Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/upJqBQ_9Nfxp_wltffF-uVMvrKQ.roa
File: upJqBQ_9Nfxp_wltffF-uVMvrKQ.roa (raw, json)
Hash identifier: O+3u7ephFsImblerezO83aDeDYrSxMMuuapmnBxVJJM=
Subject key identifier: BA:92:6A:05:0F:FD:35:FC:69:FF:09:6D:7D:F1:7E:B9:53:2F:AC:A4
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 018CC8DE2A75B30ACC24F24151FCABB5749A
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/upJqBQ_9Nfxp_wltffF-uVMvrKQ.roa
Signing time: Tue 02 Jan 2024 06:30:52 +0000
ROA not before: Tue 02 Jan 2024 06:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63593
IP address blocks: 192.169.104.0/24 maxlen: 24
192.169.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2a:75:b3:0a:cc:24:f2:41:51:fc:ab:b5:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 2 06:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba926a050ffd35fc69ff096d7df17eb9532faca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:06:c5:64:62:a9:dd:85:b1:ef:a8:50:43:
1b:b9:ff:4d:44:ea:dc:36:81:40:f1:b0:90:b1:73:
d7:59:ae:09:84:10:26:fa:96:52:57:de:dd:58:e3:
9a:8d:ba:c6:79:7b:c1:9f:22:34:43:32:aa:90:52:
62:6a:2d:ec:5a:05:eb:7e:44:c7:6e:7a:58:c6:51:
48:b3:d2:06:bd:f2:55:c1:7c:39:a0:b3:58:0a:5f:
bf:20:c3:ce:12:ad:ed:71:fc:be:6e:61:92:b3:12:
b3:df:74:3a:a6:6d:7c:3d:51:b5:58:9a:92:be:db:
67:e6:1f:3c:8d:32:2a:5e:f0:3a:a5:b8:03:7e:e3:
77:d9:89:ce:66:dc:d6:24:cd:8f:a6:cc:7f:bc:9d:
83:59:8e:9a:fd:d2:ea:85:3d:f3:6e:c3:4e:56:9a:
fd:1f:e6:f8:a3:7a:4d:d5:21:92:9d:71:df:88:e4:
13:3c:6a:50:a9:b7:06:0f:fc:d8:af:1d:b7:55:d7:
1a:74:6d:fe:7c:d2:27:29:f9:68:0f:0e:7e:7a:72:
c4:80:1f:62:15:4e:eb:b1:63:55:71:3d:31:43:85:
59:28:db:2e:40:09:e8:b0:b1:ac:b3:bf:20:1f:1b:
01:72:a7:9b:9b:07:86:5e:9c:f7:5a:85:20:75:50:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:6A:05:0F:FD:35:FC:69:FF:09:6D:7D:F1:7E:B9:53:2F:AC:A4
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/upJqBQ_9Nfxp_wltffF-uVMvrKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.169.104.0/22
Signature Algorithm: sha256WithRSAEncryption
77:3d:16:69:7f:97:e3:ba:5a:d1:b7:a3:ec:1c:a0:84:7f:a3:
96:e8:4f:8b:32:6f:06:68:fb:70:2e:ba:09:e7:e2:85:e1:36:
91:01:c5:c7:bc:9f:00:bb:31:6c:43:c0:28:9b:62:77:2f:a1:
74:3e:cd:88:20:6b:ff:07:55:6f:fd:c0:b9:b1:8e:90:cb:84:
20:16:6a:50:79:9d:0d:6e:42:d5:c0:d5:19:d5:f5:29:e0:00:
f5:78:d6:e6:37:8b:f7:36:83:2c:d9:45:5d:09:7c:fd:a1:ef:
ff:91:11:0b:99:7a:02:ef:41:72:32:d6:b0:db:8b:7d:eb:52:
ab:0c:43:51:38:64:ab:16:ad:fc:69:e6:f6:49:90:bf:0e:6c:
1b:93:a5:81:ba:e5:be:fc:bb:ad:5f:07:cc:a1:5d:78:74:2d:
1f:00:42:76:ae:27:68:07:01:c4:2f:dc:5e:90:13:f3:ac:d0:
e5:57:d7:39:ee:8d:bb:14:f7:8f:cd:1d:f9:3e:42:6c:d3:29:
4d:30:76:cf:73:9c:63:cc:ee:ab:ef:b9:c6:f8:25:b0:60:6c:
71:b0:e8:f5:06:1b:8d:07:33:02:6a:93:a7:f5:eb:c9:e4:e7:
11:46:48:dc:89:1d:7f:d2:ff:0f:90:20:c8:7d:eb:13:e7:4f:
2b:8f:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:17 2024 by rpki-client on console-fra.rpki-client.org