Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/UZ4jkhAgMuMxyfaO1x9I3ph_Ues.roa
File: UZ4jkhAgMuMxyfaO1x9I3ph_Ues.roa (raw, json)
Hash identifier: iXAsXW6jbjOeiYn98epOZJoTfYuUbzyhQIB4l2Nw/bo=
Subject key identifier: 51:9E:23:92:10:20:32:E3:31:C9:F6:8E:D7:1F:48:DE:98:7F:51:EB
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018FDF110E19CF4788356F6B2AEB572C58BF
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/UZ4jkhAgMuMxyfaO1x9I3ph_Ues.roa
Signing time: Mon 03 Jun 2024 17:06:27 +0000
ROA not before: Mon 03 Jun 2024 17:06:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205334
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:11:0e:19:cf:47:88:35:6f:6b:2a:eb:57:2c:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jun 3 17:06:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=519e2392102032e331c9f68ed71f48de987f51eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:91:8f:63:55:81:da:17:d7:48:3d:a6:c5:
f6:c1:28:f5:d4:76:13:c6:86:8e:07:6a:54:c1:3e:
12:d4:c3:92:d0:c1:a9:da:6f:7b:75:1f:53:2b:83:
41:49:f2:73:a6:40:85:eb:0a:49:65:fd:ad:52:d3:
d6:6a:1d:f8:c9:9b:54:e8:7a:07:df:f3:19:42:14:
65:19:f5:16:77:96:05:c0:d5:b6:a8:43:af:c0:98:
ec:db:dc:ba:6c:91:c9:8a:79:0d:a9:7f:d7:28:b3:
15:48:8b:cf:97:ca:b8:8c:39:9e:b5:9f:ae:83:31:
47:1b:f3:1f:29:29:09:2a:20:75:da:15:c4:62:50:
2b:26:a9:c2:1f:f5:00:3c:50:6a:c6:43:29:45:c0:
7d:a4:8e:2c:5e:0a:f2:28:7f:7e:47:77:9b:84:9d:
14:e2:0b:31:76:2c:f8:db:a3:56:bd:9d:33:40:4d:
0b:ed:05:de:24:00:eb:d9:e0:4f:38:f8:65:08:48:
19:a1:8d:df:73:cd:e3:6e:6d:0d:d8:fc:9e:b2:b4:
e8:3e:14:4d:90:38:b5:bb:6e:e7:47:05:71:8d:fb:
aa:0c:ea:c1:bd:c7:7d:b6:bf:13:37:69:22:88:7e:
4a:3b:97:51:01:ee:61:fc:1c:78:9b:31:5d:80:4f:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:23:92:10:20:32:E3:31:C9:F6:8E:D7:1F:48:DE:98:7F:51:EB
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/UZ4jkhAgMuMxyfaO1x9I3ph_Ues.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f4:b3:01:b8:d2:69:01:18:40:86:91:8a:d2:fd:68:71:72:
19:3b:f9:8d:eb:5f:d0:3a:d5:a2:0b:f9:51:0f:b0:39:93:dc:
79:de:9a:37:00:14:81:47:44:8b:68:2e:a3:31:a6:fe:79:12:
9b:96:7a:e9:87:bf:cd:62:44:0e:61:9f:99:57:57:e1:a6:49:
50:ac:56:ca:9e:5f:6c:6e:6d:24:ec:d5:8f:73:f4:38:16:76:
2b:71:7f:e2:9f:b7:87:f3:8e:0c:25:df:82:ef:f7:b7:82:fd:
45:a1:96:47:d8:e0:c9:b8:6a:d2:d2:6d:6b:be:70:6d:c3:3b:
7c:7c:0f:1d:a4:7b:58:1f:26:05:c8:15:a8:f4:7f:85:c9:c7:
00:e5:02:7a:b8:4b:3a:45:69:03:57:2a:91:55:5e:0b:2d:2c:
f1:75:23:61:56:bb:cf:0d:b0:7a:a5:a4:df:76:83:7e:a2:7f:
fe:f4:cb:2f:7f:6d:de:5d:bc:f0:97:8b:a2:f3:be:f9:97:be:
5b:3f:fa:cf:8b:07:5a:d7:04:a1:a0:50:e6:15:3f:0b:c9:a0:
73:d7:ff:c0:e7:15:5f:7e:8b:fe:2b:43:5c:cf:49:d6:d4:d0:
92:9c:f8:f4:10:75:f9:68:e4:8a:ae:1a:4a:6e:b0:08:11:7b:
0d:20:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 22:19:30 2024 by rpki-client on console-ams.rpki-client.org