Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/UTUvCUbB1un8q0KnILlcjmsz8qM.roa
File: UTUvCUbB1un8q0KnILlcjmsz8qM.roa (raw, json)
Hash identifier: DICVvqBLT6SWF5FclYwQps+qDTyua5zSXj72GPyAzZE=
Subject key identifier: 51:35:2F:09:46:C1:D6:E9:FC:AB:42:A7:20:B9:5C:8E:6B:33:F2:A3
Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial: 018CC2DB1C16172479ACE49C09F0A205BE82
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/UTUvCUbB1un8q0KnILlcjmsz8qM.roa
Signing time: Mon 01 Jan 2024 02:29:48 +0000
ROA not before: Mon 01 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209491
IP address blocks: 171.22.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1c:16:17:24:79:ac:e4:9c:09:f0:a2:05:be:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51352f0946c1d6e9fcab42a720b95c8e6b33f2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:85:83:31:68:02:d3:3f:06:dc:78:18:2c:
fb:bf:9b:2e:97:f9:a2:7a:0d:b1:92:e4:fb:9c:e1:
e5:00:88:d3:62:bd:32:a8:2d:8c:6f:b1:d7:44:6c:
4b:d7:19:6e:c2:79:cf:6d:9f:53:55:4e:d5:23:33:
bb:c2:e1:63:08:88:b6:8b:05:b0:a5:f0:66:d4:77:
83:8d:02:f8:0f:84:11:37:21:34:14:fc:85:18:de:
63:1e:ae:f6:8f:71:a6:f0:54:fa:03:dd:98:0c:12:
c4:d6:e2:7f:c4:3b:0f:d6:a3:8b:bb:ec:78:17:d8:
61:5f:aa:4d:4d:15:3a:2e:c1:b5:7b:3e:da:76:0d:
b9:a9:76:3b:cd:0b:44:4a:75:da:59:01:17:59:c3:
5f:15:6a:86:c5:81:a8:56:b8:d3:4e:96:54:47:95:
81:0f:76:d6:f9:46:7c:e6:6a:42:99:91:b3:9e:f3:
7b:d0:07:90:45:49:b2:b4:74:e5:5f:fc:d7:89:ba:
6e:ce:86:07:e8:f5:a8:73:f4:a7:18:d0:47:2e:6f:
39:e2:ca:12:41:f9:60:16:bb:2d:c6:5c:a2:91:91:
05:ab:c3:00:cb:0c:af:0e:63:59:4f:7a:70:cc:c0:
32:d2:16:fd:fe:ac:4d:0a:3b:fb:a3:21:c4:fc:2b:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:2F:09:46:C1:D6:E9:FC:AB:42:A7:20:B9:5C:8E:6B:33:F2:A3
X509v3 Authority Key Identifier:
keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/UTUvCUbB1un8q0KnILlcjmsz8qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.20.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a1:67:5b:ff:93:7e:d4:85:27:33:ea:57:f5:7a:c2:8e:ca:
e2:5b:3b:6c:46:7e:1f:8e:2b:2e:32:e0:15:ad:1f:9f:7c:4e:
0d:12:42:41:08:d2:a3:ec:46:a6:f9:50:b6:53:5a:e6:e2:e0:
e5:02:54:d2:9a:6e:1c:e9:11:6a:8e:84:81:dc:6e:60:d9:38:
6c:fb:b2:0a:ca:bc:e8:1b:a2:1c:df:d9:fe:7b:9b:aa:48:f7:
f2:1a:8d:22:75:98:9f:f1:b7:d9:66:e9:0b:1c:8c:b0:b6:78:
4e:85:88:39:0a:da:d6:a5:cb:4d:91:12:bd:e3:50:c0:23:5e:
d6:f3:76:82:96:d9:86:dd:90:61:ee:63:08:9a:9a:26:7a:c2:
80:dc:83:7f:2b:68:2a:08:d7:5d:a1:cf:ee:e2:90:47:bc:2e:
5d:4b:d7:be:a0:f9:f7:63:66:96:3f:28:2d:fb:8a:a1:45:3e:
54:2e:e8:39:c6:3a:13:e4:a8:ea:ea:33:95:06:16:aa:b9:bc:
2f:f7:f0:36:3a:dc:49:fa:0a:3d:06:8c:b1:25:b3:5f:13:bd:
d7:89:cd:d0:df:67:67:cd:1d:99:de:2c:e3:b4:a7:12:94:d1:
93:2e:7a:c3:25:55:c9:1f:68:5f:81:79:ad:fa:ae:92:a7:09:
d8:f8:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:51 2024 by rpki-client on console-fra.rpki-client.org