Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/0UllKyOYyJoEZXPAngUPqDjOjD8.roa
File: 0UllKyOYyJoEZXPAngUPqDjOjD8.roa (raw, json)
Hash identifier: Emfls2ulOCb+d22bnAcE3tkCRsnHGnSaU/kiChMYoVQ=
Subject key identifier: D1:49:65:2B:23:98:C8:9A:04:65:73:C0:9E:05:0F:A8:38:CE:8C:3F
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 018DC11FFE79E7B92A897354D7AA64EE024B
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/0UllKyOYyJoEZXPAngUPqDjOjD8.roa
Signing time: Mon 19 Feb 2024 11:28:35 +0000
ROA not before: Mon 19 Feb 2024 11:28:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211081
IP address blocks: 185.193.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:1f:fe:79:e7:b9:2a:89:73:54:d7:aa:64:ee:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Feb 19 11:28:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d149652b2398c89a046573c09e050fa838ce8c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:eb:8f:79:37:e6:8b:52:aa:4a:91:67:83:
de:50:31:42:db:99:06:d3:41:a4:88:42:99:a9:6a:
a8:d9:36:99:f2:b1:2b:31:79:f0:39:d8:94:5f:5f:
75:74:fa:fd:e1:48:c9:56:ac:58:2a:87:7e:32:dc:
ef:9d:0d:3a:3d:68:82:71:c4:71:f2:68:85:82:da:
b9:22:09:d3:c2:c3:ea:c3:bf:75:c8:57:e1:9f:e1:
b4:0f:42:f3:31:6f:5e:ac:2c:bb:3c:8b:ae:e4:82:
63:3b:be:dd:d7:1b:a6:a3:cc:ba:a7:36:98:e9:80:
a4:bb:53:3a:43:32:ae:a7:4c:a1:48:d2:c7:7e:bf:
3d:c2:ac:9e:78:9c:4a:6e:9a:d2:8d:78:e2:a0:6f:
99:a5:58:8c:82:f6:5d:5e:e7:8e:26:fc:01:12:20:
90:ad:6d:ad:bd:ef:91:26:e6:59:ce:36:07:9d:db:
96:91:e4:0c:7d:76:33:87:ef:b8:49:6a:e7:25:5e:
4b:bb:3d:08:32:8d:0d:39:15:93:ac:b7:b9:87:43:
0a:70:89:03:ee:eb:77:60:d2:ff:6e:17:65:9c:51:
fc:47:3c:d2:5a:b0:bb:6f:e2:44:39:d6:82:46:ae:
e5:5b:22:ff:56:fc:41:d2:29:47:7b:29:b9:d5:ae:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:65:2B:23:98:C8:9A:04:65:73:C0:9E:05:0F:A8:38:CE:8C:3F
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/0UllKyOYyJoEZXPAngUPqDjOjD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.47.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2d:66:d1:4e:48:05:a3:8c:e8:41:1b:0f:7d:3c:e0:11:c7:
b4:67:69:13:5d:a3:71:88:87:7d:33:ce:0c:af:1f:07:d5:7e:
74:f3:13:16:0d:28:2b:6f:9e:dd:32:52:0b:06:07:b9:32:c0:
fe:66:d0:46:e1:d6:e0:ac:fc:66:43:cb:91:a3:58:1b:a1:68:
84:23:57:6f:bf:5a:0b:d0:b7:ae:61:90:0a:0d:fd:7f:35:f8:
3c:9f:92:5a:87:9a:5a:d3:0b:87:76:64:b7:fc:7c:b4:ee:bd:
6d:c1:20:c6:e5:52:ac:ab:2a:da:b2:a9:7c:ca:76:11:28:00:
9c:ca:f7:74:e0:58:8b:ba:df:eb:9a:58:f8:f8:9a:18:f5:ca:
e5:b4:53:dd:54:c0:8b:11:43:4c:2c:56:61:3c:45:fb:2f:48:
54:cd:a3:c9:ae:06:00:2c:60:62:33:8e:12:91:f7:10:ac:5b:
1b:67:7a:5d:6c:b8:c4:bd:94:ff:41:75:db:bc:e2:5b:73:d1:
cd:61:58:c9:a6:97:a8:cb:97:3b:a7:e8:f8:71:92:20:54:4b:
1b:3c:c7:fc:46:b4:c1:05:57:df:51:c2:7c:45:f9:20:74:b6:
6c:81:26:8a:98:22:25:d7:fb:0f:ae:ce:84:0f:5b:b1:a5:bc:
17:f8:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:04 2024 by rpki-client on console-ams.rpki-client.org