Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/uBlvMciEOhOoE5GWBhg91Pne6p0.roa
File: uBlvMciEOhOoE5GWBhg91Pne6p0.roa (raw, json)
Hash identifier: eua3wIKb+3Ze0KlMQ/Xy+fv/xWgWGQWNEJ/43dbevkY=
Subject key identifier: B8:19:6F:31:C8:84:3A:13:A8:13:91:96:06:18:3D:D4:F9:DE:EA:9D
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 018CC56E65A11122AC01195589E0FCDDE722
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/uBlvMciEOhOoE5GWBhg91Pne6p0.roa
Signing time: Mon 01 Jan 2024 14:29:55 +0000
ROA not before: Mon 01 Jan 2024 14:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212726
IP address blocks: 185.242.12.0/24 maxlen: 24
185.242.14.0/24 maxlen: 24
185.242.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:65:a1:11:22:ac:01:19:55:89:e0:fc:dd:e7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 1 14:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8196f31c8843a13a813919606183dd4f9deea9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:a4:10:3e:2e:34:46:0d:62:b0:ff:75:5b:
19:a6:c2:17:a1:93:ff:86:53:d3:4f:65:4b:e0:e0:
a4:19:ab:aa:c9:4e:9b:e6:6d:3d:a5:79:7a:a3:3d:
ee:1d:0b:f9:ba:ac:f3:0c:93:73:6c:57:36:83:d4:
fa:f2:30:09:c2:8b:c8:92:3f:6f:d9:94:f3:d2:7a:
79:36:b4:a6:e4:f9:34:f1:9b:e0:d9:b4:72:27:33:
c2:b2:3d:e1:51:e8:c7:e4:dc:0e:3c:31:f7:7e:16:
3a:97:f9:e8:4a:f3:86:51:70:b6:ed:d1:9b:6a:79:
c6:52:bc:9d:81:7c:31:4b:e0:35:5d:17:d2:78:61:
4b:64:b0:f5:39:f0:3f:4b:3b:39:b3:bd:d0:51:94:
3d:fc:de:9a:8c:ca:28:53:54:a5:70:e3:63:65:58:
58:ce:11:59:bf:e7:71:82:ce:8c:11:56:62:bb:1a:
b2:31:83:d6:4e:78:df:43:3f:e5:28:01:c4:31:40:
9d:28:30:d9:97:13:bb:fa:66:ba:94:86:e8:78:de:
67:46:63:50:9e:5b:4a:dd:90:44:3e:28:7f:85:c1:
bb:15:99:13:4b:67:51:8f:4b:3b:64:d9:d0:9c:24:
35:47:9a:bf:b0:9c:10:57:45:07:be:3f:66:98:2a:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:19:6F:31:C8:84:3A:13:A8:13:91:96:06:18:3D:D4:F9:DE:EA:9D
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/uBlvMciEOhOoE5GWBhg91Pne6p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.12.0-185.242.14.255
Signature Algorithm: sha256WithRSAEncryption
89:76:44:80:14:5a:9c:24:c6:e5:a1:0d:3e:c0:26:c8:8c:35:
31:26:0b:91:c7:df:71:0f:a3:b6:5f:57:c0:10:cc:c1:1d:48:
84:fc:b3:42:c2:00:60:10:dc:6b:c6:c9:15:35:e5:27:45:5a:
72:96:02:d2:95:61:f8:0b:f5:1a:bf:4b:d5:95:03:c8:69:70:
8a:45:7d:14:e2:84:3a:96:e9:e1:da:d0:cb:a8:9a:8e:2c:86:
90:06:24:14:8b:9d:94:8f:b2:69:b9:16:63:24:24:4f:20:94:
4e:27:69:61:2e:59:40:b2:25:39:86:b2:6f:ea:75:59:d1:c3:
2f:fe:5f:72:0e:c3:b2:e4:77:35:e9:73:d8:07:6f:cc:c2:da:
dc:ce:f1:56:8d:00:de:55:ca:fd:20:db:c8:73:55:a2:bc:7e:
b5:a4:30:e0:80:ab:64:ec:de:ac:5e:2e:e6:1a:d3:13:2c:a4:
1b:13:fb:f5:b0:f7:07:d7:57:d1:2b:93:40:1e:85:4b:6e:9e:
e1:73:0c:e5:35:ba:2c:39:27:4e:6e:e2:87:ba:46:a9:ab:05:
3f:4e:2f:9c:96:73:af:52:74:69:cd:a0:6f:6f:41:71:fe:3f:
05:5e:39:2e:99:af:54:8c:84:6f:6c:75:e4:95:d2:19:e5:67:
2c:69:20:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:16:29 2024 by rpki-client on console-fra.rpki-client.org