Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/h-uxfCutWm90cb_OkGvZdgUO3TA.roa
File: h-uxfCutWm90cb_OkGvZdgUO3TA.roa (raw, json)
Hash identifier: FLvrb9Luuy4YS1hW1kAMyMSg2Zmerv3JjDZnFsPOO4Y=
Subject key identifier: 87:EB:B1:7C:2B:AD:5A:6F:74:71:BF:CE:90:6B:D9:76:05:0E:DD:30
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 018CC5DC6D4E8E7CEFC19E27BFF6260F3D6D
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/h-uxfCutWm90cb_OkGvZdgUO3TA.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48940
IP address blocks: 185.78.32.0/22 maxlen: 22
185.78.32.0/23 maxlen: 23
185.78.34.0/23 maxlen: 23
95.181.250.0/23 maxlen: 23
95.181.248.0/22 maxlen: 22
95.181.248.0/21 maxlen: 21
95.181.248.0/23 maxlen: 23
95.181.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6d:4e:8e:7c:ef:c1:9e:27:bf:f6:26:0f:3d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87ebb17c2bad5a6f7471bfce906bd976050edd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:64:63:75:5c:6d:da:9e:56:e1:be:53:af:
b9:6a:ff:01:03:6e:5c:19:92:ff:18:6c:38:94:f8:
78:65:11:df:c2:c1:2c:f4:0a:f0:8e:f3:c8:bb:be:
0c:c9:f2:1b:88:00:8d:2e:2e:79:37:45:65:ac:d3:
50:7c:af:2e:5f:b7:7a:b2:6c:19:11:72:76:a7:53:
4a:c2:0b:01:7d:49:9e:3b:b9:53:46:c4:ba:1a:16:
c0:dd:59:e9:9e:a9:11:4b:5d:dd:b8:e9:d4:9d:c3:
73:fa:8c:6d:52:10:57:fb:84:30:86:43:31:9a:43:
aa:9b:cb:b9:43:20:57:20:1f:2e:ad:a6:bd:81:bc:
de:1f:a0:89:73:16:21:fd:cb:e2:56:f8:3c:91:81:
81:0c:5a:c2:4c:0a:42:6b:af:0c:b3:e3:06:a3:f0:
10:45:da:c0:1a:33:cc:20:d3:26:49:97:5b:26:52:
9d:ae:7a:0d:e2:0f:ae:e6:fd:3e:21:64:0c:a6:ac:
c7:07:5f:b7:ac:b0:53:8c:ab:2f:ed:ae:5a:1f:d2:
70:df:b2:e6:da:75:9c:3b:19:25:ec:1b:8d:f9:ce:
d7:73:71:65:9a:00:b5:4e:67:c3:4b:14:5c:7a:5b:
11:c7:16:a9:de:21:61:cd:ab:b0:1d:b6:4d:c8:c4:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EB:B1:7C:2B:AD:5A:6F:74:71:BF:CE:90:6B:D9:76:05:0E:DD:30
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/h-uxfCutWm90cb_OkGvZdgUO3TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.248.0/21
185.78.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:36:b8:a5:c5:ae:fb:97:63:b7:e8:0c:10:15:4a:ad:a1:af:
e0:84:90:0b:34:7d:b4:b1:8d:e3:6c:d0:5c:15:1d:0f:c9:23:
2b:78:22:38:15:51:78:dd:fc:31:ee:f6:44:46:63:4a:e0:0b:
2f:98:6f:50:0f:1f:81:dd:2b:ee:10:e2:c3:2a:6c:62:33:b3:
0f:dd:0e:e5:1a:72:f9:e7:35:9d:fc:16:46:3c:04:83:c0:dc:
4b:ec:09:00:4f:b3:0f:5b:05:b4:9b:01:49:21:b8:8c:39:51:
db:d3:f9:3b:49:40:12:c9:0e:49:fa:03:7d:ac:be:fe:7b:01:
66:9b:b0:ad:95:b7:1b:fd:9f:12:e8:cd:8f:3b:3d:18:6e:a9:
f2:7a:d3:8e:f1:e6:c3:97:ec:65:58:43:4c:7e:cd:0e:e2:57:
99:b3:20:17:9f:45:b9:50:25:e3:18:28:40:7e:22:cf:8b:7a:
63:8a:37:42:b0:77:bc:9e:5d:2b:de:ed:61:e7:da:22:45:f1:
0e:1f:f3:02:c7:6f:6b:36:16:93:d2:2e:6f:87:a6:8b:48:94:
c3:62:d3:bd:af:84:13:8d:45:61:e1:ea:8c:cb:91:04:4f:13:
a5:4d:cc:46:2c:dd:8e:7c:e2:29:5d:0c:ed:f5:d9:e1:6b:e6:
4b:46:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:42:40 2024 by rpki-client on console-ams.rpki-client.org