Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/1-uw2ypbonY7ndVHKJORXpj8xUCI.roa
File: 1-uw2ypbonY7ndVHKJORXpj8xUCI.roa (raw, json)
Hash identifier: uF/h+cgAvVTSYFImi58IWlZu2iyUXIY9s2gYr0g5vLk=
Subject key identifier: FA:EC:36:CA:96:E8:9D:8E:E7:75:51:CA:24:E4:57:A6:3F:31:50:22
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 018CC4932DA3752F6EA264C4AB9B61335327
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/1-uw2ypbonY7ndVHKJORXpj8xUCI.roa
Signing time: Mon 01 Jan 2024 10:30:29 +0000
ROA not before: Mon 01 Jan 2024 10:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41182
IP address blocks: 195.248.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2d:a3:75:2f:6e:a2:64:c4:ab:9b:61:33:53:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faec36ca96e89d8ee77551ca24e457a63f315022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:25:92:75:e4:60:08:f5:ce:58:5e:17:7b:
ae:53:a6:cd:5e:70:d4:a8:eb:b4:00:62:19:27:87:
37:bb:6e:cc:9b:24:37:1c:2a:36:e3:4b:be:1c:86:
eb:a6:9d:9d:dd:c6:66:9d:d0:fc:13:de:34:8b:a8:
46:d6:85:e8:36:31:0d:ee:5e:4f:37:4f:fa:02:17:
8a:c7:a6:80:f6:e3:99:b3:cc:3f:dc:b7:65:f9:18:
d4:3f:bd:07:a1:29:50:c6:d8:c0:a9:09:b2:59:d5:
d7:b0:2a:93:86:9e:c0:7f:9f:f0:4b:32:42:09:97:
eb:65:2c:3d:b2:85:fd:41:48:ad:d3:1d:f5:75:69:
72:cd:44:11:52:8b:88:59:ad:f2:7d:81:6b:21:2a:
ec:d5:20:67:d6:ce:39:3d:03:72:01:d7:f3:68:3a:
99:fc:5f:85:95:2c:9b:68:8a:aa:ca:c6:6b:a1:c2:
76:b9:e1:09:cc:e2:0f:7c:ad:c1:48:d2:b3:a7:ee:
61:44:ae:05:2b:17:82:0e:25:02:08:3f:d0:a1:24:
c9:c5:64:e5:72:a9:6c:25:20:f9:9b:c1:2c:21:f7:
74:4b:de:13:60:9c:3d:07:74:ce:f2:3a:bb:db:3a:
0c:17:4e:18:61:29:fd:2d:ff:3b:f2:d7:82:66:71:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:36:CA:96:E8:9D:8E:E7:75:51:CA:24:E4:57:A6:3F:31:50:22
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/1-uw2ypbonY7ndVHKJORXpj8xUCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.68.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d6:8d:f8:a0:1d:92:ee:20:03:1d:7f:4f:7f:62:1a:38:0c:
d5:2e:fa:a1:4c:9e:1d:7c:39:ce:63:24:ff:15:1e:1e:c8:ca:
87:c8:5d:e4:61:7a:40:a6:e2:9a:7f:6a:22:dc:de:ab:13:53:
9c:63:87:16:96:75:f9:20:84:3f:b5:8d:25:f5:a5:b7:c0:d8:
d2:ad:87:54:32:54:97:1f:84:36:75:57:e1:5a:40:d3:83:75:
8e:85:6a:e0:fb:7c:7a:73:08:41:a3:2a:42:0d:7c:f3:58:2b:
7a:79:32:14:de:5f:ff:31:00:a4:16:3b:fc:4d:e5:40:b1:ed:
ce:e8:78:50:2b:ce:2f:23:1a:ad:b8:f6:7f:5a:41:cd:ed:d6:
4e:5d:75:4e:60:12:ba:06:70:32:ed:96:e5:d3:e4:b7:37:56:
ce:45:4b:64:a5:fc:07:69:02:76:e0:d0:18:a4:8c:60:16:75:
64:55:bc:0d:e7:7d:c2:60:55:a5:b9:4d:8c:8b:70:8b:44:ff:
50:37:2f:2d:35:e5:2c:c8:7a:de:dd:f5:19:46:f9:94:70:01:
cd:6f:36:b9:bd:92:77:58:78:20:cf:77:f0:81:0c:ed:53:1c:
b9:14:bf:30:3e:bd:53:f2:46:9a:66:c7:84:5c:3b:c8:c0:42:
f5:9e:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:46:35 2024 by rpki-client on console-ams.rpki-client.org