Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/UMOQuIGusgPOcSZTIJpaYcujt7w.roa
File: UMOQuIGusgPOcSZTIJpaYcujt7w.roa (raw, json)
Hash identifier: xXR2qEbEe9YAAmg2G/R2jD3Fa4ao1nRUHX1ujejqxek=
Subject key identifier: 50:C3:90:B8:81:AE:B2:03:CE:71:26:53:20:9A:5A:61:CB:A3:B7:BC
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 018F9BB2E8766EE2676D4CEB698579AF051B
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/UMOQuIGusgPOcSZTIJpaYcujt7w.roa
Signing time: Tue 21 May 2024 15:09:04 +0000
ROA not before: Tue 21 May 2024 15:09:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12935
IP address blocks: 185.173.4.0/22 maxlen: 22
213.179.0.0/19 maxlen: 19
213.179.0.0/20 maxlen: 20
213.179.16.0/21 maxlen: 21
213.179.28.0/22 maxlen: 22
2a02:6980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:b2:e8:76:6e:e2:67:6d:4c:eb:69:85:79:af:05:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: May 21 15:09:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50c390b881aeb203ce712653209a5a61cba3b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:64:da:5a:0b:5d:34:87:b7:46:8f:a6:1f:8e:
38:9c:25:a0:3c:f4:17:3a:3e:c0:16:9e:85:e5:58:
81:11:c3:03:c7:a4:12:28:ca:34:da:73:0e:d1:dd:
52:9f:06:6c:41:1d:bf:46:15:78:12:f9:08:49:03:
8a:4e:7f:b8:ba:54:43:f8:49:c5:65:76:11:05:c3:
bd:a2:e4:5a:80:c7:91:b2:08:09:69:0c:43:1f:3d:
9e:f0:6d:19:dd:64:7e:7f:2e:22:d0:91:a5:9f:f4:
5b:9c:84:a9:0b:66:a8:fc:93:ff:bf:f1:be:96:45:
44:20:47:a8:45:0a:97:00:ab:b7:2e:9b:93:85:f2:
ef:15:90:92:0a:7b:1e:06:86:5d:cc:fe:d9:bf:97:
ed:1f:af:81:74:3c:9f:ed:69:e3:24:9e:9b:8b:01:
3e:9e:5a:37:ff:88:0c:92:31:91:1f:c6:79:2d:4f:
dd:4e:30:55:6a:79:1a:94:f2:8e:95:69:fe:57:8e:
7e:96:61:3d:4b:94:15:28:6e:05:bd:05:ec:99:f8:
d9:a2:d6:5e:0d:ec:21:49:1b:46:4f:80:80:07:08:
43:de:ff:f0:89:c7:4a:f5:ac:cf:ce:d0:27:c6:1b:
fe:fe:aa:e3:c0:5f:51:f6:34:53:17:6b:49:86:fc:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:90:B8:81:AE:B2:03:CE:71:26:53:20:9A:5A:61:CB:A3:B7:BC
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/UMOQuIGusgPOcSZTIJpaYcujt7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.4.0/22
213.179.0.0/19
IPv6:
2a02:6980::/32
Signature Algorithm: sha256WithRSAEncryption
85:b5:7f:a2:f4:cc:94:ea:49:2f:1f:14:cf:cf:2b:5c:08:83:
dc:a7:92:d5:c5:75:98:2f:35:e2:f1:40:04:64:57:f7:af:d2:
00:8a:96:53:fb:49:b7:84:c5:72:3e:2d:54:5e:7d:26:61:e8:
50:63:d1:a1:85:15:fa:23:b0:43:dc:da:2c:c4:9d:41:8a:80:
15:09:9d:2e:41:7e:d3:c2:bf:f2:6e:08:bd:02:5c:98:82:93:
66:b9:42:8c:30:7d:e0:03:bf:d9:f9:aa:58:62:34:8f:cc:f0:
9c:d3:e1:5c:96:ca:35:80:86:1c:42:d2:01:00:1b:d8:2f:a9:
46:93:31:7a:a1:fd:66:08:10:64:5a:e5:52:45:8d:77:96:0d:
be:d7:9c:a9:3a:b6:fd:4c:71:0e:44:d1:ea:26:bd:80:12:59:
ac:0e:ac:5c:21:f9:29:7d:1a:7f:cb:d9:35:30:bc:7c:24:63:
fb:64:53:30:7a:8b:4c:fc:1b:b6:0e:51:65:7e:fc:fe:bc:2f:
b0:fc:7e:54:a2:60:91:18:95:61:9b:d0:36:ba:0a:26:13:1f:
0a:9d:b0:16:65:60:d4:e5:9d:0d:c3:8f:87:48:60:a7:a8:c2:
02:0f:2e:de:c4:bc:f3:15:20:2e:06:20:4f:b7:46:95:92:5c:
2e:5f:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:08:49 2024 by rpki-client on console-fra.rpki-client.org