Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/uv6dxkNqyoodQALij4dQFFrrnaI.roa
File: uv6dxkNqyoodQALij4dQFFrrnaI.roa (raw, json)
Hash identifier: kxF/jSyvoVzn+NWjPJAoQ4VjcFC5WZl3QLrYu2epLow=
Subject key identifier: BA:FE:9D:C6:43:6A:CA:8A:1D:40:02:E2:8F:87:50:14:5A:EB:9D:A2
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 018CC801E6922E68BED57106C2D4EC03476E
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/uv6dxkNqyoodQALij4dQFFrrnaI.roa
Signing time: Tue 02 Jan 2024 02:30:16 +0000
ROA not before: Tue 02 Jan 2024 02:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 185.140.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e6:92:2e:68:be:d5:71:06:c2:d4:ec:03:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Jan 2 02:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bafe9dc6436aca8a1d4002e28f8750145aeb9da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:f7:2b:fb:bc:f2:f3:e7:aa:c3:ae:06:31:
d7:f8:11:17:14:c5:4e:86:c8:7c:e8:f1:f5:1f:11:
15:75:02:be:3b:e6:a3:c4:41:79:64:ce:5e:05:34:
43:6c:43:f7:1c:f2:0b:ec:ec:f7:58:8c:47:75:5c:
4f:fe:86:2e:f9:55:6d:4f:1c:36:55:68:3c:e5:0a:
32:24:46:71:c8:50:9b:54:29:1d:e0:fd:e2:06:b9:
13:43:6b:bd:70:95:b2:d5:5a:2f:0b:66:05:10:88:
bd:40:3d:bd:de:03:37:f0:a3:8b:46:44:4a:4f:02:
71:08:31:fa:67:aa:95:d2:b6:53:09:22:8d:32:30:
72:fa:84:1c:29:56:59:7e:84:27:22:3f:95:21:9a:
74:c6:d7:96:f6:ec:8c:cb:14:97:8d:21:58:2a:48:
6c:a5:00:a1:67:36:6c:0d:4c:52:9b:b2:d6:4b:19:
d4:e7:06:d3:c9:a3:3c:e6:d8:70:60:9b:c4:13:35:
c5:24:74:7e:02:da:ff:0c:df:b8:59:4f:87:9a:e2:
1b:5e:e4:9e:fb:b7:3f:83:c9:85:4b:00:0a:bb:fe:
ba:36:53:a2:ff:b8:68:1f:38:97:5a:3b:c5:ca:2b:
f4:a7:59:e0:5a:48:1c:90:5f:4b:aa:63:00:65:5a:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:9D:C6:43:6A:CA:8A:1D:40:02:E2:8F:87:50:14:5A:EB:9D:A2
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/uv6dxkNqyoodQALij4dQFFrrnaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.53.0/24
Signature Algorithm: sha256WithRSAEncryption
58:92:7a:44:17:83:a0:de:c4:f5:e9:c9:f0:62:28:9f:f4:0d:
c3:f3:fb:6c:2e:a5:30:7c:3e:48:df:a7:c9:99:a2:0d:39:2a:
d2:84:29:76:02:56:c9:ec:e0:0c:28:05:3c:be:a9:88:53:55:
5f:b0:57:76:85:63:91:98:0d:81:f2:fe:75:91:d3:6e:96:6d:
b9:2c:97:4a:b3:11:b4:7b:9a:e4:6f:f4:a6:0e:70:2f:2e:c2:
07:14:02:f1:95:81:75:bd:dd:ea:dd:bc:0c:e6:08:2b:81:85:
9c:24:c1:eb:ee:19:e6:59:58:6f:ad:98:16:62:9c:47:78:1e:
d5:73:42:15:3e:a3:fd:ab:d0:16:0c:2d:0a:30:81:55:12:e2:
26:6b:97:98:8f:dd:23:59:2e:0d:f5:a9:34:bb:59:65:48:e7:
5f:3c:56:5c:87:3f:8d:f1:d8:cf:42:e1:1f:20:8f:c3:1b:2e:
e0:a4:78:ab:2c:7d:d9:34:ca:9c:37:ec:30:7c:e8:4f:ec:2d:
20:a2:8c:46:e1:27:15:36:ae:6a:f6:de:47:31:b7:d6:21:92:
00:6a:6a:1c:bb:8d:df:75:6e:39:1a:a9:0b:1a:08:f5:76:17:
d5:40:a0:07:c4:d1:90:be:b5:dc:64:ab:c9:b0:a4:e5:27:f0:
2a:6a:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 19:03:12 2024 by rpki-client on console-fra.rpki-client.org