Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/ucQfUhqZF4BXJlOK14hyXOtH6Kc.roa
File: ucQfUhqZF4BXJlOK14hyXOtH6Kc.roa (raw, json)
Hash identifier: aIPmEdUMupnvHXwaUOR79BYoRrWErfqRITskdsuURHs=
Subject key identifier: B9:C4:1F:52:1A:99:17:80:57:26:53:8A:D7:88:72:5C:EB:47:E8:A7
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 01917EC6C9FAF7D2AD523CAEBD3F490189CC
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/ucQfUhqZF4BXJlOK14hyXOtH6Kc.roa
Signing time: Fri 23 Aug 2024 10:27:22 +0000
ROA not before: Fri 23 Aug 2024 10:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202072
IP address blocks: 185.45.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:c6:c9:fa:f7:d2:ad:52:3c:ae:bd:3f:49:01:89:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Aug 23 10:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9c41f521a9917805726538ad788725ceb47e8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:28:46:ac:5d:d0:3f:18:06:25:ac:ab:e9:
98:49:bd:36:a7:2d:cf:8d:5f:e4:67:f1:4f:87:4f:
59:5f:39:e1:8b:d5:49:4a:65:3b:2b:a8:dd:26:5c:
25:bb:8d:2d:82:4b:42:e9:26:25:a3:84:0b:ca:b6:
dd:10:a6:f0:ca:45:f4:56:87:d7:b0:a2:2a:5c:f8:
0d:1a:c2:1b:9f:15:3b:6a:48:22:7a:92:08:71:5e:
f2:57:8b:d2:f6:13:70:da:04:f0:c9:58:68:a1:03:
8a:22:9a:2a:78:9b:5e:74:34:5a:fd:d4:a0:51:1e:
83:66:5e:10:97:c3:4e:b1:20:d9:82:2b:4e:c4:ab:
e1:8a:29:1c:7b:46:b8:d6:55:ec:d7:91:68:d5:4c:
72:5e:84:12:9d:9d:49:18:e4:3d:50:f7:2a:fa:28:
7d:b2:28:29:cc:bb:1f:b6:c5:39:d5:32:53:73:3f:
fa:89:4b:2c:7e:d7:02:b6:4a:4a:2d:a5:b8:0d:64:
04:0d:0a:32:ef:7d:bf:d5:f1:ed:f3:43:70:2c:c3:
e9:a6:b8:c9:ed:5f:92:2f:b8:cb:2a:5a:17:8b:39:
29:c6:26:19:e1:c4:41:6d:17:3f:ff:a0:35:d8:b3:
1a:78:a8:6b:1f:73:0b:75:ef:5b:a9:82:c9:fc:3c:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:1F:52:1A:99:17:80:57:26:53:8A:D7:88:72:5C:EB:47:E8:A7
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/ucQfUhqZF4BXJlOK14hyXOtH6Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.44.0/22
Signature Algorithm: sha256WithRSAEncryption
35:d8:73:5e:50:e3:9c:25:0c:09:de:a6:4c:b1:3e:4d:d3:cf:
7b:c9:ad:63:a5:88:a8:5f:b6:9c:fb:4e:d5:fd:a4:50:78:a5:
71:42:5f:11:d2:6a:c3:16:91:bf:3c:7e:4a:8b:23:39:95:23:
71:73:b9:8b:e5:78:f8:83:85:3d:6d:f9:8a:bc:b5:25:24:d3:
97:45:bc:ea:a9:4e:01:7c:72:23:40:25:01:ea:59:a3:36:3f:
13:5f:32:44:6b:fb:9f:a9:84:8f:ec:93:09:07:1a:26:e1:ac:
1b:2b:c8:93:9b:c1:9e:31:e7:3c:23:50:2d:70:7f:89:a3:90:
3d:f0:21:0d:cb:1c:5c:4b:c0:8a:97:34:42:f8:38:ee:6d:91:
27:a1:a4:c0:d1:88:34:bc:d2:30:5f:23:68:5f:8b:f6:74:cd:
ef:43:2b:10:15:b0:d8:10:db:66:ed:e0:d2:0e:a9:d5:13:84:
e3:d1:9d:86:0b:eb:c4:93:e6:41:33:f8:4b:8e:11:b7:d2:03:
da:25:86:49:2a:45:54:6a:2d:e4:e3:0b:c0:94:c7:e6:8e:56:
ce:e0:b2:f5:44:eb:ba:43:64:0b:ce:6f:f5:32:7c:75:77:36:
14:98:4e:69:60:19:f2:26:5a:f2:7c:d8:e1:d3:34:95:73:40:
5a:49:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:49:57 2024 by rpki-client on console-fra.rpki-client.org