Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/UgmwZLNwD2soHip8NFkbae5AauI.roa
File: UgmwZLNwD2soHip8NFkbae5AauI.roa (raw, json)
Hash identifier: Yd0a/O5fVBJetubbudc1ZpjKahWn55pn3iu5Xcff2iI=
Subject key identifier: 52:09:B0:64:B3:70:0F:6B:28:1E:2A:7C:34:59:1B:69:EE:40:6A:E2
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 018CCA996DA2F3EDDF591295E9391A8FC92D
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/UgmwZLNwD2soHip8NFkbae5AauI.roa
Signing time: Tue 02 Jan 2024 14:35:01 +0000
ROA not before: Tue 02 Jan 2024 14:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2.58.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:6d:a2:f3:ed:df:59:12:95:e9:39:1a:8f:c9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Jan 2 14:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5209b064b3700f6b281e2a7c34591b69ee406ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:aa:c1:6d:c7:51:e2:60:33:0c:05:c4:ba:e7:
04:84:b4:7d:d9:22:a6:e6:fe:7d:1a:a1:09:87:ca:
0e:90:2f:fd:a4:9f:43:25:75:d7:86:25:81:47:e3:
19:ca:40:54:23:55:b3:6e:8c:9e:3f:f9:d6:f5:d3:
0f:71:9a:8a:d6:0d:14:26:00:87:82:bc:ae:26:90:
d0:b6:b1:c6:17:a7:f8:91:32:4e:50:37:2d:f4:42:
16:30:c8:26:1e:12:36:49:8e:99:63:9c:ba:d9:51:
2b:9d:a5:74:98:80:3b:3a:40:bf:fc:65:19:3c:b9:
41:a1:04:3e:75:f1:d1:c5:e9:3f:4f:6c:00:b7:a6:
37:c0:79:cc:65:55:02:86:da:0f:22:57:c3:00:43:
13:8d:7e:e6:da:1c:d5:20:c9:5b:83:af:85:aa:72:
17:04:e9:2a:d9:1b:82:ee:b1:36:24:86:3f:34:4a:
a6:ad:92:c6:cc:05:d1:9a:8a:25:dd:fd:b6:73:11:
65:99:0e:58:1c:02:a0:44:5c:b8:9e:12:3d:7e:c9:
c2:6d:87:b4:54:3b:1e:08:da:e7:3e:16:1b:a5:a0:
d1:d4:88:a6:db:f2:50:22:21:3a:ef:0e:f7:5b:95:
de:71:1c:5c:26:9a:6d:fd:ac:e0:54:6e:07:a8:81:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:B0:64:B3:70:0F:6B:28:1E:2A:7C:34:59:1B:69:EE:40:6A:E2
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/UgmwZLNwD2soHip8NFkbae5AauI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:af:8b:b2:65:60:29:ce:df:e2:2e:88:e7:26:e8:e6:46:db:
1c:1f:2d:24:98:c2:61:83:84:f8:55:56:79:eb:40:80:fa:8a:
61:67:bc:73:8d:50:ef:9b:0f:bd:57:1c:a2:95:ae:1a:ef:6e:
49:e4:17:ba:c3:51:2b:42:b8:6c:ba:d4:45:67:5f:fa:41:e2:
d1:26:f2:9f:72:93:b1:fe:d7:ca:11:61:07:d4:50:bc:9b:c1:
01:62:03:1e:50:07:3c:73:25:b0:62:07:51:9a:ef:08:eb:8d:
8f:5e:ee:6c:93:e3:90:fc:6c:dd:47:a9:ee:cb:11:32:ff:8a:
f3:c1:1e:27:5f:16:56:d4:2c:02:25:57:66:d3:7f:fd:ea:4e:
2b:7e:3a:e1:e8:b1:93:04:82:19:10:9a:1e:4f:a1:31:f0:20:
4b:65:88:85:75:cb:7d:06:6e:ea:c5:a3:55:c9:19:51:a1:03:
c1:24:47:58:17:e3:54:65:4c:14:36:8a:dd:b7:45:4a:b5:fc:
64:48:93:c1:9d:c8:19:1c:ee:b0:31:97:81:ae:b8:72:bc:40:
37:20:10:4c:b4:3c:5c:c7:4a:29:f2:bb:2c:7f:e1:ee:a2:75:
5b:c7:bb:cd:2e:e8:b2:29:b1:50:c3:e2:19:83:e7:20:8f:86:
4e:1e:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:53:09 2024 by rpki-client on console-fra.rpki-client.org