Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/uT-2gi5O6BudCqlsLZ0EvbxHpTY.roa
File: uT-2gi5O6BudCqlsLZ0EvbxHpTY.roa (raw, json)
Hash identifier: QsUH2mO5Ag1ywRgCHXB4SpYQ6M75Ggifk+fyFH+RlZg=
Subject key identifier: B9:3F:B6:82:2E:4E:E8:1B:9D:0A:A9:6C:2D:9D:04:BD:BC:47:A5:36
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 018CC56E38E09F7A3DA842E9DE66E2640F1C
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/uT-2gi5O6BudCqlsLZ0EvbxHpTY.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 193.176.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:38:e0:9f:7a:3d:a8:42:e9:de:66:e2:64:0f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b93fb6822e4ee81b9d0aa96c2d9d04bdbc47a536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:09:86:e5:23:0b:81:6d:22:be:dd:2d:a9:
29:a0:ae:c8:9e:a6:e0:c3:3b:df:a3:02:70:e3:9a:
0c:44:1f:14:10:f7:c0:6f:66:36:a2:a6:eb:d1:2f:
9d:68:6c:79:50:b6:a4:f0:43:4a:3f:53:52:63:32:
c0:c4:12:b6:ce:54:5a:13:5b:db:07:92:0a:d0:e5:
12:2e:7b:fd:eb:c4:b6:aa:b0:12:10:ee:e9:29:e2:
e1:99:a7:53:38:52:8c:9e:d3:2d:9b:ed:61:c6:b8:
1a:d3:5a:b9:8a:54:2d:19:98:11:ea:44:62:2a:04:
73:e6:05:eb:cf:fe:5a:88:1c:30:36:f1:8a:22:ff:
c1:d4:a5:52:59:d9:8a:af:74:11:b0:09:16:45:d2:
d0:ee:e7:2b:a1:7b:fd:6e:85:67:c0:11:7e:21:a5:
03:d8:d3:f7:08:45:35:95:bf:fd:c2:71:f4:0f:23:
b9:6f:63:4f:3b:e6:7e:2a:18:69:40:b3:09:cc:2f:
1e:f7:f3:ef:fe:0c:a5:3c:d5:42:36:ee:da:a1:a7:
7b:c4:f4:68:a0:ac:91:1e:2a:8d:4a:0d:96:0a:95:
3e:0c:f8:ed:03:8d:fd:9d:08:84:14:27:96:43:22:
0b:21:4b:c6:6c:cb:b4:b6:d4:ef:43:88:38:ba:54:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3F:B6:82:2E:4E:E8:1B:9D:0A:A9:6C:2D:9D:04:BD:BC:47:A5:36
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/uT-2gi5O6BudCqlsLZ0EvbxHpTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f4:01:bd:38:28:e4:a7:e7:09:39:97:9e:60:04:c6:93:7d:
8d:7e:6d:bf:cb:0d:f7:42:06:8d:f4:6f:3e:ca:fb:a7:b2:e1:
f6:28:aa:c0:0d:e8:67:b1:04:53:06:a3:94:3e:f9:ff:53:a4:
67:42:65:1a:9f:16:ba:9e:70:0d:f7:a9:c8:f1:61:69:6d:fe:
1e:cc:94:52:17:ea:3c:3a:57:c1:f6:50:a9:f4:4a:f8:ca:fb:
27:e5:13:8b:86:50:1d:9e:ca:73:d3:ae:61:21:94:e9:fe:52:
41:f7:73:36:81:7c:fe:84:34:c1:d1:b3:d9:da:17:ec:9f:68:
7d:e0:97:bc:68:0c:d8:d4:51:4e:6e:f7:02:16:28:e3:96:ae:
58:0b:35:22:bb:60:bf:4e:ba:d4:10:30:83:a8:48:66:64:df:
e4:0c:c5:68:07:18:4b:c5:1e:9a:d3:b7:dd:d6:57:ee:e9:f9:
00:87:bd:be:b0:17:ec:64:2f:4a:f5:12:a9:4d:8b:5b:1c:57:
74:20:8a:95:0b:27:40:cc:b5:b9:5f:e5:a2:00:df:40:3d:2b:
9e:49:90:67:88:96:5e:90:8f:97:b9:41:c4:40:b2:13:55:bd:
40:51:aa:c3:1a:96:0f:27:9b:81:6d:f0:34:f3:42:13:7c:fc:
f8:e4:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:09:51 2024 by rpki-client on console-ams.rpki-client.org