Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/umAwX38iyAwLDFsraAwyfUH0uVo.roa
File: umAwX38iyAwLDFsraAwyfUH0uVo.roa (raw, json)
Hash identifier: C1lKA8XAnuuE/vz4GiW+RMO90DZqjwRzClNvxqfHLbo=
Subject key identifier: BA:60:30:5F:7F:22:C8:0C:0B:0C:5B:2B:68:0C:32:7D:41:F4:B9:5A
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018CC7958F7D4FA7BEB96BFBA2F2A1CF5AA2
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/umAwX38iyAwLDFsraAwyfUH0uVo.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212333
IP address blocks: 92.255.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8f:7d:4f:a7:be:b9:6b:fb:a2:f2:a1:cf:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba60305f7f22c80c0b0c5b2b680c327d41f4b95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:06:63:c6:87:4f:25:9f:de:46:dc:5f:8b:
39:f6:53:23:eb:13:39:a0:f5:c3:6d:01:3b:9a:76:
98:f2:f4:e9:f9:bf:c4:79:82:c8:6c:81:70:92:70:
47:b4:a6:8c:e1:a7:ee:b0:f8:1f:c7:46:86:ca:84:
74:4d:84:6d:73:8f:d8:7c:0e:44:51:36:3f:7e:76:
82:48:1d:a2:27:85:ca:7b:07:ba:5a:01:e6:ef:68:
29:78:ce:dd:0f:8d:71:01:a3:7a:65:cb:71:04:3c:
d8:3b:1b:10:8f:10:91:5d:5b:5c:f8:b2:8a:91:d7:
f8:d8:42:47:42:95:18:6b:8b:36:ff:d7:aa:89:0f:
e8:ff:b2:cf:7d:a7:71:d7:2a:70:27:9c:56:1c:c3:
d8:25:2a:7e:91:a5:73:c6:70:ef:c5:88:c6:6b:bb:
53:ce:37:01:65:16:46:06:77:bf:f3:20:0c:20:e4:
29:a0:b6:41:88:54:10:bd:ef:30:45:83:56:73:64:
90:e1:11:87:1e:79:c9:3d:38:63:37:c0:a4:0e:27:
de:69:7e:86:f4:a1:a6:9a:da:56:b0:79:ba:44:1d:
a9:95:ba:81:b1:96:36:2b:30:ad:ff:ca:5c:d5:bd:
1e:cd:d4:59:d2:c3:08:76:dc:25:1f:bc:f7:a9:e5:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:60:30:5F:7F:22:C8:0C:0B:0C:5B:2B:68:0C:32:7D:41:F4:B9:5A
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/umAwX38iyAwLDFsraAwyfUH0uVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.43.0/24
Signature Algorithm: sha256WithRSAEncryption
14:09:ee:eb:cf:29:b2:61:c2:a0:98:23:9e:e0:18:24:82:ba:
c1:c1:a3:49:ca:14:3b:c4:01:a9:fb:b3:f0:b6:08:2f:cc:51:
60:f0:4e:47:0c:c0:7c:48:ab:cb:cb:98:7d:ea:7c:09:83:db:
1e:66:ce:f0:5b:e6:30:17:d3:08:1e:e8:7f:42:21:d3:3f:d2:
97:28:ec:f1:b4:ff:30:ab:3e:b2:6f:27:92:da:7b:39:41:bd:
8e:cd:59:fa:08:30:cb:45:0e:e0:3d:91:48:69:07:30:a4:19:
ba:e8:28:ba:c7:3e:78:38:d6:97:8b:ff:2c:b1:36:c8:ab:28:
ad:d9:1b:75:c9:b3:c4:99:14:66:b6:f8:d7:fb:e6:78:02:c2:
da:70:d0:14:71:a1:51:45:74:93:b5:75:e1:0a:49:eb:50:9e:
07:bf:5e:e2:b7:e9:58:92:be:45:d0:14:b3:bb:63:05:49:63:
42:9c:e1:78:9b:64:b3:0c:8d:b6:43:a7:3d:4f:e3:75:c3:87:
5c:c1:40:52:55:9d:f3:57:fb:e8:2e:dc:ab:35:24:b5:5f:e7:
a2:95:08:0b:89:8e:b5:da:07:79:1b:d4:04:ad:e4:66:a3:17:
91:81:7b:67:07:1e:c0:53:e7:52:3a:c1:47:12:28:03:3a:c6:
4c:e4:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:26 2024 by rpki-client on console-ams.rpki-client.org