Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uMZJvP30j22eqzJoXt6I3cCu0Ag.roa
File: uMZJvP30j22eqzJoXt6I3cCu0Ag.roa (raw, json)
Hash identifier: J5CBEgfjgf3XJM3HIQVCdvUicnrU/nMiSmfnbDXYhNw=
Subject key identifier: B8:C6:49:BC:FD:F4:8F:6D:9E:AB:32:68:5E:DE:88:DD:C0:AE:D0:08
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 018CC3B70115708ABC606259396508CDA0CD
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uMZJvP30j22eqzJoXt6I3cCu0Ag.roa
Signing time: Mon 01 Jan 2024 06:29:59 +0000
ROA not before: Mon 01 Jan 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 193.17.232.0/22 maxlen: 22
193.17.240.0/23 maxlen: 23
193.17.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:01:15:70:8a:bc:60:62:59:39:65:08:cd:a0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8c649bcfdf48f6d9eab32685ede88ddc0aed008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:20:5f:aa:c4:b8:33:d2:e6:5f:b7:f2:45:
3f:89:44:3a:79:8e:b0:f0:97:51:38:64:57:af:11:
1e:20:d5:56:66:c3:1b:13:4a:a5:3c:bc:03:d8:82:
7c:46:72:8a:76:b2:8e:f4:cb:64:91:c6:3f:b8:be:
97:f7:ae:bb:b2:dc:1f:d8:db:8c:0e:d3:a5:73:d9:
73:96:58:b9:d9:a4:e8:50:dd:54:8e:d8:d2:00:35:
b1:81:53:73:98:45:e9:a4:0b:ec:b2:0f:9e:4f:e9:
86:8a:bb:9b:e6:99:4d:a6:64:64:f1:52:44:35:53:
15:3f:37:eb:6f:39:88:22:21:37:c0:8a:3a:86:20:
30:89:d4:a3:4e:2c:71:38:60:ec:dd:aa:3d:c1:a2:
ea:fa:30:9d:a4:ff:3b:06:f2:b9:63:ae:04:7d:43:
2d:f0:e8:73:81:59:e3:31:8e:15:65:ba:e7:d1:cb:
0c:36:40:7a:d4:83:bb:4c:22:8b:4d:99:68:f7:70:
34:0f:38:8e:b5:2f:81:cb:ea:e4:43:16:77:17:8d:
1d:6f:b5:1a:a8:f5:d0:25:03:14:64:ca:4e:ca:a9:
cf:08:0f:76:f8:a2:6c:d6:46:78:96:9a:24:b2:8b:
b1:4a:6c:cf:91:b5:32:b8:6a:90:a8:1a:13:e3:ce:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:49:BC:FD:F4:8F:6D:9E:AB:32:68:5E:DE:88:DD:C0:AE:D0:08
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uMZJvP30j22eqzJoXt6I3cCu0Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.232.0-193.17.241.255
Signature Algorithm: sha256WithRSAEncryption
8a:57:41:3d:e7:94:f2:4c:a6:7e:a4:5c:0f:e1:9d:44:72:0d:
a3:b3:4e:80:e6:6d:b9:1b:ce:85:8d:1e:f5:6e:b5:9d:fe:45:
ef:79:0e:7d:9c:88:e8:ac:96:0d:06:7d:38:e2:5c:2d:4c:06:
39:33:78:10:99:e8:30:7e:23:40:c3:f8:38:50:59:dc:98:1e:
06:bf:dc:38:ee:d1:13:1e:80:ae:61:c5:5f:23:d3:66:1b:98:
d6:c4:50:bb:84:1f:27:28:32:d0:b5:77:48:90:5a:c8:3d:87:
1f:52:7e:bc:0c:16:bd:ec:6a:6c:ae:80:b7:27:3d:c5:ca:63:
1c:4d:49:0d:b3:8c:ae:63:a0:06:ae:2d:5a:ca:6c:76:28:dd:
32:ca:fc:d9:a3:9d:80:02:fe:41:1e:0f:3e:00:18:97:74:4e:
5d:65:38:70:81:86:39:72:fd:be:14:fd:6c:d6:a4:3e:89:9a:
d3:db:19:dd:29:e6:81:28:58:f6:f4:8e:3d:60:c9:e3:20:26:
2f:d4:f6:7d:46:fe:0a:d5:ed:2c:86:8a:d2:c8:94:68:77:25:
d9:17:fd:5d:26:cf:4c:13:ed:25:18:42:f8:39:a4:2a:a8:8f:
65:94:b1:4a:6f:6e:e9:b7:95:61:6b:68:31:78:e1:8d:9c:1e:
74:2e:ad:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:00 2024 by rpki-client on console-fra.rpki-client.org