Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/UxYfvTbYXHFgcKevH-NN-mazLDE.roa
File: UxYfvTbYXHFgcKevH-NN-mazLDE.roa (raw, json)
Hash identifier: dHUQgdVkGkVhmBDnBXwUDEMqQx2NwJ1xYwgXZZz1AQY=
Subject key identifier: 53:16:1F:BD:36:D8:5C:71:60:70:A7:AF:1F:E3:4D:FA:66:B3:2C:31
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 018CC94DDDBBCF2CE90D8455D3DB21D66BE9
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/UxYfvTbYXHFgcKevH-NN-mazLDE.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207785
IP address blocks: 185.153.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:dd:bb:cf:2c:e9:0d:84:55:d3:db:21:d6:6b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53161fbd36d85c716070a7af1fe34dfa66b32c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:18:26:5a:bf:90:94:e0:10:34:27:db:e5:
0f:20:75:90:70:81:bd:86:17:e9:b5:82:50:a2:d2:
b2:28:eb:6b:33:05:b2:5f:cd:b9:52:d5:76:10:97:
da:8c:98:f9:74:1a:d2:f4:a3:f4:4e:b6:2d:81:b5:
38:42:68:cd:6d:9f:42:9d:a2:a0:6d:0b:5c:b4:e8:
76:28:09:e3:d4:20:fc:4f:22:2f:fb:d0:3a:9c:33:
8e:8e:7c:ad:72:08:17:7c:6a:fe:8a:56:92:5b:55:
ad:1d:86:a3:43:bd:15:f6:13:32:84:b5:83:8b:12:
4e:23:90:7b:e4:f2:cb:65:b2:6a:5d:6e:49:b9:32:
29:c8:0b:55:25:54:16:40:7f:e2:39:e8:27:bf:40:
d8:1b:89:f1:0d:bc:46:9e:e5:52:6c:25:ed:58:90:
f1:f8:fa:2a:ea:80:97:25:7b:d4:21:46:88:c4:53:
3b:37:38:ac:6d:cc:57:e5:cd:ba:a1:36:17:9f:90:
43:65:8a:71:04:6c:f1:21:2a:45:6b:32:a4:df:e4:
e9:ac:3e:44:37:97:df:e2:07:c7:35:0a:0a:5b:cb:
6f:1e:b2:47:c1:91:84:4d:a9:07:64:48:03:d4:68:
fb:cd:8b:c3:f9:9a:30:4e:19:3c:b3:07:d6:c3:9b:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:16:1F:BD:36:D8:5C:71:60:70:A7:AF:1F:E3:4D:FA:66:B3:2C:31
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/UxYfvTbYXHFgcKevH-NN-mazLDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:91:18:12:56:cc:f9:dd:5a:4c:60:4f:a1:04:cc:00:4a:99:
e7:0f:31:18:a9:fa:95:e6:6e:95:12:3f:5b:85:52:8b:20:35:
36:60:ae:7a:fc:d0:f9:26:8e:47:ed:db:9b:9c:ab:1b:9f:50:
01:a7:89:14:b4:75:81:dc:00:19:4a:5a:73:43:97:80:f0:71:
a4:37:ff:9c:c9:f4:97:67:cf:0c:b5:c8:1c:8b:bc:8a:35:c4:
69:f1:61:6f:f0:a1:e2:e4:77:56:fd:9c:0d:b1:47:02:e5:0a:
ab:45:e5:5e:d8:ff:7b:3b:20:ef:cd:e6:4b:69:54:b7:f2:b7:
db:df:5f:95:9c:5c:c7:69:cd:15:6a:80:9a:89:2b:d5:09:ae:
b5:45:5d:03:ca:5a:3d:3a:41:59:bf:5b:e3:74:ba:59:df:45:
3a:aa:46:18:75:e2:29:bb:7f:65:06:bd:3b:7c:60:2d:74:d5:
a2:6d:75:a9:44:b1:78:d2:5c:3e:ce:f3:2c:50:fe:39:d6:c9:
5c:1f:d3:cd:1a:b0:46:85:1c:ac:2c:e1:76:43:5d:1d:53:4d:
2d:4f:f1:f4:18:8d:b0:00:51:70:48:ac:f9:76:31:13:e6:6f:
d6:f7:18:02:91:38:e2:d7:0c:69:37:9a:d8:d3:c7:8e:b6:8c:
07:c6:aa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:43:20 2024 by rpki-client on console-fra.rpki-client.org