Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/UobBjKbwdVswKHrh2eOx7rJ-Ehg.roa
File: UobBjKbwdVswKHrh2eOx7rJ-Ehg.roa (raw, json)
Hash identifier: qtKY2awFyUKgmVCHi0RTbV/H0VDPV3mk+0Owh1BrW60=
Subject key identifier: 52:86:C1:8C:A6:F0:75:5B:30:28:7A:E1:D9:E3:B1:EE:B2:7E:12:18
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 018CC3B733C3A4E56B7B3B19DFC17C2368A4
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/UobBjKbwdVswKHrh2eOx7rJ-Ehg.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58204
IP address blocks: 91.239.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:c3:a4:e5:6b:7b:3b:19:df:c1:7c:23:68:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5286c18ca6f0755b30287ae1d9e3b1eeb27e1218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:60:3a:68:64:4f:85:37:e7:ff:29:9e:56:
14:39:6e:31:50:3d:b3:7e:57:b0:46:b8:f6:ed:37:
88:84:e0:e7:30:37:dd:b6:7f:62:73:58:21:fd:38:
c1:6b:9f:f5:2c:47:dc:78:f2:4c:12:15:4f:ce:d7:
7c:55:bc:b8:1b:eb:9e:62:f5:22:a6:17:ad:ab:70:
3d:e1:a6:15:4b:89:af:d2:c1:94:3f:f3:4e:b1:bb:
95:cd:39:c4:fb:1e:9a:be:0a:a8:f7:e5:06:9d:0b:
74:f8:3b:64:1e:fb:23:b3:f9:56:70:26:39:22:4d:
9f:02:14:d9:8b:9b:74:a6:70:32:51:9b:85:34:7e:
08:cd:b9:d8:33:c4:a8:33:ed:1b:f2:d4:a3:ed:22:
97:a6:4c:c2:2a:1d:44:97:d1:c2:75:20:f4:a3:c6:
71:a6:8e:21:67:c3:72:66:e7:98:a1:2e:92:a2:2b:
70:57:e6:a2:db:15:52:1b:f5:de:07:55:18:6f:30:
bc:14:af:b2:18:6e:43:27:d7:3e:47:24:d7:2b:57:
61:97:2f:2f:db:3d:0b:b4:0b:47:89:3b:c4:6a:dd:
64:51:b2:7a:48:28:d9:77:4e:87:b8:07:ce:93:79:
26:d4:49:55:b4:fa:5c:cd:5b:06:bc:d0:d0:8c:fd:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:C1:8C:A6:F0:75:5B:30:28:7A:E1:D9:E3:B1:EE:B2:7E:12:18
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/UobBjKbwdVswKHrh2eOx7rJ-Ehg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a5:e5:5e:ca:cb:f2:18:e7:5f:b5:89:43:68:48:2f:34:5b:
b1:95:51:f6:f1:ad:71:e0:65:66:ce:37:a5:e7:23:37:b4:e1:
4c:2b:90:0e:c2:7c:02:82:a2:95:ef:38:eb:f0:d0:1f:d9:b5:
b0:09:29:e4:a1:8f:f8:0d:ca:bf:19:a1:c8:ce:c2:d0:2a:a5:
9f:5f:c6:21:91:e0:4b:2e:b0:e6:fb:76:40:89:09:eb:6d:34:
25:cd:dc:fa:08:3a:3a:8b:23:35:e8:ba:e9:8a:79:08:af:d5:
0b:ca:2a:50:5b:c2:0e:f9:ca:8e:30:21:7c:65:54:0c:a3:3c:
14:33:17:0a:87:74:4f:4e:37:68:65:fc:e4:6b:00:96:1c:3c:
7f:3c:92:06:b1:55:37:a4:fa:0c:b7:c4:5f:97:77:07:3b:5e:
b5:ce:36:70:39:75:ae:6a:62:36:2d:b2:1b:a2:fb:ef:29:99:
c8:6a:56:a4:83:7f:a5:bc:82:6a:d7:7d:44:58:68:9b:ba:d8:
ec:67:96:2e:36:3c:0c:e0:df:8c:1b:ce:2b:3a:29:26:11:80:
12:20:14:17:46:03:e0:bb:40:52:8b:e5:ea:c5:e5:bd:f3:04:
1d:a8:9f:cc:fe:55:61:f6:ec:13:7d:7d:b4:84:67:a0:38:f3:
cc:a8:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:08:10 2024 by rpki-client on console-ams.rpki-client.org