Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/UlOyc7XDnHiopiiHJjCzx7BtzW0.roa
File: UlOyc7XDnHiopiiHJjCzx7BtzW0.roa (raw, json)
Hash identifier: hmYT989xyVa+oWUcL8z6HDY0S3rtkPAgqYIs993cv9I=
Subject key identifier: 52:53:B2:73:B5:C3:9C:78:A8:A6:28:87:26:30:B3:C7:B0:6D:CD:6D
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 018D6A819FC4ACBB4F4DED1B2792DB4252D5
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/UlOyc7XDnHiopiiHJjCzx7BtzW0.roa
Signing time: Fri 02 Feb 2024 15:48:16 +0000
ROA not before: Fri 02 Feb 2024 15:48:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 95.128.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:81:9f:c4:ac:bb:4f:4d:ed:1b:27:92:db:42:52:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Feb 2 15:48:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5253b273b5c39c78a8a628872630b3c7b06dcd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:92:c1:59:5a:1b:fb:ca:39:4d:59:38:72:
2b:b5:39:f1:94:66:81:06:b3:d8:32:1c:29:4a:1c:
2e:7a:6e:6d:e3:50:3f:04:c7:59:6e:19:05:a7:e3:
5f:a0:2d:df:33:28:6a:97:36:1f:07:23:43:7b:a4:
6f:50:5f:f3:08:98:90:f8:38:01:8f:62:9c:24:16:
a5:3c:4c:7f:d2:48:bf:93:10:13:8d:e6:65:a8:f1:
ba:5c:55:73:f1:a3:55:28:36:4e:35:16:5b:a3:38:
78:1f:70:e8:de:37:c3:d2:1f:90:48:5d:97:8d:e0:
e8:d6:f3:28:95:14:82:ff:06:ca:d7:f9:ef:c3:84:
15:75:9c:3e:03:15:b6:9f:63:3d:ae:81:5d:61:f2:
38:cd:8b:ee:3f:9e:86:99:cc:c0:f8:10:63:9d:10:
9b:15:ab:23:79:06:04:f4:b2:31:2f:53:2a:93:b5:
f5:9f:17:2e:8b:71:31:14:f3:14:16:ef:9e:c6:c9:
80:e9:98:ed:ab:08:08:74:dc:f3:1b:4d:59:9e:ae:
4b:5e:91:58:b0:74:cd:1a:4a:67:91:6e:a0:d7:a2:
15:e9:a2:56:09:79:a9:62:d9:91:6c:1d:c3:09:c0:
c5:46:7a:0b:d3:e0:91:fb:19:8d:d5:c6:71:ac:d8:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:B2:73:B5:C3:9C:78:A8:A6:28:87:26:30:B3:C7:B0:6D:CD:6D
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/UlOyc7XDnHiopiiHJjCzx7BtzW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:99:b9:3c:26:e8:8d:3d:fb:4a:31:af:33:fa:1f:66:53:43:
ce:2e:d6:71:e2:38:17:39:29:8d:b7:3c:2e:d2:99:74:73:4b:
03:54:91:1a:a3:d2:ba:b7:d8:69:fd:19:68:b8:19:3f:5f:84:
16:e4:d7:98:1b:fd:2c:b6:68:7d:06:30:0a:5a:f6:de:70:d2:
02:6c:fc:b2:2d:9d:34:59:47:c3:f9:f1:d7:9a:11:db:23:43:
ef:cd:e9:c1:9f:fe:4b:42:92:20:dd:a5:98:6a:dd:71:a3:a0:
7d:25:02:1d:de:3e:f7:7a:25:9c:ef:60:d5:1b:74:13:57:7c:
6d:a7:f4:7f:5e:57:4c:93:67:e2:e5:7c:a0:2f:b2:1d:64:c2:
3b:bf:ca:f3:c3:9e:7c:b0:58:1a:e9:43:e8:01:b7:7c:c3:31:
f0:c9:01:25:a5:93:b8:73:ef:33:f1:73:6b:ee:31:09:ff:b8:
72:1d:a8:16:30:54:24:4f:d3:23:b8:b6:30:69:6e:b7:f2:8a:
67:5e:09:d2:66:f2:40:e4:f9:80:9a:6a:36:30:8f:75:b9:b3:
73:06:19:90:ac:d3:e7:d5:0f:90:33:7a:54:3e:e0:e8:1b:e1:
fc:ef:a5:85:3f:1f:94:c9:9d:df:48:f8:2d:73:b0:4e:c6:d9:
17:82:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:49:58 2024 by rpki-client on console-ams.rpki-client.org