Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/UOARW4Efpe67MVYGYqC65cBcvgQ.roa
File: UOARW4Efpe67MVYGYqC65cBcvgQ.roa (raw, json)
Hash identifier: uXGJha5kym3X1jfPWm5oA+SLDwTOihE+rxJJxHVcjk0=
Subject key identifier: 50:E0:11:5B:81:1F:A5:EE:BB:31:56:06:62:A0:BA:E5:C0:5C:BE:04
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 018D653C232FC71DDDAC66A2DDC808D7EF73
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/UOARW4Efpe67MVYGYqC65cBcvgQ.roa
Signing time: Thu 01 Feb 2024 15:14:16 +0000
ROA not before: Thu 01 Feb 2024 15:14:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209759
IP address blocks: 78.153.146.0/24 maxlen: 24
78.153.156.0/22 maxlen: 22
109.237.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:3c:23:2f:c7:1d:dd:ac:66:a2:dd:c8:08:d7:ef:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Feb 1 15:14:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50e0115b811fa5eebb31560662a0bae5c05cbe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:61:52:c1:6c:ad:1c:ac:d6:ab:b6:5b:2c:19:
a9:9a:3a:3a:92:9b:39:8a:9e:99:d0:2c:79:3f:52:
7a:27:c7:fc:2b:a7:58:07:d2:bf:55:e9:64:15:f0:
e7:87:3c:fa:cf:de:ff:cc:a4:a4:77:dc:a3:55:71:
4f:49:de:95:04:84:3d:0b:7e:ca:3b:97:09:6e:73:
c4:ff:34:c2:8c:58:f0:7c:20:f3:10:c4:bd:1e:bc:
cc:7a:be:e5:cb:e0:55:04:ac:a7:4a:db:61:71:3f:
21:28:b6:88:d0:3b:54:ca:ac:dc:f2:aa:70:47:e1:
08:0f:66:52:b9:32:3d:c8:90:ca:88:4b:50:d3:1e:
36:59:f6:d8:d7:6a:ed:2c:5b:39:2d:6f:50:5e:1e:
36:e5:cc:0e:19:8e:c3:66:24:37:3f:3f:3a:e3:74:
03:61:e2:53:a1:9f:f6:bd:18:db:37:7f:33:e4:76:
96:67:92:76:37:5b:e5:3d:7a:1d:63:b2:21:3a:05:
70:a8:bd:42:8a:fd:e6:2a:99:6f:32:54:72:24:85:
49:34:e8:da:e4:54:4a:17:a4:23:39:3c:b7:b6:ab:
97:34:88:9d:35:f8:0f:3e:50:06:9d:60:8a:6b:ae:
93:6b:39:d9:80:3f:66:81:4c:be:bf:68:de:ce:c4:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:11:5B:81:1F:A5:EE:BB:31:56:06:62:A0:BA:E5:C0:5C:BE:04
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/UOARW4Efpe67MVYGYqC65cBcvgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.146.0/24
78.153.156.0/22
109.237.96.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b3:b2:c9:a2:04:83:7b:e4:28:7e:2e:0a:e2:68:ec:c6:7f:
48:b5:3f:7f:5a:cd:b2:58:1b:df:06:7a:ba:02:3d:b0:c6:f6:
9e:a3:d5:e3:37:14:ba:64:34:a0:42:a9:55:d4:3f:8a:3c:d1:
5a:de:ef:57:6c:ad:59:cb:5d:10:02:29:e0:67:6e:b6:73:24:
df:f4:f8:3f:b1:79:8f:76:8f:5a:61:fb:80:f3:ff:2f:f2:20:
43:4f:fc:23:c4:36:9a:92:a6:2d:17:78:a4:63:f8:d6:71:57:
1c:35:ac:ab:79:c8:0c:04:3f:b4:04:bc:20:5b:04:cb:91:3f:
e8:93:98:9f:7a:90:8e:11:12:77:85:55:c2:9d:f4:b7:f1:15:
92:e8:d9:d5:5c:07:20:78:0f:ed:f9:79:b5:6b:8a:d1:ba:39:
f9:86:f3:e5:f2:4f:ee:cd:e3:5b:88:e4:f2:66:fb:cb:17:0f:
18:8d:04:71:bc:70:ad:26:cc:a1:44:98:12:ca:28:80:29:78:
5d:f9:12:51:00:39:7f:7f:07:b9:01:2b:05:75:8c:41:fa:b2:
7c:86:bf:98:68:fc:2d:26:87:fb:6e:f5:89:de:c6:7e:73:29:
0d:99:f3:71:7d:3d:d8:9b:16:5d:1d:cb:c6:2d:ae:24:51:64:
93:d1:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 08:58:38 2024 by rpki-client on console-ams.rpki-client.org