Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/_u-64n-i9jDJ0VmselLyWhN8GcY.roa
File: _u-64n-i9jDJ0VmselLyWhN8GcY.roa (raw, json)
Hash identifier: lI9NQDOn8xes13pLfrEFD/Is175yC2ZmMdxfvOOztcQ=
Subject key identifier: FE:EF:BA:E2:7F:A2:F6:30:C9:D1:59:AC:7A:52:F2:5A:13:7C:19:C6
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 018CC3B6CDC5313A58993E51BBC7A4BBF215
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/_u-64n-i9jDJ0VmselLyWhN8GcY.roa
Signing time: Mon 01 Jan 2024 06:29:46 +0000
ROA not before: Mon 01 Jan 2024 06:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211373
IP address blocks: 193.222.139.0/24 maxlen: 24
193.222.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Dec 2024 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:cd:c5:31:3a:58:99:3e:51:bb:c7:a4:bb:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: Jan 1 06:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feefbae27fa2f630c9d159ac7a52f25a137c19c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:95:ff:c7:74:6c:f5:6f:45:e5:95:f0:d1:
72:d7:16:80:c4:9f:90:6a:b7:0c:ba:4b:19:53:96:
b0:85:97:76:ed:b8:08:a9:88:64:2d:69:2f:04:44:
e8:4d:d2:47:83:7b:1a:7b:ff:41:b6:22:46:1e:71:
45:d6:83:dc:6c:93:99:3a:94:49:bf:8e:7c:55:94:
94:c0:6f:81:b6:4c:a7:52:08:75:08:c7:c4:3e:3f:
f1:2d:53:e7:cf:bb:a6:a2:a5:6b:7c:9c:74:fe:1e:
4d:f3:6c:37:7b:5b:5b:57:e0:42:10:e0:cd:50:e4:
13:9b:33:93:de:8f:29:4e:63:f9:07:9b:07:64:90:
60:2a:42:f7:2d:90:2b:51:44:2d:86:27:85:37:3e:
fb:4a:f1:26:56:3d:94:8e:97:75:95:18:a1:40:a0:
28:2b:dd:92:61:1c:bc:8b:be:ed:87:03:7b:11:30:
07:0c:e5:05:fa:8c:f0:db:76:7c:e4:4d:1a:4c:fb:
81:a1:ba:12:cc:78:01:eb:8a:e6:df:59:98:5e:9d:
28:58:85:ca:16:8c:f8:4d:5b:d0:75:26:b6:4c:22:
ad:f2:09:c2:fd:12:6c:28:04:5f:13:7a:40:30:a7:
26:11:73:42:0a:8e:2c:f6:cb:80:da:10:85:0f:a5:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:BA:E2:7F:A2:F6:30:C9:D1:59:AC:7A:52:F2:5A:13:7C:19:C6
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/_u-64n-i9jDJ0VmselLyWhN8GcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.111.0/24
193.222.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3a:67:c0:d5:fc:32:92:cc:8f:12:a9:bf:ba:c5:5e:ec:9a:
d8:7c:89:44:8e:b7:6e:80:f2:43:59:37:bd:47:a8:c6:e4:49:
67:2f:9d:c0:17:21:fc:52:2f:8b:60:10:ee:f8:c1:fb:08:df:
5c:26:b8:4a:c6:da:63:39:22:a1:bc:77:ae:36:0e:e8:37:22:
d0:11:e5:97:fd:b1:6f:fe:8d:a9:91:da:ac:75:eb:d5:aa:e1:
33:e1:e8:eb:a9:31:df:ed:e7:ec:dc:4e:4e:6a:6e:06:5b:c8:
3c:3d:65:19:97:92:b2:09:e3:85:ec:c9:d7:33:22:fd:ac:20:
31:ae:55:e3:7c:ab:96:b0:c5:42:4c:4d:57:cc:2b:93:9e:c6:
f2:5b:93:cc:c0:6e:44:75:4d:3f:83:0c:12:09:be:b0:c3:bd:
91:af:9b:55:8d:f4:02:b9:c2:bf:6c:2f:53:ff:85:41:bc:17:
d4:84:8e:80:0d:9b:5b:34:45:e9:12:14:96:c1:59:35:75:ee:
13:bd:d7:e0:9a:d5:d5:d0:e4:6d:c0:a9:cd:ac:f3:28:a8:be:
5a:e1:52:bb:ec:50:85:ac:43:6e:31:dd:86:76:1c:6a:92:5e:
4a:25:09:c1:72:13:ac:2c:21:02:f9:34:19:6b:71:f4:93:81:
f1:25:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 18:55:58 2024 by rpki-client on console-ams.rpki-client.org