Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/UUc1AutBlxk8dh9sS2eelcLbjIc.roa
File: UUc1AutBlxk8dh9sS2eelcLbjIc.roa (raw, json)
Hash identifier: c+XSk3ECk3ikkRp425/2pJaA25HVwdY1HRCmH9z58Rc=
Subject key identifier: 51:47:35:02:EB:41:97:19:3C:76:1F:6C:4B:67:9E:95:C2:DB:8C:87
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 018CC56E3E4715C647F3156D1DB7662EFDD0
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/UUc1AutBlxk8dh9sS2eelcLbjIc.roa
Signing time: Mon 01 Jan 2024 14:29:45 +0000
ROA not before: Mon 01 Jan 2024 14:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60122
IP address blocks: 185.157.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3e:47:15:c6:47:f3:15:6d:1d:b7:66:2e:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51473502eb4197193c761f6c4b679e95c2db8c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:d6:2f:40:f1:09:a8:b3:42:23:cb:fc:8e:
15:de:b5:d4:b6:4f:e4:b6:b1:2a:54:ba:87:44:af:
c8:71:fd:5f:30:af:2d:da:da:ad:ed:c4:e8:92:71:
bd:28:95:e3:77:01:99:33:93:a6:31:10:57:12:68:
00:06:c7:52:b6:92:19:30:6a:af:6a:29:97:e7:93:
60:f4:bb:4a:24:27:85:18:63:56:37:af:36:aa:43:
a4:d5:23:70:4c:03:b1:1d:39:cc:ad:0b:6a:a5:d3:
ce:55:12:50:98:f9:56:a3:48:2d:75:b3:36:2d:ac:
6d:55:6b:b9:a1:9b:84:3b:79:a2:c6:14:e3:c1:af:
44:14:ea:89:61:65:cd:81:55:84:9b:66:22:eb:ff:
3d:55:2a:dc:65:a6:28:5e:5e:d7:aa:1c:f7:25:9b:
4a:35:bb:da:4e:bf:46:90:94:14:21:85:53:5e:66:
4e:1f:d5:24:66:d1:3c:9e:74:15:0e:8e:99:ca:a2:
20:ab:6c:ce:0f:af:4d:b1:ff:49:83:d7:84:18:ce:
45:e1:98:c1:e5:f4:60:fb:e6:59:50:cd:c5:32:74:
0a:ad:51:de:d2:43:be:2a:87:00:92:05:97:70:79:
d4:19:5a:ac:a1:6a:ea:50:c2:1e:e5:b3:12:9e:f9:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:47:35:02:EB:41:97:19:3C:76:1F:6C:4B:67:9E:95:C2:DB:8C:87
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/UUc1AutBlxk8dh9sS2eelcLbjIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.98.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0e:32:55:99:ab:fa:36:9b:43:a6:1a:ee:6f:69:fc:d5:4d:
e0:96:0c:18:a2:56:37:3c:04:2e:75:53:b1:ed:fd:43:7f:62:
b5:e1:a4:d9:d9:40:64:f4:d2:03:ad:3b:78:10:14:b9:ab:0a:
60:8c:a2:86:80:1a:b8:e0:63:a2:60:50:a5:7c:b4:f5:87:3b:
ee:d0:67:79:00:af:48:c4:2f:c0:82:77:98:61:6d:a4:e3:f8:
da:f0:54:4a:15:cd:69:31:4e:0b:96:bb:83:89:09:32:42:d3:
a1:ab:e0:7a:de:11:f2:b3:70:a9:d0:10:c5:ec:83:da:1a:18:
2d:5e:6d:94:9e:88:39:e8:12:3c:8c:61:a5:d4:0c:c4:c4:60:
b9:37:a1:49:2a:05:83:9b:c4:a2:e0:55:f3:d7:a3:43:0a:07:
92:1d:f1:db:8a:62:a9:3a:ac:75:1b:1f:d7:30:f2:6b:27:a3:
57:e2:50:7d:15:a6:b9:34:e8:78:6c:57:26:12:b1:c8:d6:05:
c2:06:10:dc:43:25:a6:e8:60:02:5c:c8:c2:bf:a9:ae:f4:8f:
27:38:2d:00:e1:d2:c3:7f:dd:e5:37:d7:25:65:6a:aa:30:b9:
f1:54:03:90:b1:79:be:bd:5d:56:cb:14:eb:de:06:21:b4:99:
c6:25:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:59 2024 by rpki-client on console-fra.rpki-client.org