Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UFWthDJ-JREcmIqAe7GEcUzV5Yo.roa
File: UFWthDJ-JREcmIqAe7GEcUzV5Yo.roa (raw, json)
Hash identifier: c+ZLbBdFTXeHy1E3wsXYCYnGcPR+l7KlrMXh92sivzc=
Subject key identifier: 50:55:AD:84:32:7E:25:11:1C:98:8A:80:7B:B1:84:71:4C:D5:E5:8A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9398C3A98238A00A780A91A36BC8
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UFWthDJ-JREcmIqAe7GEcUzV5Yo.roa
Signing time: Mon 01 Jan 2024 18:31:30 +0000
ROA not before: Mon 01 Jan 2024 18:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203369
IP address blocks: 188.114.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:93:98:c3:a9:82:38:a0:0a:78:0a:91:a3:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5055ad84327e25111c988a807bb184714cd5e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:87:03:ca:6c:60:0b:5b:f0:1b:cb:2b:a0:
af:1a:d5:eb:6e:65:7e:93:da:f0:5e:e7:bb:b2:76:
53:d9:e5:89:e6:ab:87:a9:b6:da:e7:bb:ce:80:bd:
8c:a4:ce:59:ba:66:bd:eb:29:5e:c4:1b:f6:1e:6c:
57:d8:32:0a:a2:9e:95:97:5e:5c:b9:f4:5c:df:9c:
75:ea:0d:6e:8e:e8:32:e4:35:b7:42:78:44:95:26:
a5:77:6b:06:e1:0a:e2:1a:b9:44:ae:2b:1f:d2:19:
a1:ca:5e:4a:05:92:7d:09:dc:62:70:be:f2:a5:48:
ee:ac:f0:97:91:1c:03:58:14:59:86:52:21:34:3d:
b4:81:57:aa:e8:06:f9:ae:c9:1e:27:38:a1:96:a3:
fa:e3:78:f0:fb:0f:b2:c6:25:32:64:83:c3:4c:f1:
72:a1:ee:77:a8:2b:09:e8:20:21:8a:bf:1e:a4:72:
2e:d8:74:40:e2:e6:27:28:c0:8e:78:c8:fc:a9:0b:
d6:0b:3f:0a:d3:8a:46:32:e3:95:cf:ef:eb:b2:ef:
9a:39:8d:c2:2b:ec:87:52:34:25:08:f1:1c:69:e8:
84:62:e6:b4:d4:b3:86:34:2c:05:6f:5b:40:14:e7:
c2:0c:78:be:48:f2:19:36:6e:cf:2e:ad:9b:e6:40:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:55:AD:84:32:7E:25:11:1C:98:8A:80:7B:B1:84:71:4C:D5:E5:8A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/UFWthDJ-JREcmIqAe7GEcUzV5Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.67.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c0:62:75:2a:8e:4d:a6:0d:cb:38:3d:9b:b1:cd:e4:45:c0:
5b:96:f8:ea:a1:b2:61:08:df:8c:b2:74:3e:36:0d:70:88:65:
a9:0d:d5:cb:3e:1e:54:59:ca:99:c0:22:4c:78:74:cb:94:29:
d2:78:4a:56:6c:8c:db:51:fa:65:63:ee:10:9e:49:6d:52:8d:
3e:39:f6:e0:48:4f:96:3f:97:19:6d:1d:b6:c4:f2:05:da:96:
4a:0d:68:8e:1b:45:30:9a:a6:7d:98:f7:78:bf:1f:6e:32:08:
75:6f:6b:cd:33:10:3f:39:af:e0:39:46:31:ff:c8:8c:ea:54:
84:69:e9:92:d9:bd:e6:4e:b2:d8:2c:5e:fc:a0:be:2c:af:94:
a7:79:a1:6f:27:03:b2:14:b8:d9:f1:af:8c:e6:97:71:a7:39:
e8:d8:77:51:6f:17:bc:34:c1:f5:aa:96:ec:25:a3:2d:f2:0c:
2d:d5:50:45:38:50:7b:e5:ee:a4:46:2a:57:2e:11:92:e7:cf:
dc:82:81:3f:b7:4c:66:b6:30:32:f7:fc:8c:12:ce:1b:cf:c5:
15:5a:62:8f:1d:db:dd:3e:fd:e3:1b:be:c0:4f:aa:0b:45:da:
e1:20:27:b8:ef:e0:15:9f:79:93:46:51:de:c5:40:79:51:63:
37:d7:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org