Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/U1ju-BCNdcdYG7qDHuD5b12RfK4.roa
File: U1ju-BCNdcdYG7qDHuD5b12RfK4.roa (raw, json)
Hash identifier: CFSTl4ULgOVhFKtJxANzm5rAg2ERPJSf4/R0HTAsrF8=
Subject key identifier: 53:58:EE:F8:10:8D:75:C7:58:1B:BA:83:1E:E0:F9:6F:5D:91:7C:AE
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 018CC26D2433BAE1BB7E621680C780DBFC74
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/U1ju-BCNdcdYG7qDHuD5b12RfK4.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212202
IP address blocks: 193.163.73.0/24 maxlen: 24
2a10:9080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:24:33:ba:e1:bb:7e:62:16:80:c7:80:db:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5358eef8108d75c7581bba831ee0f96f5d917cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:45:03:32:8c:cc:39:b0:33:e6:5a:d4:bf:
16:2d:aa:b0:50:8a:88:89:27:be:d8:4b:7b:f6:cf:
40:67:c3:0d:41:31:7c:95:5b:b4:5d:2e:20:25:c6:
30:bf:ea:98:a9:b2:74:29:2a:f0:3c:1f:0a:9f:e4:
01:d0:77:83:9d:c5:64:46:6c:61:b6:aa:35:fc:92:
7b:b5:d3:b3:ac:12:ed:13:12:5b:da:79:b9:52:3f:
b2:31:21:15:79:56:7b:70:45:0d:65:98:8a:24:48:
02:3c:af:4a:25:6b:74:32:59:d3:46:97:50:5e:e3:
e6:a0:a1:d1:4b:ff:1d:7a:2d:cc:5f:b7:b6:dd:cb:
ab:7f:3c:68:37:40:94:14:6d:eb:24:e9:16:da:d8:
ae:dd:1c:33:41:15:10:4f:56:e6:1e:85:80:c5:e0:
05:a2:72:3b:62:fe:09:3a:13:89:2f:06:55:f4:3a:
44:54:a2:7f:70:02:15:2d:0e:30:62:c5:61:34:e8:
50:bb:c7:75:85:0b:f9:64:99:cf:31:5a:4a:9b:b0:
04:4d:9a:b4:37:8e:4f:0c:6f:20:a2:b9:af:d6:5a:
ff:da:57:79:d7:53:81:5f:a1:63:c4:ff:6d:b2:98:
b7:91:28:6c:9c:b5:f8:80:98:e1:f5:47:5c:3b:7c:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:EE:F8:10:8D:75:C7:58:1B:BA:83:1E:E0:F9:6F:5D:91:7C:AE
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/U1ju-BCNdcdYG7qDHuD5b12RfK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.73.0/24
IPv6:
2a10:9080::/29
Signature Algorithm: sha256WithRSAEncryption
4a:08:64:00:41:51:31:80:b1:1d:9a:e3:9d:de:0e:69:95:77:
54:58:3a:c7:96:05:e4:76:22:86:2d:8c:4b:bc:67:f0:90:33:
a8:76:a3:6e:2c:6d:66:c8:bc:f7:d8:34:79:df:e4:98:bd:7e:
fb:a9:90:0f:e1:48:bd:57:18:74:ba:21:3d:6a:6b:0f:4b:f5:
32:ba:c7:4d:54:b4:53:8f:fa:09:c6:7a:62:68:3e:84:6a:95:
75:f3:67:6e:2c:d6:4f:ab:60:91:89:71:dc:d5:b7:8b:25:cb:
a5:72:5d:ef:26:41:71:8a:2c:05:f7:3e:df:ba:c2:26:36:f0:
32:db:42:ef:f6:c3:52:d0:f3:dc:01:b9:79:e9:eb:c7:2e:45:
7c:3e:4f:99:64:0a:33:a4:e3:9d:a6:89:2a:f4:9d:3e:ed:db:
74:3f:be:fd:54:70:47:27:ea:f4:ad:e4:e9:c5:9d:4d:f0:80:
01:6c:5e:c8:8e:8a:c3:a6:2e:e9:ac:12:9b:c0:24:d9:c0:65:
98:12:3e:d7:46:3a:2a:2e:ba:18:5f:a1:e0:3c:96:cd:1a:75:
7d:bc:c4:94:ff:fc:52:79:a6:11:e1:df:33:f7:79:fa:3d:77:
6e:bb:eb:b3:91:cc:99:b1:4c:74:0b:7f:40:8e:6d:5a:33:0e:
df:93:90:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:17:28 2024 by rpki-client on console-fra.rpki-client.org