Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/uhhrhqvzOeSJQczE88-nuObPqH4.roa
File: uhhrhqvzOeSJQczE88-nuObPqH4.roa (raw, json)
Hash identifier: Yb5cZ/LHByIgFLifli2ZGkEPxMgtx5WlcPXyQ3MtdFg=
Subject key identifier: BA:18:6B:86:AB:F3:39:E4:89:41:CC:C4:F3:CF:A7:B8:E6:CF:A8:7E
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 018CC348E393AAAA959F2B5AA7ADACA701EB
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/uhhrhqvzOeSJQczE88-nuObPqH4.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12360
IP address blocks: 194.55.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e3:93:aa:aa:95:9f:2b:5a:a7:ad:ac:a7:01:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba186b86abf339e48941ccc4f3cfa7b8e6cfa87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:3d:67:f3:65:b4:c2:41:64:08:ee:d4:5b:
e6:a2:b2:27:2f:60:f3:50:66:ab:6d:f0:51:31:fe:
3f:db:ee:90:fe:4b:89:0e:b5:22:ff:f3:5f:38:7e:
a3:f8:26:c6:0e:35:a9:35:a9:33:e2:63:20:14:c8:
e3:3e:5c:f9:b5:df:f9:93:df:f3:3c:03:ca:24:d3:
ec:82:46:d2:6c:45:8a:c4:91:2e:83:9f:b9:93:98:
c1:90:6d:f5:b6:61:c1:75:9c:51:fc:c7:32:0e:6a:
83:b6:8d:e8:b6:97:62:1c:51:fb:40:dc:7b:fe:29:
4d:de:b5:3f:ee:f3:50:84:27:4d:dd:2a:75:da:92:
52:3a:fa:3e:3b:7b:5c:d7:de:d1:c1:ef:95:46:58:
de:b3:63:6a:80:94:47:c2:29:74:2c:0b:0f:a0:6f:
5c:8d:9b:ac:9a:24:e7:90:94:a2:f3:35:41:78:c8:
3d:1d:38:11:56:2b:13:f7:6d:80:48:16:85:b5:0d:
39:5b:ea:ca:08:9a:0a:64:82:02:4c:f1:70:25:80:
53:14:f3:76:20:03:30:a2:d5:0e:07:f6:7d:39:6e:
46:30:5d:eb:78:ab:54:fd:55:a2:de:57:d4:2e:d6:
b4:87:43:2a:62:3d:17:44:29:fe:18:ab:02:c0:2b:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:18:6B:86:AB:F3:39:E4:89:41:CC:C4:F3:CF:A7:B8:E6:CF:A8:7E
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/uhhrhqvzOeSJQczE88-nuObPqH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.138.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ec:80:70:03:52:db:7c:0e:bd:78:42:27:55:49:50:ca:78:
50:d3:c2:fa:14:46:08:da:ef:c1:e2:7e:71:dc:44:96:f2:0e:
02:6b:fa:d5:37:f5:42:97:3b:da:31:f5:04:c9:89:d7:1e:5e:
89:fa:b5:8d:aa:ca:1d:44:73:52:d8:cc:81:c2:fd:86:5b:01:
26:3a:ad:a3:37:80:73:11:c2:b1:60:e3:49:85:ce:4c:38:65:
2d:1c:81:ea:d6:84:f8:37:a0:6e:d9:7b:f8:02:4b:57:e6:ac:
28:5a:c9:eb:0e:cf:35:09:67:aa:c4:b4:88:8b:f7:1f:54:90:
8f:a8:c7:d9:fe:11:9f:e8:43:48:a1:85:1a:9b:d7:83:9a:02:
7c:b4:84:cf:b0:75:34:19:75:0a:c0:a3:4b:02:b3:51:f7:23:
90:86:70:f9:ec:87:c4:7e:14:a4:12:39:62:fa:95:35:5f:e1:
2e:61:a2:d3:dc:d8:fc:66:c5:76:3f:7e:ad:9c:14:d1:25:53:
b8:f1:30:f3:fa:44:4c:c0:47:02:e6:6b:7d:de:ca:05:b5:5c:
7b:88:c2:c8:83:09:3f:8c:ad:0e:20:2f:e6:aa:8c:b5:24:97:
6f:46:9e:e7:44:d5:ec:ca:4f:98:be:a3:38:86:0c:59:38:b5:
a9:ce:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:16:48 2024 by rpki-client on console-ams.rpki-client.org