Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/x9Uu-Vzax50NvBBzlnTQbRn6ySQ.roa
File: x9Uu-Vzax50NvBBzlnTQbRn6ySQ.roa (raw, json)
Hash identifier: 1U4h2uHZiOIAx/Er3+KP3I/7Zo26gdc551kp6Zeqj4U=
Subject key identifier: C7:D5:2E:F9:5C:DA:C7:9D:0D:BC:10:73:96:74:D0:6D:19:FA:C9:24
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 018DAD83F2425E0889302F3D2B8DB69EB4FB
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/x9Uu-Vzax50NvBBzlnTQbRn6ySQ.roa
Signing time: Thu 15 Feb 2024 16:05:21 +0000
ROA not before: Thu 15 Feb 2024 16:05:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209341
IP address blocks: 192.250.229.0/24 maxlen: 24
192.250.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:83:f2:42:5e:08:89:30:2f:3d:2b:8d:b6:9e:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Feb 15 16:05:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7d52ef95cdac79d0dbc10739674d06d19fac924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:87:b7:da:5f:f7:43:40:97:43:2b:9b:28:
9f:24:5d:ee:07:c4:2a:d3:02:78:fd:ae:06:12:a4:
77:4c:ef:ad:54:16:5c:c5:c1:87:fe:03:92:8a:4e:
9d:28:e5:e4:52:d9:ca:b1:85:b1:0a:2f:12:03:e7:
c5:01:47:9e:b4:5b:f3:eb:c4:4b:30:58:90:02:c6:
2a:21:f1:2c:a4:3d:66:f9:fb:f8:55:24:5d:e5:a5:
9c:be:4c:08:bf:51:5b:f1:a9:24:47:d5:23:8b:88:
68:cc:b8:84:49:e7:ad:85:79:a8:2b:9e:12:85:cf:
59:61:b2:c4:51:8b:4f:16:51:b9:5c:fa:cf:33:7b:
6f:d2:56:8b:c3:f0:5f:3c:80:82:a2:19:40:99:a9:
3c:b9:9f:ca:17:ae:d0:88:c3:1a:02:d4:77:b8:b3:
7b:58:ab:c6:28:ce:8b:cd:7f:0f:d8:fd:fe:72:75:
90:5c:11:d5:c7:b4:be:c4:9e:c8:78:21:a1:08:c4:
0d:df:dd:e2:41:ed:d2:90:18:77:8c:8b:1e:ce:c9:
d0:6a:37:73:cc:68:3a:b8:47:02:bf:df:a8:11:28:
ad:fd:12:b4:e9:2f:f3:4a:91:8c:f6:f5:e1:43:d8:
56:c8:7c:bc:67:af:4a:6d:3d:82:93:b3:aa:8d:70:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:2E:F9:5C:DA:C7:9D:0D:BC:10:73:96:74:D0:6D:19:FA:C9:24
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/x9Uu-Vzax50NvBBzlnTQbRn6ySQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.250.229.0-192.250.230.255
Signature Algorithm: sha256WithRSAEncryption
6e:c7:27:66:4d:d3:4b:ea:0d:ad:98:c3:ab:83:7b:2b:b6:ef:
fd:98:2a:a2:25:be:23:22:6a:d3:f7:f2:de:d5:f7:88:d8:9b:
97:d0:94:08:22:a8:17:40:33:e4:1c:48:88:35:5b:de:b2:73:
20:cb:f4:69:f6:d5:e9:2e:33:ac:81:ce:7a:37:11:07:31:1a:
b6:35:85:16:3b:ca:5b:5d:90:7f:b3:55:02:c0:0a:b1:0e:cd:
2c:48:1f:c2:f4:0c:bc:60:ac:5f:d7:4a:03:b6:d2:0f:fb:4f:
4a:65:a1:f9:42:b0:d0:54:86:38:52:01:bc:18:24:91:f6:41:
96:ac:80:7e:4a:7c:4b:fe:ad:e0:46:7a:70:80:53:74:1f:c3:
5e:bb:21:da:b1:5a:b8:1c:aa:0a:8c:d6:f0:0c:1e:51:46:75:
16:7e:c5:d8:33:97:4f:af:a9:e9:b5:cf:a8:92:c0:2a:88:a6:
a7:83:f3:bf:9b:e2:8d:5d:58:ec:a8:e0:78:97:5f:4f:09:7d:
4b:5b:b0:1a:65:85:2c:cf:d5:9f:37:a7:36:8d:10:c5:de:8f:
6b:be:67:86:f2:1f:ea:41:72:72:91:b6:69:99:37:1a:f2:19:
b3:38:38:06:ea:50:4e:29:47:8e:dd:4d:2d:23:f4:c4:42:61:
bd:fb:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:33:54 2024 by rpki-client on console-fra.rpki-client.org