Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/UfMXTisPTOQhevljbnKzS02s5lo.roa
File: UfMXTisPTOQhevljbnKzS02s5lo.roa (raw, json)
Hash identifier: FEqA8XQmB1quqSw92V89K6L0fHEKloJT9Xo+6E8ezG8=
Subject key identifier: 51:F3:17:4E:2B:0F:4C:E4:21:7A:F9:63:6E:72:B3:4B:4D:AC:E6:5A
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018CC56E7E112B9CAED83BC859AACD45550F
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/UfMXTisPTOQhevljbnKzS02s5lo.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 146.19.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7e:11:2b:9c:ae:d8:3b:c8:59:aa:cd:45:55:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51f3174e2b0f4ce4217af9636e72b34b4dace65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:ca:02:74:f6:09:92:e6:d4:ab:9d:28:38:
77:05:90:23:51:a6:66:66:dd:47:f5:16:7f:6d:af:
f4:66:1f:39:bc:a4:0c:c5:cc:f5:e1:1f:8c:f1:ff:
95:97:39:8f:67:1a:06:ca:45:cf:31:4a:32:b0:83:
e6:7c:1c:80:dd:6f:04:1a:4f:40:23:cb:dd:24:c3:
be:0e:e0:13:b7:75:f9:c2:5a:f2:2a:27:59:d7:cb:
c4:5f:5a:a6:8e:ae:0e:dd:98:14:0d:3a:43:63:6e:
a1:05:b2:9d:0b:95:6e:a3:0a:95:dc:cb:c0:5e:0d:
f0:dc:93:c5:5c:09:8a:97:32:68:66:82:03:b6:58:
c1:d9:fa:0d:c0:71:8c:ea:94:5a:b7:0e:0b:d6:eb:
08:7f:97:63:e8:37:8c:3d:0a:bc:51:f6:c6:93:f2:
08:2f:c5:db:93:1f:a5:f9:33:e4:53:fd:c8:52:27:
10:84:32:1d:c5:c2:8f:c5:c0:1b:25:cf:8e:f3:84:
12:53:c0:f0:be:df:67:51:d4:12:15:db:83:cc:47:
31:5c:ca:92:ca:63:7d:66:1a:46:53:1d:1c:ed:ce:
ca:fe:d4:c9:09:86:54:eb:dd:f1:d3:8c:31:7f:2b:
dd:8f:92:82:63:6e:4a:7c:b2:5a:e6:7e:d4:f3:c9:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F3:17:4E:2B:0F:4C:E4:21:7A:F9:63:6E:72:B3:4B:4D:AC:E6:5A
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/UfMXTisPTOQhevljbnKzS02s5lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.155.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ee:c5:c0:c1:fd:97:49:ff:30:01:c6:96:0f:5c:82:bb:99:
a3:10:f6:28:7d:d5:69:0f:4c:99:e3:73:a6:21:f4:ae:98:cc:
da:cb:52:6a:18:de:22:e0:7a:05:2c:99:9c:c7:e9:46:6f:4a:
5c:9d:b9:42:f0:ab:93:9c:22:3f:80:5d:d6:59:fa:4e:34:5a:
48:85:35:5f:61:da:59:8b:bc:39:81:a4:f6:14:aa:70:21:4b:
6e:f0:23:41:34:f5:2d:5b:0e:20:75:e7:81:08:b0:27:e2:d4:
18:28:d0:a2:5c:7d:17:36:1e:c4:fc:3d:13:4a:29:2b:b8:63:
4a:30:e7:87:91:df:9e:71:0f:97:33:73:96:92:ea:cd:87:35:
0c:9d:68:fb:b0:95:02:7d:f8:e0:55:83:df:33:e3:c6:d3:4a:
95:38:fa:a8:1e:9d:32:fb:30:b0:4b:71:77:c5:0a:48:89:62:
0f:09:b0:d4:1b:74:f6:9d:12:ae:ab:a5:07:83:21:a1:d3:d3:
c9:42:cc:f8:c6:e0:3c:5d:5a:70:9f:d7:1a:25:0e:ad:6a:27:
8e:55:60:b3:64:1c:5f:25:f9:ee:79:c0:19:70:41:06:17:1e:
44:e6:35:29:7b:8d:7e:e4:94:1a:7d:13:31:83:b1:03:d4:de:
c8:2d:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:27 2024 by rpki-client on console-ams.rpki-client.org