Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/nUgqoUz4Pv4voyh33KKnWYOsykg.roa
File: nUgqoUz4Pv4voyh33KKnWYOsykg.roa (raw, json)
Hash identifier: ZWjddk9pT2TY3Apak9BZyAsDcrdXE5+FTy3jXGv3+jg=
Subject key identifier: 9D:48:2A:A1:4C:F8:3E:FE:2F:A3:28:77:DC:A2:A7:59:83:AC:CA:48
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 018CC4255D3D7987EBF1357EE50E08D8F85F
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/nUgqoUz4Pv4voyh33KKnWYOsykg.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 194.50.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5d:3d:79:87:eb:f1:35:7e:e5:0e:08:d8:f8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d482aa14cf83efe2fa32877dca2a75983acca48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:ac:5d:de:53:f5:86:a6:06:62:2b:35:da:
ae:1d:e6:c7:fc:7e:c6:2e:df:f8:89:06:a0:e4:59:
6c:40:57:60:10:70:3b:5f:13:cd:0e:ec:44:46:4a:
80:eb:19:4f:c8:10:2f:50:c7:1e:8f:bc:26:10:57:
c3:14:a8:95:7e:36:c6:24:15:31:9d:97:f9:9a:cf:
cb:83:68:48:b0:bb:81:6b:d0:39:8c:65:0f:6a:45:
15:96:b0:56:ec:b4:92:2f:d9:78:fa:88:27:22:be:
31:50:39:67:b2:ae:89:2d:31:15:18:1d:2a:c4:75:
81:f8:19:2e:08:76:9d:24:73:b0:f9:16:c0:10:eb:
63:47:67:12:04:bd:1d:6f:ea:18:e6:49:76:23:1a:
85:2b:bd:e9:c0:95:12:54:0e:fa:4d:c7:33:70:22:
fc:68:96:ae:57:6f:c2:9b:59:58:8f:cd:bd:d7:bf:
ce:90:ee:7d:c2:d9:0e:ad:f8:0e:48:7e:31:5d:c6:
43:24:32:1a:0a:e2:f0:d8:9f:34:d4:7b:5b:dd:ae:
4d:73:f0:15:f8:7f:33:b3:5b:c2:7a:0e:34:65:ca:
22:d3:f5:24:83:0c:98:6d:c6:79:f3:48:52:9a:02:
3e:2a:c1:4a:a8:0f:c4:cb:05:3c:59:d3:cb:62:7c:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:2A:A1:4C:F8:3E:FE:2F:A3:28:77:DC:A2:A7:59:83:AC:CA:48
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/nUgqoUz4Pv4voyh33KKnWYOsykg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.38.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5c:82:6d:f6:10:b7:bb:99:22:a4:30:2e:60:2e:f2:ac:45:
45:7d:3e:7b:05:e4:5d:c8:82:47:f8:d4:2d:c0:0a:a8:d7:27:
39:d5:79:b8:7b:d7:33:03:7c:7e:44:e5:2c:f0:64:15:bc:13:
0c:e7:ab:3c:61:5f:29:0a:d8:92:18:5c:ef:fa:b8:9f:e4:5e:
ed:75:1d:11:30:69:d2:56:d0:98:c6:1b:33:9b:af:06:8c:ba:
21:3b:5e:eb:ec:1d:c7:04:8d:07:71:c8:de:b1:69:4f:35:79:
fa:35:56:6b:68:62:57:0b:9d:fe:d9:cd:8a:08:a7:40:80:54:
cb:37:26:8f:4b:cf:35:9a:a0:ca:80:13:0e:19:cc:42:13:dc:
a1:72:2e:7d:41:f1:fd:b4:62:55:f1:a0:87:7b:7d:b3:17:43:
4f:6b:20:8a:1f:79:f2:bf:90:9c:08:f5:db:fa:7c:39:a4:53:
63:44:27:d4:dc:b4:29:d9:cb:5c:6d:35:c4:59:43:09:89:79:
9d:13:6a:c1:25:57:d0:da:da:49:fa:82:3a:f8:42:61:21:e9:
53:78:65:f6:45:a8:f4:a0:de:16:98:bf:86:fc:82:5c:02:73:
6e:59:3d:2e:a2:c3:ce:5c:3e:a6:e2:53:42:73:b1:98:07:65:
3b:37:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:33:49 2024 by rpki-client on console-fra.rpki-client.org