Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/uWKuw_5u-lDYO2qz3XrKdTikjN8.roa
File: uWKuw_5u-lDYO2qz3XrKdTikjN8.roa (raw, json)
Hash identifier: 6q0oBafwTTLALyUlrkYDTK42ajL0csBsE+jevpo8Ik8=
Subject key identifier: B9:62:AE:C3:FE:6E:FA:50:D8:3B:6A:B3:DD:7A:CA:75:38:A4:8C:DF
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802D08C175C12CF2C39FC4170FEB0A2
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/uWKuw_5u-lDYO2qz3XrKdTikjN8.roa
Signing time: Tue 02 Jan 2024 02:31:16 +0000
ROA not before: Tue 02 Jan 2024 02:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211412
IP address blocks: 93.115.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d0:8c:17:5c:12:cf:2c:39:fc:41:70:fe:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b962aec3fe6efa50d83b6ab3dd7aca7538a48cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1b:57:29:8a:16:5f:2a:bf:f5:3e:69:ca:d6:
bc:47:60:e6:d4:23:7f:ee:86:3e:84:ec:ed:57:42:
c2:ac:6d:e4:e5:81:40:4e:d2:34:b6:23:d9:e7:4a:
d6:01:2e:d2:75:da:e6:c9:3e:7e:07:db:c1:ac:66:
67:75:1e:20:07:67:eb:a6:70:9d:80:76:44:ce:bf:
94:1e:ee:12:b7:8e:c3:31:20:27:17:7a:c0:95:d1:
48:77:49:fc:52:0d:ab:aa:d0:d1:36:6a:76:b6:bc:
65:8e:dc:b2:14:24:42:85:c0:39:59:2c:d0:e8:c2:
10:98:d8:95:bf:8b:d1:17:4c:03:bc:d6:da:40:94:
79:5a:34:fb:1e:c2:f2:9e:33:28:18:b3:b1:c8:28:
74:b2:6a:a6:36:2a:ce:c0:57:e2:a1:8d:c0:35:1b:
91:d4:fb:3f:17:38:5a:cd:c6:41:18:08:35:0b:06:
87:eb:c5:3e:fc:ff:4a:4e:29:42:bc:cc:25:90:a1:
40:b3:6d:bf:c0:92:ab:dc:82:99:5f:f0:9f:ad:e0:
fc:b9:c1:19:ab:e7:3f:45:fd:e7:7c:1d:58:97:51:
5f:b5:ce:80:a4:42:aa:fd:dc:c2:a0:0a:7b:89:62:
19:d9:bb:b7:03:ca:8d:d1:fa:dd:4f:63:c4:39:0b:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:AE:C3:FE:6E:FA:50:D8:3B:6A:B3:DD:7A:CA:75:38:A4:8C:DF
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/uWKuw_5u-lDYO2qz3XrKdTikjN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.42.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c8:90:4e:71:da:dd:9c:38:8d:05:96:f7:53:64:e9:7b:07:
5b:9a:30:9e:6b:fc:0e:06:3c:8a:bd:11:01:26:ef:cb:29:35:
ac:3c:bf:5d:51:0c:20:0c:9a:ec:6f:83:8a:bf:1c:75:9c:9a:
ed:08:49:4a:32:f2:c1:da:5a:ff:da:e1:f6:6a:d3:69:06:34:
97:c0:5d:0f:1f:ce:38:b3:fe:93:98:7d:46:77:67:fa:41:2e:
aa:b4:cb:38:d2:0f:b2:b0:77:3e:0f:6d:e4:15:b9:6d:bd:a1:
63:7a:42:a6:08:a2:a2:4f:74:db:4f:c7:e0:d7:98:74:db:da:
01:a0:72:bb:a6:76:74:50:2a:1d:8e:cb:c0:9f:63:16:ae:bb:
17:b6:02:db:b7:77:d7:ce:94:9e:30:db:16:e8:db:47:aa:c6:
be:e7:4a:27:f5:a9:f8:3a:ac:4d:28:21:39:4a:9b:db:ab:90:
14:d0:08:0e:71:7f:2c:9d:fc:ed:a3:21:ae:fb:ff:ad:fc:9b:
b3:fe:f9:f1:cd:65:19:c4:b7:a7:7a:43:5c:30:d0:4c:e1:d9:
9c:dd:2c:8a:2b:8f:87:a9:8f:6b:de:e1:fd:aa:ea:11:7b:94:
08:60:7c:dd:31:f5:e0:d8:d0:1d:1a:90:7a:f8:22:80:66:09:
0f:5c:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org