Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/u2gi_DPYBi28NHysLns9faZsdnU.roa
File: u2gi_DPYBi28NHysLns9faZsdnU.roa (raw, json)
Hash identifier: 1L0rMfkwPGRVmPIfi/YNwT8CX54up28vaW6fOLLRIiM=
Subject key identifier: BB:68:22:FC:33:D8:06:2D:BC:34:7C:AC:2E:7B:3D:7D:A6:6C:76:75
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019205F7093EB3CD985744553B911484DB7C
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/u2gi_DPYBi28NHysLns9faZsdnU.roa
Signing time: Wed 18 Sep 2024 16:28:48 +0000
ROA not before: Wed 18 Sep 2024 16:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 185.243.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:f7:09:3e:b3:cd:98:57:44:55:3b:91:14:84:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Sep 18 16:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb6822fc33d8062dbc347cac2e7b3d7da66c7675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:eb:ea:f2:35:a7:68:8d:00:b7:2a:bb:99:
e5:39:cc:29:7b:17:88:47:2f:1a:88:7c:66:e1:7e:
d6:4c:a5:76:30:00:a2:9a:1d:e9:aa:2e:ad:5c:1d:
84:e7:e2:65:ca:71:d7:3c:84:e9:f0:84:d1:07:0d:
1f:a8:a9:db:26:df:21:54:1a:b4:e4:75:3d:da:da:
8c:47:71:49:27:9f:7d:7d:3f:40:d6:ec:ad:55:ae:
1c:70:12:65:7a:b1:52:66:e5:ff:ea:e3:ee:56:8f:
61:5b:ea:6b:a9:18:ef:7b:d5:ae:60:c1:ef:18:f4:
f6:b4:25:58:07:2f:f9:5a:e3:2b:47:ad:bb:8d:34:
9d:dc:df:18:48:e0:2b:71:f6:a2:90:52:3f:a9:28:
db:9a:8d:c4:36:4c:87:1a:27:50:ca:4e:fc:3a:25:
6e:a5:2a:54:8f:f4:dc:dc:dc:98:d4:cc:c9:0c:a7:
74:03:9d:ed:e4:aa:43:be:80:43:41:2d:c8:af:87:
e3:c6:07:cc:aa:4f:be:8e:19:d4:f2:4f:01:06:19:
ec:45:75:e4:87:fe:67:02:2a:a5:f5:ab:b4:d3:a4:
e7:7b:d1:88:e3:0c:48:8a:72:c8:a4:16:4f:b8:2b:
44:1e:64:cb:8c:3e:b0:1e:0b:b6:27:65:ea:eb:77:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:22:FC:33:D8:06:2D:BC:34:7C:AC:2E:7B:3D:7D:A6:6C:76:75
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/u2gi_DPYBi28NHysLns9faZsdnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1e:9b:b6:37:3e:22:e6:ab:5f:80:da:ce:00:f7:a3:0f:bd:
29:6a:f2:75:74:69:69:a4:13:bf:47:fc:1a:73:fa:54:7a:d6:
0a:d9:c6:3e:3b:62:9b:a2:8b:96:b4:ce:10:54:b1:2f:30:de:
56:c5:99:4d:31:fe:62:1d:5f:b6:97:0f:4b:bb:9f:ee:72:7c:
b3:dd:5b:da:ae:09:c1:c0:e8:3d:63:10:f6:f2:d5:09:7d:f3:
4f:d4:4a:13:06:b6:54:ea:e4:c1:86:5d:66:7f:b4:b0:d3:b0:
a4:d3:a9:f8:07:74:20:b5:60:08:98:b5:07:a3:a4:fa:41:90:
33:38:01:4b:e4:ff:eb:75:f8:e6:df:89:47:78:af:f0:bd:59:
8d:8e:2f:7f:b9:ea:06:64:c9:b7:6c:54:bb:04:30:9f:3a:0f:
12:cd:46:96:12:e0:63:c2:5a:f9:51:85:59:07:15:2f:4b:c9:
4e:95:64:0e:0f:a8:16:85:ec:b1:66:9a:e4:d7:cf:f0:4d:79:
d1:ee:3e:dc:fd:db:f8:37:e5:61:dc:54:39:32:1f:92:7b:02:
0c:51:6c:71:c5:e1:19:c7:fb:df:54:78:2a:3c:0b:48:14:09:
a0:a0:e3:f9:f5:a2:b5:7d:cd:72:99:38:c3:37:b2:27:ed:8f:
f2:ca:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:28:08 2024 by rpki-client on console-fra.rpki-client.org