Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/0uHVoAUNN-73npmI3kbuiw7V50s.roa
File: 0uHVoAUNN-73npmI3kbuiw7V50s.roa (raw, json)
Hash identifier: FDLU5P/eBvX5iHOmJnmCLjC5bBw7IihuKmWYnHPCqPA=
Subject key identifier: D2:E1:D5:A0:05:0D:37:EE:F7:9E:99:88:DE:46:EE:8B:0E:D5:E7:4B
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 018CC94DAB53AA3E43B9A87002D740FA0B2D
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/0uHVoAUNN-73npmI3kbuiw7V50s.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.135.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ab:53:aa:3e:43:b9:a8:70:02:d7:40:fa:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e1d5a0050d37eef79e9988de46ee8b0ed5e74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:39:5e:19:e5:fe:b4:99:23:5b:0f:b2:b7:
62:c6:1b:09:99:a6:5d:a3:a0:93:fe:95:d6:a3:04:
ad:24:65:b5:72:d6:45:5e:ea:3f:60:f0:a1:2f:0a:
25:29:46:11:50:66:52:5e:c8:67:4c:6f:d9:a9:3f:
c7:d6:ab:5b:1b:58:4b:4b:c2:ef:9f:37:c9:3e:b3:
3b:fb:fa:a9:ba:40:14:68:8a:73:2a:5e:82:3f:6d:
ef:b1:83:11:5a:b6:15:7b:95:d7:f5:95:5d:14:3a:
a9:d3:a4:5b:fa:5f:80:11:e5:4c:ef:4c:91:8a:59:
09:ea:45:eb:ca:bf:c6:94:99:f4:a2:af:df:0f:24:
64:0a:9c:6f:5c:6a:60:6d:4f:a4:98:1f:13:07:c8:
90:cf:18:8e:52:95:68:e2:81:64:0a:28:ed:cc:bf:
f6:a6:8d:e3:35:e3:b4:cf:fe:65:ee:e1:43:c6:e6:
d4:c8:74:bf:b8:46:f6:e9:ed:11:16:77:92:c5:ed:
c3:5b:21:b0:00:5a:50:59:c9:68:42:12:2a:42:47:
93:d8:b4:05:03:a7:9a:7f:b7:95:be:66:6a:a7:8a:
0d:0e:5e:7c:2b:88:4f:10:a4:68:fe:d4:c8:78:11:
26:36:5f:d3:12:6d:eb:d3:f5:d9:a5:77:21:6f:35:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E1:D5:A0:05:0D:37:EE:F7:9E:99:88:DE:46:EE:8B:0E:D5:E7:4B
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/0uHVoAUNN-73npmI3kbuiw7V50s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.219.0/24
Signature Algorithm: sha256WithRSAEncryption
62:59:9c:5d:e5:cf:e7:61:48:01:52:dc:25:fa:cb:db:66:ed:
5c:99:56:8c:9c:78:59:d4:bd:5e:89:5e:03:d8:98:73:46:c2:
4d:29:cb:02:15:9e:63:8c:cf:07:bf:28:0c:54:a7:ac:f3:85:
b8:b5:8b:50:51:0d:6a:72:cb:48:47:d1:dd:93:ad:02:46:04:
98:df:ec:4a:9d:87:fc:98:bc:dd:77:17:e3:7d:14:eb:bc:c9:
d0:ec:45:3e:d0:0d:35:38:9b:e5:49:a0:eb:84:cb:7f:f8:dc:
02:92:86:8d:e9:4d:6e:59:a9:7c:1b:a7:6f:16:9d:f9:73:49:
e6:19:70:b2:b4:97:82:d8:9a:25:00:18:aa:18:45:a9:2f:05:
0f:cf:94:ca:a7:35:38:d0:e6:96:46:3f:e9:ce:d4:30:6c:ae:
e6:1f:90:9c:cb:00:a5:e3:40:88:44:0f:9d:88:b7:db:d1:66:
48:f8:b4:52:27:c0:88:a9:0b:70:e6:92:fb:c7:fe:0e:6e:f0:
9f:4f:10:68:51:75:55:af:df:0d:8e:62:76:49:7a:fc:02:54:
e7:3c:61:bd:ef:41:eb:7a:5d:31:77:36:a0:44:37:bf:fa:bc:
40:49:7c:fa:bb:d3:1f:14:b9:92:5e:a8:e5:bc:59:05:8c:79:
b0:a2:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:00:03 2024 by rpki-client on console-ams.rpki-client.org