Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UFMf9qF9e4VR39wqRdTVBU4uskE.roa
File: UFMf9qF9e4VR39wqRdTVBU4uskE.roa (raw, json)
Hash identifier: 5EiQH3Mb7QTxa454Ha7EOOfthDJVNLKBiiHkMXD2qhk=
Subject key identifier: 50:53:1F:F6:A1:7D:7B:85:51:DF:DC:2A:45:D4:D5:05:4E:2E:B2:41
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC803031E94671F340CDB377440454DFE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UFMf9qF9e4VR39wqRdTVBU4uskE.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206774
IP address blocks: 192.36.155.0/24 maxlen: 24
194.103.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:03:1e:94:67:1f:34:0c:db:37:74:40:45:4d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50531ff6a17d7b8551dfdc2a45d4d5054e2eb241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:c4:29:a2:83:a2:9f:66:76:64:88:80:72:
a6:0a:a0:65:7c:e5:96:ee:ee:16:dc:80:e2:62:a0:
07:e1:8d:9c:79:d4:db:1e:20:4f:06:fb:a6:f7:30:
60:eb:10:ac:fe:98:91:a2:c3:11:0c:21:18:da:2f:
6a:fd:b9:fa:33:25:c6:81:b7:d8:f1:93:41:d4:18:
8f:de:97:91:93:29:b3:07:d2:b7:07:51:48:64:7c:
1d:ae:16:bf:ca:2f:4e:64:bb:4e:21:00:e4:4f:9a:
b2:07:d7:dc:bd:c7:74:ed:46:50:eb:ff:09:ef:b2:
a0:0e:71:b7:58:ec:65:b3:e9:42:e7:1f:69:db:99:
53:ed:da:0d:b9:8e:cf:b1:24:79:42:06:8b:92:8c:
f6:db:e6:3c:01:95:e7:d1:4a:be:f1:96:6a:bb:7b:
39:d1:e1:d4:34:09:98:6f:dc:52:ef:68:1b:cd:3d:
c1:44:dc:df:17:e1:53:5e:66:3a:41:d4:0e:72:82:
28:8c:5a:10:a8:a4:34:a7:41:d2:3e:6d:b8:e3:5e:
c1:69:0d:93:ba:45:1f:6e:bc:30:08:fe:63:b2:f2:
8e:cb:54:ec:a4:8e:a4:e3:40:da:db:e3:37:c9:81:
27:43:9b:94:4f:36:d3:0b:c0:37:bb:e0:4f:17:2f:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:1F:F6:A1:7D:7B:85:51:DF:DC:2A:45:D4:D5:05:4E:2E:B2:41
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UFMf9qF9e4VR39wqRdTVBU4uskE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.155.0/24
194.103.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a1:e8:12:75:50:0d:8f:c6:12:47:e2:23:b5:ec:f1:24:c6:
3d:b1:a3:c1:93:e5:f1:f9:1b:3c:29:56:33:d2:1f:e2:b8:c8:
90:e2:34:81:60:cd:ba:66:e5:7c:08:30:9e:64:9e:9f:c3:0f:
3d:c3:63:4e:96:51:e0:b7:7c:11:a6:48:c9:04:69:c8:f9:9d:
a0:42:25:6d:9d:74:a3:b3:52:b1:50:95:57:49:f3:6b:23:25:
c4:8b:a2:8e:1a:28:5b:96:2c:6d:f6:aa:fd:b9:d7:e6:c2:9e:
af:5a:75:c2:dd:ea:7d:3b:df:fc:41:b7:a8:6b:bf:e6:8f:8a:
e3:b7:2c:77:31:a0:31:01:2d:90:7f:08:7e:ab:b0:49:ef:0e:
84:9d:c3:c9:70:15:bb:cf:f6:b9:14:d8:3c:32:c1:42:4f:54:
ce:ac:17:2b:9d:40:7b:2c:50:c7:5e:2a:0d:07:94:cd:a2:ec:
76:be:40:25:8c:f2:4c:32:63:1c:74:df:4a:c7:67:a4:4b:3d:
1f:63:59:86:30:de:0f:cf:ae:4a:dd:53:3a:28:5d:23:45:17:
b8:42:2c:ee:1a:b5:cb:35:1f:bf:3e:34:51:fd:dc:54:aa:c6:
b6:0a:31:d3:78:70:39:5a:d2:3b:ba:98:ce:01:c5:1e:1a:f3:
b1:2c:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:13:22 2024 by rpki-client on console-fra.rpki-client.org