Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/aUbYfN4zh_VWt4VmZ-6MP1-fuic.roa
File: aUbYfN4zh_VWt4VmZ-6MP1-fuic.roa (raw, json)
Hash identifier: xoe2hJtGlhq+Rqg9sYotyg6o0Ny7Hl2aYLtKVyRSrbY=
Subject key identifier: 69:46:D8:7C:DE:33:87:F5:56:B7:85:66:67:EE:8C:3F:5F:9F:BA:27
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 018CC424F4CE70F7CF989F4EF323F430CE34
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/aUbYfN4zh_VWt4VmZ-6MP1-fuic.roa
Signing time: Mon 01 Jan 2024 08:30:05 +0000
ROA not before: Mon 01 Jan 2024 08:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209848
IP address blocks: 213.184.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f4:ce:70:f7:cf:98:9f:4e:f3:23:f4:30:ce:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6946d87cde3387f556b7856667ee8c3f5f9fba27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:96:dc:04:68:ca:60:00:50:45:42:cd:c4:
45:d8:73:da:7e:a8:fa:da:d9:b3:6e:f7:5a:78:04:
40:5a:cc:65:2d:45:4d:b2:4a:5c:f7:5e:34:e9:3a:
f9:56:34:b8:52:0a:8b:17:47:82:ad:15:01:51:d6:
06:45:05:b8:2a:68:a0:58:e8:ee:56:e9:b5:ea:5b:
4a:5e:a9:9c:88:b9:81:5f:8a:3f:21:74:b1:d7:bf:
19:24:ee:c0:ec:ee:a5:db:f1:4f:5c:c1:a0:30:17:
50:8c:30:5a:b4:b7:6f:56:9e:79:e0:77:a9:7b:8a:
93:19:e1:af:1f:a4:9b:77:09:59:eb:02:24:90:80:
94:93:ef:2d:b3:19:9f:a9:1d:a5:89:2f:1a:c7:0f:
8c:ac:e0:16:cf:32:e9:ff:18:7b:d2:c0:18:c7:53:
51:8f:57:69:91:01:88:c0:ab:19:94:b9:fe:59:1b:
29:df:b7:c9:85:c9:3e:f9:8b:8b:85:e5:1e:c8:42:
5f:ef:a3:fd:fa:39:cc:a6:45:a1:17:35:fc:d3:d1:
92:ec:cc:be:8f:f9:4a:c5:28:94:7a:92:2b:8b:44:
77:ce:94:2c:70:b5:e1:71:be:5a:56:6b:75:7b:ca:
59:8a:e7:1c:f0:29:58:a3:72:2b:7a:02:16:3d:ba:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:D8:7C:DE:33:87:F5:56:B7:85:66:67:EE:8C:3F:5F:9F:BA:27
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/aUbYfN4zh_VWt4VmZ-6MP1-fuic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.88.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b1:76:6f:e2:fb:ef:4f:25:74:62:27:63:10:9b:a4:bc:52:
2e:1c:28:bc:64:2c:f9:04:64:de:cd:b5:5e:96:8b:7c:cf:a6:
2a:9d:80:07:f0:14:cb:9b:34:9b:55:63:64:ac:bf:7f:43:73:
e7:0b:ce:0b:79:3c:30:6b:98:c4:df:7c:f9:91:83:73:df:11:
58:7d:67:88:81:cc:da:e7:f6:ea:62:4d:56:8d:aa:ad:36:de:
2e:42:70:d3:92:68:7d:9b:e1:29:71:27:e8:99:b3:06:2e:58:
0f:ff:30:ff:f3:ed:a2:30:0f:12:62:5d:54:5b:d6:28:73:b0:
0a:26:63:11:a6:e7:ad:15:9b:a7:e9:61:dd:28:a1:c8:46:6a:
0a:f2:6d:55:a8:61:38:1a:bd:38:2a:23:06:77:2d:36:85:20:
8b:de:81:bc:e0:31:1e:5b:4a:a7:d5:92:47:71:16:40:30:d2:
86:d8:fd:08:77:b3:cc:e0:42:3b:71:65:89:7a:61:37:e1:6a:
d0:38:5c:89:bb:42:50:4d:b7:fd:54:ee:80:3c:b3:74:8d:32:
16:48:4a:3b:0f:01:76:31:e6:ee:9b:18:a1:49:89:b4:8c:ee:
df:78:88:f8:e9:f2:61:d9:ee:93:e9:b4:0c:79:a6:b8:36:c4:
32:04:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:12:56 2024 by rpki-client on console-ams.rpki-client.org