:4f:57:bf:3b:02:59:9f:3f:
bd:63:f5:fc:c9:39:07:6f:d5:8b:40:2a:8e:c4:4e:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:2A:C3:1F:E3:5D:BC:98:33:DE:EA:40:52:74:97:34:31:ED:13
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UMsqwx_jXbyYM97qQFJ0lzQx7RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e02d::/48
2a0e:aa07:e400::/44
Signature Algorithm: sha256WithRSAEncryption
c4:e6:aa:de:f0:fe:c3:0d:f7:bc:43:f5:c4:25:3a:fd:ee:72:
66:de:8b:50:26:e9:be:9d:df:cb:8b:44:ea:95:a4:80:cd:b6:
7e:81:a8:d1:7f:0b:53:54:cb:60:09:30:df:ab:af:1c:54:fa:
c8:ba:d4:d0:3e:4d:43:79:2a:36:90:a9:10:bb:04:39:3d:b5:
af:14:87:0e:0a:60:47:ae:50:38:76:e4:40:c6:99:15:f5:b1:
92:48:8a:33:d6:77:3a:3f:60:e7:d2:5c:ce:ba:20:74:e8:f9:
8f:5e:c8:91:b7:07:9f:f9:08:a7:43:2d:55:20:17:68:85:e0:
57:e9:33:23:2f:44:0c:50:33:ee:83:ab:b5:71:1a:d2:8e:5f:
6c:87:76:db:e8:d2:36:68:db:41:65:ab:d5:cc:77:aa:f6:55:
82:ca:b1:e9:d0:b7:80:42:73:69:4c:f1:d1:bb:83:9b:89:c1:
b1:00:75:93:0d:5c:cb:01:2e:89:17:93:56:1f:80:c1:4a:2c:
dd:09:14:5b:4d:43:31:1f:81:b4:28:a1:94:bf:5e:dd:4f:b1:
03:7e:98:82:a0:4d:4e:c3:cd:96:0d:d8:de:b8:e4:40:05:b2:
06:34:67:69:c4:c5:ac:30:2b:0d:e6:97:14:8b:b4:30:1d:02:
9e:a3:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:27:01 2024 by rpki-client on console-ams.rpki-client.org