Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/Ujl_h0jCa-xG9Xp49eI0_MtNqV0.roa
File: Ujl_h0jCa-xG9Xp49eI0_MtNqV0.roa (raw, json)
Hash identifier: yHx54kIOB9auGvApyiSE7Lfl6KVL4Vn+BxE3Ek9s+Nk=
Subject key identifier: 52:39:7F:87:48:C2:6B:EC:46:F5:7A:78:F5:E2:34:FC:CB:4D:A9:5D
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 018FC1425BB9C4CCC3581B901E4B5825A9FC
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/Ujl_h0jCa-xG9Xp49eI0_MtNqV0.roa
Signing time: Tue 28 May 2024 22:11:42 +0000
ROA not before: Tue 28 May 2024 22:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15377
IP address blocks: 5.252.180.0/22 maxlen: 22
46.98.0.0/16 maxlen: 16
88.218.180.0/22 maxlen: 22
91.201.68.0/22 maxlen: 22
91.215.52.0/22 maxlen: 22
91.233.96.0/22 maxlen: 22
91.236.96.0/22 maxlen: 22
91.243.192.0/19 maxlen: 19
178.215.160.0/20 maxlen: 20
185.205.144.0/22 maxlen: 22
185.244.140.0/22 maxlen: 22
192.162.108.0/22 maxlen: 22
193.108.248.0/22 maxlen: 22
212.115.224.0/19 maxlen: 19
2a05:8dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c1:42:5b:b9:c4:cc:c3:58:1b:90:1e:4b:58:25:a9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: May 28 22:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52397f8748c26bec46f57a78f5e234fccb4da95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:71:06:a7:34:12:a9:12:cf:8b:83:2d:a7:bc:
b3:68:60:8e:e9:57:01:af:cf:b0:7d:1c:2e:f1:26:
3d:ed:9d:3d:78:da:a1:e4:42:8b:2c:bf:25:3c:78:
81:2d:aa:30:22:aa:9b:f2:94:59:11:3e:4b:b1:20:
af:cf:5e:1e:5e:6a:58:11:0a:fe:9b:09:0f:01:ad:
1b:62:7b:22:ab:ce:9e:df:59:9b:7b:0e:53:02:3f:
22:ec:96:28:b7:e4:14:2e:a7:e0:33:c6:d8:a5:58:
10:a9:ff:6a:aa:f7:5a:c3:31:cd:3b:79:58:b6:86:
59:e8:90:a7:51:eb:99:b5:2d:cb:b2:6b:b5:1c:70:
12:69:32:2c:b6:ad:63:a2:53:ea:21:c9:fe:e2:03:
92:1a:ae:f3:85:ac:30:8d:1a:87:90:99:0b:20:d6:
c2:3e:01:3c:e5:2f:67:fb:72:51:20:2f:2a:4a:c1:
b2:1e:1c:d2:7d:9b:23:c5:cf:e8:45:4d:c2:52:79:
7d:5b:92:46:ef:ec:71:6c:b9:c4:c6:bd:fa:3f:ac:
3e:3a:40:3f:7c:3a:18:d4:ae:8d:a2:9a:43:c2:19:
ba:c9:e2:2b:c0:7a:c3:b2:3c:38:05:57:2b:cd:96:
b3:b5:bf:6a:df:6a:a4:c0:27:a1:3b:ba:4e:d2:c6:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:7F:87:48:C2:6B:EC:46:F5:7A:78:F5:E2:34:FC:CB:4D:A9:5D
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/Ujl_h0jCa-xG9Xp49eI0_MtNqV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.180.0/22
46.98.0.0/16
88.218.180.0/22
91.201.68.0/22
91.215.52.0/22
91.233.96.0/22
91.236.96.0/22
91.243.192.0/19
178.215.160.0/20
185.205.144.0/22
185.244.140.0/22
192.162.108.0/22
193.108.248.0/22
212.115.224.0/19
IPv6:
2a05:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:a5:8d:e0:2e:65:7f:3b:10:a6:e1:97:4e:5d:bb:10:8b:fd:
a6:9d:34:1d:59:c3:75:04:ff:b5:fd:79:e1:5d:5d:8f:e0:1e:
b2:c6:77:10:bb:21:8a:e3:68:11:b3:cb:52:c3:c9:77:0a:45:
e8:2e:37:d4:ec:f4:f4:24:de:3f:d2:92:f0:e7:c1:9e:10:66:
69:d3:25:c5:37:81:c3:c7:0c:df:48:36:39:93:6a:2b:54:37:
c0:40:7e:1a:1f:db:9b:41:b3:22:cb:2d:b9:8e:ee:65:1d:8b:
ea:f8:9f:c2:b6:ed:f0:c9:5b:ca:82:14:6e:87:4d:92:50:cb:
8e:73:25:78:5c:47:82:7f:09:55:e4:b5:4a:18:d8:12:9f:b8:
23:16:05:a7:d4:69:c2:cb:83:d1:30:1b:44:c3:53:cd:e3:bd:
38:60:55:00:e6:38:88:3c:64:ff:71:02:9e:3f:9e:90:95:f8:
f9:c5:1c:1c:39:b0:86:69:7e:82:2b:e1:c3:f5:a8:d9:58:6b:
ae:ea:14:e9:05:d5:e3:f3:92:ad:f4:c4:16:ac:da:e7:7e:e0:
a6:d7:31:74:3c:7b:d2:08:3f:2d:cd:39:8c:b1:8f:a4:ab:ef:
7a:4c:1e:43:ac:90:cf:5f:c1:b0:fd:39:a0:af:99:b7:c4:13:
a1:4c:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:01:54 2024 by rpki-client on console-ams.rpki-client.org