Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/U6CMGZWetkyjmqpyRrZKimchDyk.roa
File: U6CMGZWetkyjmqpyRrZKimchDyk.roa (raw, json)
Hash identifier: zHHfrfEft63f1F+weV57nt8ZKPCnuv5c/bqnQUeug/Q=
Subject key identifier: 53:A0:8C:19:95:9E:B6:4C:A3:9A:AA:72:46:B6:4A:8A:67:21:0F:29
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018CC9BB016CBE8CB2776B3CB6A8046E5B59
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/U6CMGZWetkyjmqpyRrZKimchDyk.roa
Signing time: Tue 02 Jan 2024 10:32:05 +0000
ROA not before: Tue 02 Jan 2024 10:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25211
IP address blocks: 192.109.200.0/24 maxlen: 24
192.109.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:01:6c:be:8c:b2:77:6b:3c:b6:a8:04:6e:5b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 2 10:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53a08c19959eb64ca39aaa7246b64a8a67210f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:ba:51:c8:33:03:03:83:ac:be:5a:92:1d:
94:88:04:cc:11:e6:76:41:b5:10:a7:38:ce:89:23:
d1:9d:cf:f7:ad:c4:91:fc:28:d6:cb:da:04:4e:3a:
81:06:fb:b4:4b:d7:4c:3a:ca:73:02:2e:f9:00:e1:
33:e0:b6:ff:53:cf:f3:eb:98:41:9f:43:9b:61:84:
91:dd:02:d3:8a:69:55:f6:98:02:35:ac:44:ba:3f:
ae:fa:9c:d2:fa:6d:52:fd:fc:be:a2:e9:ab:dd:e8:
12:cd:a6:76:19:06:4f:fc:6c:87:be:1f:21:46:9c:
03:e3:ba:af:d8:c7:20:06:8c:f0:d2:15:3d:62:11:
f6:87:17:15:15:72:e8:37:c0:5e:4d:ec:6f:b6:7d:
aa:a1:a1:e6:9b:3e:7c:63:09:2b:0d:1f:5e:68:d9:
d7:0c:57:23:c2:48:92:7e:77:2b:10:06:94:3b:f1:
55:0e:3e:98:d0:61:cd:83:db:ab:5a:d0:03:5b:58:
6e:ef:a7:02:56:2c:3b:21:95:38:d4:08:f1:70:e2:
c6:18:55:9f:eb:4d:cd:71:c7:69:e6:7a:56:08:51:
6d:4d:29:7d:01:93:7d:2b:4e:bb:76:10:2b:e1:82:
34:c1:a6:29:84:59:20:50:2e:52:dd:33:50:cc:bb:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:8C:19:95:9E:B6:4C:A3:9A:AA:72:46:B6:4A:8A:67:21:0F:29
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/U6CMGZWetkyjmqpyRrZKimchDyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:31:8a:8b:e0:2d:8f:cc:35:c9:9e:fe:dc:73:e1:09:43:ae:
a3:b2:6d:91:43:26:35:8b:df:28:13:bd:cc:9a:1a:4d:ff:dc:
82:26:be:7c:61:9f:22:c7:71:15:88:cb:4b:b4:e5:f3:3a:06:
8c:f6:53:5c:86:b0:a2:69:35:97:5c:cc:e2:68:5f:68:c6:5c:
d7:0c:f5:2e:b2:05:21:c2:1f:2e:98:92:5f:5f:b7:07:bf:bf:
ac:6a:b3:92:fb:13:aa:bf:79:31:dc:87:b8:ed:5c:c8:3b:39:
39:5d:75:28:3a:6d:6e:0c:5f:0f:2e:c9:6d:37:e7:3a:69:4f:
e3:94:18:5b:3d:38:84:5c:35:78:e3:0b:13:c0:e2:66:e7:bf:
38:dc:23:85:8c:ee:ab:eb:fe:ff:d4:5c:40:5c:f3:9d:da:c7:
a5:c4:3e:17:bd:4a:da:91:c2:08:51:fe:d8:a4:d5:ef:24:17:
ed:21:3b:d2:20:0f:37:c3:9e:2a:fc:12:8e:60:0c:14:d8:e4:
c0:71:79:87:d5:05:7c:e0:d1:77:00:ef:1a:20:dc:60:5e:3d:
4b:47:6a:01:c4:fc:07:b8:cd:6f:cb:eb:b6:59:65:9f:28:b0:
ab:b1:fc:38:57:e9:0f:2d:62:8b:c0:99:b7:22:fd:55:bd:96:
5e:4c:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 20:00:51 2024 by rpki-client on console-ams.rpki-client.org