Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/Ur-Bu0RSJ3w6TE3scWrDMGsvWtw.roa
File: Ur-Bu0RSJ3w6TE3scWrDMGsvWtw.roa (raw, json)
Hash identifier: N245WG48LKfdaN/l0SqPnZNQq5QFtRkgIFSMCbYF0w8=
Subject key identifier: 52:BF:81:BB:44:52:27:7C:3A:4C:4D:EC:71:6A:C3:30:6B:2F:5A:DC
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 018CC5006B027ECE766E9742A7317656E15B
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/Ur-Bu0RSJ3w6TE3scWrDMGsvWtw.roa
Signing time: Mon 01 Jan 2024 12:29:48 +0000
ROA not before: Mon 01 Jan 2024 12:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28883
IP address blocks: 185.251.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6b:02:7e:ce:76:6e:97:42:a7:31:76:56:e1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Jan 1 12:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52bf81bb4452277c3a4c4dec716ac3306b2f5adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:98:9b:5a:ac:b2:d0:cb:8e:b0:d2:dd:74:
33:02:0e:f2:51:a3:63:bf:9e:9b:5c:e7:4c:29:aa:
5d:56:f8:e7:b5:8a:4d:ba:88:03:56:32:d4:b0:0f:
98:1b:5e:16:6e:07:c4:73:39:58:75:90:01:e4:55:
d0:be:8c:24:90:cf:6a:8e:de:50:6b:5f:86:a2:73:
48:3b:11:15:8a:fc:f2:cf:ed:b3:ab:9e:5d:87:97:
49:74:6a:0c:a7:43:09:df:69:7d:ab:7d:17:dd:16:
32:ac:f1:da:33:83:dc:6f:1a:1b:ca:65:41:e6:a1:
9d:5e:e2:cb:64:55:b1:10:a6:14:15:59:e9:30:ca:
49:80:57:89:7f:80:ce:ef:79:e9:6b:c1:3d:db:d6:
51:4a:d0:84:90:1c:7e:a8:09:39:23:41:b9:33:79:
62:10:98:96:5f:f8:10:b9:97:79:61:bb:5f:65:74:
80:ff:6f:93:75:c6:fd:3f:d7:3e:1b:2d:ba:33:6b:
50:6d:9c:f9:a7:af:00:ee:77:95:e5:3c:8c:7f:22:
35:93:f8:70:e6:b0:ed:33:b3:6c:fa:b7:e9:4d:72:
72:68:13:8e:57:f3:5a:6f:08:c0:a8:b3:dd:ac:a1:
d0:7f:43:1d:9e:de:09:79:0b:bc:2d:5e:d5:01:b6:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:81:BB:44:52:27:7C:3A:4C:4D:EC:71:6A:C3:30:6B:2F:5A:DC
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/Ur-Bu0RSJ3w6TE3scWrDMGsvWtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.48.0/22
Signature Algorithm: sha256WithRSAEncryption
93:bd:06:5e:d9:0c:61:15:a8:c0:5b:f9:2c:d9:dc:b3:cf:c7:
14:b6:b1:ae:96:ac:7e:41:f0:26:67:fe:27:d3:a7:90:cb:f3:
8e:01:76:b8:75:dd:a4:98:1b:c3:3a:2c:3c:25:e7:77:2c:06:
61:3d:7e:63:0c:11:21:f6:51:ad:0c:68:58:46:23:3c:e1:3a:
0e:e6:30:a7:17:97:d2:65:81:b3:51:3d:e4:85:58:cd:92:cc:
4c:fc:7a:b0:f9:17:11:69:91:47:e4:ec:00:7e:17:2f:71:dc:
a0:7f:94:8e:f5:02:10:c3:5b:95:94:85:4e:5a:db:32:93:11:
f3:b4:18:8a:da:54:67:c6:1e:f3:a1:82:e8:58:50:28:bf:62:
4c:b2:dd:a5:fe:d8:74:d4:55:a2:16:d3:99:c4:66:c4:7e:eb:
00:2f:9b:20:96:48:16:fc:8e:a5:89:41:be:66:e8:d5:8f:66:
0b:38:e6:d6:73:17:cc:24:1d:bd:8b:b8:85:2f:cd:1e:a3:04:
ba:30:ee:1e:52:f6:0b:35:da:ee:53:be:72:e5:49:76:02:e7:
a4:0a:fc:7a:d6:c6:21:43:db:9a:42:aa:99:9f:24:4f:9a:3e:
de:95:24:32:5a:60:46:80:f9:54:d1:38:8c:30:53:5c:1a:4e:
bd:66:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:08:14 2024 by rpki-client on console-fra.rpki-client.org