Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/UNQhYKB6eLRkxNeK45fHs0pL1hY.roa
File: UNQhYKB6eLRkxNeK45fHs0pL1hY.roa (raw, json)
Hash identifier: hl9kHMGpGNfVdcwXuiVi+wZ+WvNRBBSzTvhomiCekdo=
Subject key identifier: 50:D4:21:60:A0:7A:78:B4:64:C4:D7:8A:E3:97:C7:B3:4A:4B:D6:16
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 018CCA28F0F92B531F0BD2EC1E894ADA58F6
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/UNQhYKB6eLRkxNeK45fHs0pL1hY.roa
Signing time: Tue 02 Jan 2024 12:32:09 +0000
ROA not before: Tue 02 Jan 2024 12:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.93.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:f0:f9:2b:53:1f:0b:d2:ec:1e:89:4a:da:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 2 12:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50d42160a07a78b464c4d78ae397c7b34a4bd616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:75:f8:38:48:82:06:09:57:2d:55:c1:48:
a6:0f:d4:49:16:97:ed:d1:3e:83:dd:df:7b:90:a1:
ba:7a:4b:cc:8e:da:58:07:b7:45:cb:1c:ca:54:b5:
a3:68:9d:92:9a:02:65:b4:c8:36:42:e0:ae:9d:87:
73:b4:18:4f:bc:bf:ae:20:7b:a1:06:07:10:2b:92:
38:10:73:b2:de:99:38:ad:3c:c4:6f:d1:12:2b:4a:
02:b5:f0:29:8f:57:0b:ac:c4:63:5a:a8:00:c5:dc:
bd:dd:06:e6:1c:46:04:0e:59:7e:f9:8e:d1:69:09:
6c:b5:3c:8d:f4:82:cc:f0:6c:c1:c0:96:2f:3c:9a:
70:84:4e:58:9b:60:41:9b:d0:1c:be:55:86:c8:b1:
8a:1e:d9:22:85:49:50:4e:b3:9f:ef:fe:27:9f:4d:
50:ef:a7:47:8a:bd:aa:b5:45:a6:fb:3e:a6:73:28:
34:ba:c8:8f:ad:0c:c2:34:55:94:8f:98:4a:16:ee:
0f:05:72:49:47:35:bf:e6:2c:36:4d:5e:80:85:d5:
f6:c7:6d:75:4d:6e:90:c6:5e:2f:c6:a4:96:2e:99:
1e:9b:c6:01:d2:1c:26:3c:e8:c1:46:bc:22:0d:fe:
69:63:8a:4e:05:5c:88:45:34:01:35:e1:3f:22:b5:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:21:60:A0:7A:78:B4:64:C4:D7:8A:E3:97:C7:B3:4A:4B:D6:16
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/UNQhYKB6eLRkxNeK45fHs0pL1hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7f:cc:44:b2:ae:21:0f:06:9a:d0:8a:82:6a:45:6b:60:c9:
b8:79:7f:ff:8c:39:26:46:22:19:56:8e:0e:b3:73:06:ed:0e:
6f:63:32:03:f2:61:77:34:a0:a5:65:c3:b1:27:77:62:80:da:
8b:21:f2:b2:70:d0:0b:7f:8c:96:60:d5:39:bf:9e:d5:cb:7e:
8f:62:4d:b7:ae:2e:06:a1:75:ba:d2:64:8b:6b:1b:ee:02:27:
59:d9:e1:cc:72:a3:0d:ea:38:d8:66:38:40:8a:c3:e1:81:ee:
2a:28:60:7d:81:5b:84:c0:5b:24:54:0b:84:d4:21:7a:fb:51:
93:6e:48:12:cb:d4:b3:1f:d4:53:19:fb:ae:82:37:a4:60:ca:
1d:c7:62:33:82:c9:b7:c9:db:16:dd:71:81:56:4c:56:e9:24:
4e:3d:34:7a:eb:e0:26:56:db:b1:82:5f:b2:67:a7:e7:c0:93:
d7:db:b3:0d:ea:97:0f:ec:2a:b9:e9:e0:da:c0:ca:6e:32:be:
90:58:1e:9c:3e:dc:a7:9f:f7:f3:7d:af:83:1a:c1:c1:21:6c:
a5:82:37:35:af:b2:58:11:76:71:fd:5c:67:34:53:cf:63:c0:
39:00:78:21:b0:8b:1e:d9:1c:3c:fc:b1:1a:e6:aa:21:e8:b3:
55:9c:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:03 2024 by rpki-client on console-ams.rpki-client.org