Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/ULu11Ic7SllCZAMB_CNe6mBrInU.roa
File: ULu11Ic7SllCZAMB_CNe6mBrInU.roa (raw, json)
Hash identifier: D4wCdKHRai1f2jivcWhgjd03uha35vIC5HadDIY2NyU=
Subject key identifier: 50:BB:B5:D4:87:3B:4A:59:42:64:03:01:FC:23:5E:EA:60:6B:22:75
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 018CC649A8E6491326A48EA93184E4521EFA
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/ULu11Ic7SllCZAMB_CNe6mBrInU.roa
Signing time: Mon 01 Jan 2024 18:29:25 +0000
ROA not before: Mon 01 Jan 2024 18:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 62.122.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a8:e6:49:13:26:a4:8e:a9:31:84:e4:52:1e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Jan 1 18:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50bbb5d4873b4a5942640301fc235eea606b2275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:8b:d9:af:dc:9c:d8:1a:3f:fa:3d:0c:78:
e0:72:21:60:76:6c:10:ef:bf:70:6f:55:3a:21:47:
cf:95:82:7c:5d:7b:e8:39:e2:f4:86:d5:3e:18:dc:
ef:25:51:f7:eb:16:5d:a9:82:44:4c:e9:8d:ce:28:
5b:29:4a:54:68:15:da:88:ce:3a:9d:81:46:5a:a8:
fb:70:7b:f4:6b:60:21:da:45:46:9f:76:5e:c3:b2:
93:f3:38:0c:c3:9e:0a:36:84:bd:f0:97:b2:00:5c:
ef:8b:c6:4e:c9:55:a3:cb:4c:68:60:bb:ec:f6:9f:
32:05:47:20:4f:ca:87:d0:c5:87:e6:9d:52:98:54:
59:52:30:b4:00:3f:a4:0f:7f:be:c5:b9:60:74:34:
3b:48:9d:09:cf:e7:63:83:10:49:32:62:c2:89:c3:
1e:ee:15:76:13:a7:3a:4e:6b:98:1a:ac:fb:6c:f8:
e5:09:a7:7a:ab:81:79:3a:c1:f4:2d:e5:7b:46:52:
d7:dd:46:b8:bc:c5:bf:ed:6f:1a:34:6a:1a:7b:dc:
92:16:de:26:5e:20:e9:e6:53:a2:6e:63:46:30:a5:
30:fc:81:91:4e:81:7b:3f:93:24:4e:5f:61:e8:f6:
b9:e8:ba:14:2f:67:7a:a2:4d:94:d1:24:ae:43:56:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:B5:D4:87:3B:4A:59:42:64:03:01:FC:23:5E:EA:60:6B:22:75
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/ULu11Ic7SllCZAMB_CNe6mBrInU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:19:78:fa:6f:59:e7:4e:8f:21:29:b2:b4:25:bc:f7:68:01:
3e:75:5a:89:04:ea:fe:8e:1a:30:de:df:e0:be:9e:5a:0b:86:
d6:dc:b3:4a:e8:4b:29:35:5e:ec:75:25:99:2c:cc:4a:78:3e:
1c:49:ae:47:19:27:ea:d3:0f:9b:57:76:02:7f:37:67:b9:11:
24:ab:d9:66:2d:9b:d3:08:d6:f1:78:00:9e:f3:c1:11:81:d2:
97:3b:05:1e:8c:9e:b0:23:53:73:b9:1a:2a:9d:f8:db:f4:d0:
29:d0:09:1d:d5:47:50:e7:2f:a7:a6:5a:39:8e:55:85:03:0c:
82:07:8a:56:43:d3:fd:c2:ce:49:80:59:8b:87:92:d2:cb:0c:
69:b1:9e:95:ca:f1:00:b4:5c:cb:b8:a8:e5:c8:1a:7e:2a:4e:
a1:2b:f3:e5:00:a4:c0:98:9e:32:15:03:ce:78:da:b8:1c:b4:
33:ba:19:f8:6c:c8:1b:41:f1:07:36:01:88:92:08:c4:31:66:
83:c5:c7:b6:e6:e7:05:cb:14:cc:dd:49:c3:78:64:3b:93:ff:
07:3d:ad:f3:8f:56:48:50:bf:8b:0c:3a:18:f0:41:31:db:fa:
1f:34:d8:61:ba:a7:76:93:64:56:6d:0b:12:48:61:fc:b0:74:
9a:d4:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:53:21 2024 by rpki-client on console-fra.rpki-client.org