Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/u1-raolHHCjtIUqRSc2VcggjnJ0.roa
File: u1-raolHHCjtIUqRSc2VcggjnJ0.roa (raw, json)
Hash identifier: E4tR0nG73BYwz/k/CK25OOfNI4ldlja6QnoT6z4AHfg=
Subject key identifier: BB:5F:AB:6A:89:47:1C:28:ED:21:4A:91:49:CD:95:72:08:23:9C:9D
Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial: 018CC5DCEBFAAF8347F14FCA5E9F517AC0DF
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/u1-raolHHCjtIUqRSc2VcggjnJ0.roa
Signing time: Mon 01 Jan 2024 16:30:38 +0000
ROA not before: Mon 01 Jan 2024 16:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 138.131.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:eb:fa:af:83:47:f1:4f:ca:5e:9f:51:7a:c0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Validity
Not Before: Jan 1 16:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb5fab6a89471c28ed214a9149cd957208239c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:8e:ff:6b:79:b8:86:ef:d8:8b:97:30:48:
71:4a:2f:2e:39:bb:f1:e7:01:53:bc:32:ce:95:20:
05:56:d8:2d:79:b8:e7:26:7f:db:cc:b9:56:7a:fb:
70:97:51:ae:ec:37:df:7d:ff:1f:74:09:b3:88:25:
1b:0b:ea:7a:66:25:4b:3a:36:09:8b:e2:67:84:8c:
8d:95:ce:cf:29:8c:67:f0:7f:b3:14:53:f4:d5:a3:
74:b0:1d:22:a5:35:09:7f:45:df:6f:32:2d:35:90:
cf:c7:08:cb:a6:99:b0:fa:48:b2:d1:3e:c9:c8:c5:
c7:9e:8d:d2:9b:64:8c:e3:ae:cb:97:9f:1c:78:e8:
8d:13:33:1d:38:69:64:16:b1:9e:dd:c9:9f:cf:13:
56:4b:15:2b:98:b5:40:6f:c4:38:5b:84:aa:83:64:
87:da:a2:af:a0:44:0d:a4:42:08:b9:c0:2d:67:75:
02:d3:9c:c4:5d:4d:27:db:32:de:a0:c1:d6:6a:c7:
6a:cc:ca:06:bc:cb:99:fc:dc:19:9c:96:91:1e:bd:
43:5d:38:c1:d6:a3:4c:d5:a7:83:d4:03:eb:06:a9:
4e:5b:f0:e5:b8:47:1b:10:ea:9b:23:50:15:71:6a:
32:36:c2:7a:ee:f9:7d:9c:5f:dd:3e:31:32:39:6b:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:AB:6A:89:47:1C:28:ED:21:4A:91:49:CD:95:72:08:23:9C:9D
X509v3 Authority Key Identifier:
keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/u1-raolHHCjtIUqRSc2VcggjnJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:0d:fb:1d:cc:26:e9:1d:a2:d8:f7:ca:17:49:ae:aa:e5:71:
57:b8:0e:e6:0b:9e:82:22:c8:1c:6b:a3:33:87:c6:5f:99:97:
d2:72:d3:a4:c8:a2:55:05:8c:a1:9d:d0:2c:59:38:30:0e:a2:
fb:5d:e9:05:ac:12:56:64:8f:e2:8c:d1:ea:e9:d1:6d:24:a6:
84:3c:28:9d:6a:38:bd:6f:a1:19:6b:30:cc:04:73:ed:57:52:
d8:e8:46:cc:f5:60:16:7c:8b:4f:0f:a4:04:be:f4:c6:23:8b:
c6:95:17:4a:9a:a4:cf:c6:f3:93:6a:3b:09:7a:3d:15:95:7e:
3a:5b:70:e9:76:0f:06:eb:29:6d:9d:a6:73:4d:12:87:55:8a:
af:13:f8:af:6d:a0:c1:e3:d6:11:67:d4:08:a8:f1:10:83:00:
cb:06:82:69:4c:c1:3a:43:c8:f7:26:50:09:bf:07:56:19:dc:
80:88:1a:61:73:8c:c1:3a:7b:d5:fb:ea:f1:cf:b3:a2:51:56:
46:22:dd:d8:c2:89:fc:54:1f:78:16:ee:4b:c8:09:59:68:5d:
b7:16:28:32:63:8e:15:8f:a4:47:d2:18:de:f3:27:f1:d6:b1:
df:09:d8:d6:e7:6a:cf:a4:bf:63:81:b9:3e:a5:f1:45:07:b2:
ce:63:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:00:55 2024 by rpki-client on console-fra.rpki-client.org