Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/Uu6M6m1gWFUsIGfL44RBBGQtCR0.roa
File: Uu6M6m1gWFUsIGfL44RBBGQtCR0.roa (raw, json)
Hash identifier: Z2EnPuuD9R/VoG9pfDZ3Lepme0USUZSV7wvv496Dseo=
Subject key identifier: 52:EE:8C:EA:6D:60:58:55:2C:20:67:CB:E3:84:41:04:64:2D:09:1D
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018CC9BB034A4FA67D4D5FF8925B5998F51F
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/Uu6M6m1gWFUsIGfL44RBBGQtCR0.roa
Signing time: Tue 02 Jan 2024 10:32:05 +0000
ROA not before: Tue 02 Jan 2024 10:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 192.109.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:03:4a:4f:a6:7d:4d:5f:f8:92:5b:59:98:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 2 10:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52ee8cea6d6058552c2067cbe3844104642d091d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:7b:b0:2f:26:64:08:65:94:9a:0c:c8:cb:
b3:2b:46:7a:7a:90:a8:d6:6c:7d:5a:d9:ce:f7:97:
75:13:28:b4:6b:83:a5:af:dc:00:39:4f:98:45:01:
54:16:84:6d:3c:3a:22:74:b1:9a:8b:33:a0:b0:ec:
a7:c3:15:cc:3b:41:7f:46:c2:1c:3e:1b:49:81:e1:
ff:b4:0e:68:22:48:0b:c4:6d:fa:22:fb:fc:67:8f:
5c:3f:22:ab:69:08:6b:aa:a4:e2:7c:4b:f3:59:d9:
e0:5e:03:06:79:37:d3:ec:c6:bc:44:9d:9a:a0:72:
8e:af:bb:48:28:66:dd:12:dd:0d:31:4e:28:d9:28:
17:37:eb:c8:ef:46:ce:dc:94:e2:0f:d1:bf:8b:fb:
d9:c1:cd:25:3f:70:a3:13:92:05:d0:bc:9d:35:a9:
83:c3:70:67:f6:0a:94:e5:ae:8f:81:82:d3:4a:b4:
63:c5:cb:f7:fd:91:3e:0b:b0:5a:50:0e:8f:a2:7b:
ca:06:29:99:24:27:e1:9d:9c:cd:07:94:41:38:f6:
a8:6c:66:1f:b3:13:2d:8b:ea:c0:60:7f:85:86:f4:
6d:cb:83:e9:81:f9:e7:43:df:f9:c1:99:9a:f4:d7:
37:02:ee:54:53:bb:f5:26:b9:e7:f5:9f:63:e9:3d:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:8C:EA:6D:60:58:55:2C:20:67:CB:E3:84:41:04:64:2D:09:1D
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/Uu6M6m1gWFUsIGfL44RBBGQtCR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b3:bc:2f:3c:25:6e:70:d8:85:7d:c6:90:8c:60:59:0f:0a:
22:72:7d:67:fb:23:82:9e:2e:ae:1e:5d:af:00:28:25:2b:66:
7a:2e:0d:10:4f:07:21:dc:ba:30:83:07:37:a7:7e:3c:f6:27:
a2:8a:7e:f0:c1:9a:a5:98:68:5a:38:1a:11:75:c7:fa:9e:55:
7b:b2:6c:a1:81:eb:53:e9:51:19:46:88:ce:57:6f:b2:8d:e3:
aa:e3:26:41:f1:4f:d3:52:02:d2:8a:3f:bd:5e:6e:69:00:c7:
21:97:b8:37:98:fb:51:af:8f:d7:cc:df:92:60:0a:fd:42:07:
9a:7a:47:ee:4d:d5:34:63:88:e1:69:b1:26:b1:83:06:c7:f9:
59:ca:8a:00:ac:0d:bf:a9:c4:03:ce:e0:60:e9:56:cc:d5:89:
8e:6c:a7:6b:c9:f4:4d:c8:13:4e:75:f8:be:e2:f9:e6:a8:fb:
3b:01:6d:15:43:aa:92:50:fa:b4:43:27:09:11:10:d7:00:76:
92:08:74:65:b6:03:64:72:c7:bb:3b:7a:c3:5d:b3:f2:2d:e7:
3c:ab:b1:84:21:39:39:8f:bc:67:9b:cd:67:9a:a3:46:33:bb:
98:d4:34:3d:2c:27:bd:fb:a0:95:10:43:98:b3:e7:75:fe:bd:
57:73:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:53:38 2024 by rpki-client on console-ams.rpki-client.org