Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/ueue1Eb7dvhi9Se_koKhv7bvJZo.roa
File: ueue1Eb7dvhi9Se_koKhv7bvJZo.roa (raw, json)
Hash identifier: HCCw2h2eGSf1NN1Vs6cJF3OFs8i6zYCY/9AVkcYNXuw=
Subject key identifier: B9:EB:9E:D4:46:FB:76:F8:62:F5:27:BF:92:82:A1:BF:B6:EF:25:9A
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 018CC3B73005F2B579C99CE98B154759C08D
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/ueue1Eb7dvhi9Se_koKhv7bvJZo.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 194.247.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:05:f2:b5:79:c9:9c:e9:8b:15:47:59:c0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9eb9ed446fb76f862f527bf9282a1bfb6ef259a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:5f:8d:6f:13:97:d7:3e:8e:4d:49:5f:db:
0f:63:63:3f:bf:93:f9:22:90:51:0d:30:8c:88:9b:
bf:83:6b:20:43:10:50:bc:ef:f5:19:5b:b6:4f:06:
f5:1c:67:b2:bd:0e:37:43:c0:33:a0:43:fa:89:1e:
67:5e:02:41:a2:23:e2:6b:bf:e2:14:23:b4:c0:ae:
67:d3:22:12:21:e7:11:3b:24:f2:cc:c3:0a:6c:b6:
bd:7d:b8:57:09:51:ab:8e:d2:37:77:90:aa:71:60:
3f:45:c3:28:8f:a3:6a:a6:9e:de:08:e4:3d:ee:3e:
fa:32:eb:06:12:23:36:50:7a:f7:e8:c7:52:fc:f9:
be:7d:10:53:3f:57:fb:f7:ec:c4:a4:0a:bc:f1:6a:
27:48:fb:02:f7:3a:c0:2d:64:d3:97:de:5a:a0:5b:
62:be:b6:72:0f:2f:24:2f:30:ec:1f:e7:39:c0:9b:
7f:67:5f:83:6f:b7:17:43:13:cc:81:6e:ca:53:d2:
1c:1a:3c:e6:50:d9:44:15:d1:f3:6b:36:2e:05:2a:
5a:b8:d7:ee:de:6b:10:e8:aa:e9:d2:58:ff:16:db:
0b:10:60:6b:b6:75:fc:69:66:a0:75:2b:55:c3:95:
21:4a:68:c2:09:c3:7d:e3:b6:0f:08:ea:58:b7:bf:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:9E:D4:46:FB:76:F8:62:F5:27:BF:92:82:A1:BF:B6:EF:25:9A
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/ueue1Eb7dvhi9Se_koKhv7bvJZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.34.0/24
Signature Algorithm: sha256WithRSAEncryption
38:04:54:53:28:7f:25:61:c6:be:c4:4a:6c:91:8d:57:e4:cc:
f2:b8:6c:a9:4d:1d:ef:57:fc:90:6e:ed:78:81:26:ab:84:92:
dc:8d:84:75:c3:a7:c1:37:d1:27:af:55:32:ba:bc:43:e4:9a:
ca:c8:43:11:a2:85:f6:5a:8b:6c:f3:5b:d4:97:f6:85:37:c2:
ff:59:c7:78:c1:27:86:c9:cc:dd:8b:f2:bc:8a:6f:12:a3:4b:
bd:e0:d5:be:4d:d5:3f:c6:b1:ee:13:73:43:b4:5c:57:b5:6e:
b0:ec:1b:ba:a3:f3:b4:6b:a7:22:70:8c:19:d5:b4:c6:5d:2e:
2c:46:d0:26:d9:21:1f:59:ee:d8:cc:91:2d:7b:a4:d9:d0:2a:
14:93:c5:ed:ba:93:f5:0e:93:cd:f1:76:0d:55:db:f5:be:25:
62:09:ef:9e:50:a4:ba:fa:64:74:fa:35:14:0d:0a:05:23:74:
e3:a7:4c:6c:19:09:20:2e:95:d8:5d:ed:55:df:b0:fe:1f:7b:
e2:03:2b:c7:cc:44:22:a8:f0:ce:5c:65:47:7d:c7:ed:22:13:
9a:cb:4b:87:93:72:46:f3:80:35:94:9d:3c:03:b2:c9:ac:41:
f6:7f:bb:87:56:c5:22:b9:d9:6b:1b:97:f6:1d:50:27:56:5d:
4e:29:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:35:38 2024 by rpki-client on console-fra.rpki-client.org