Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/lU8Q3JMjMZygGJgbpwEkiCw3XsA.roa
File: lU8Q3JMjMZygGJgbpwEkiCw3XsA.roa (raw, json)
Hash identifier: D2bUK2Syd+eAaAarnF7E2e/Lew6DoKqSGy2fFX2BbeI=
Subject key identifier: 95:4F:10:DC:93:23:31:9C:A0:18:98:1B:A7:01:24:88:2C:37:5E:C0
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 018CC424CBC133B8C9160EFE971DB3B66902
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/lU8Q3JMjMZygGJgbpwEkiCw3XsA.roa
Signing time: Mon 01 Jan 2024 08:29:54 +0000
ROA not before: Mon 01 Jan 2024 08:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 195.93.178.0/23 maxlen: 24
178.239.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:cb:c1:33:b8:c9:16:0e:fe:97:1d:b3:b6:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 1 08:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=954f10dc9323319ca018981ba70124882c375ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:f1:1e:e3:d6:ce:0d:37:30:07:5d:28:7a:
68:06:5f:76:7e:60:f0:66:53:14:29:fd:55:d0:82:
dd:ab:a0:06:a1:6c:3b:15:96:0e:16:73:c7:dd:9a:
67:cf:28:85:50:3e:07:69:39:80:30:7b:de:71:02:
50:be:7d:7b:aa:b5:c6:c5:08:a7:31:b2:50:dd:37:
a6:e2:25:8b:a7:cf:d3:e9:54:c2:57:b4:c3:e6:75:
36:69:e2:77:b5:16:e1:c6:73:2c:8c:bc:6c:d7:b7:
de:41:56:0e:8d:27:80:f4:fe:a6:1e:1b:ea:79:18:
d7:44:0b:43:a6:fd:55:e5:79:2a:da:ea:42:83:e8:
3c:13:a3:20:68:7e:45:b1:dc:a4:93:2a:2e:16:6d:
8c:da:7c:46:76:d1:02:0f:38:41:e2:62:2f:fa:26:
4e:8a:8e:f3:12:8e:f8:36:4f:29:14:94:56:18:5b:
48:e2:d4:6e:cf:44:d9:5b:44:5f:54:f6:38:f8:e1:
a8:d2:35:26:af:7d:08:9c:9d:19:f0:00:a3:59:a2:
09:a6:57:64:a8:a6:67:32:4d:0b:56:2b:18:79:56:
5e:d6:65:7d:e5:c1:01:df:48:44:4e:78:a1:a7:f4:
67:33:3c:91:f5:22:02:1d:d7:cf:97:b3:c2:4d:13:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4F:10:DC:93:23:31:9C:A0:18:98:1B:A7:01:24:88:2C:37:5E:C0
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/lU8Q3JMjMZygGJgbpwEkiCw3XsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.128.0/20
195.93.178.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:7b:6f:15:dd:f1:ad:f7:0c:52:27:a5:a0:8d:63:9a:81:19:
3b:1c:e0:2d:63:a3:86:35:e7:41:a1:17:5d:98:0a:c6:71:ff:
23:1a:c4:0c:db:4f:c7:8d:67:91:cc:d3:a0:6b:63:07:19:d4:
93:de:dd:9d:96:57:ff:c8:a3:cd:35:35:39:e1:35:d1:7e:72:
12:3f:90:44:93:ed:0d:f6:38:34:14:0f:f5:43:65:7c:ec:ad:
07:fc:73:8f:ba:33:40:b9:fd:b7:3c:95:85:00:77:5e:25:2c:
3b:c9:39:2f:a1:af:04:f9:32:f1:92:5b:95:95:81:fb:5e:36:
97:7e:62:28:f2:b3:f6:ee:c2:e8:8c:e6:76:a9:92:92:1a:14:
42:66:2a:c3:60:6c:d0:72:68:75:48:07:9d:05:3f:65:60:fa:
62:55:7c:73:ba:db:03:c5:e9:e9:ec:05:a8:b0:fd:fb:4b:40:
60:4d:9e:b9:3c:67:47:97:bc:55:7c:a4:cd:79:e3:68:b7:91:
09:7b:7e:67:8f:70:79:65:ae:f2:d8:ca:e4:44:eb:6d:1c:6e:
4a:4f:52:f3:b5:77:75:d3:f2:04:f3:b3:4a:46:05:71:52:76:
83:2c:80:5e:d6:93:e5:b6:37:0c:3c:69:61:7d:16:7a:03:07:
9f:2f:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:30:40 2024 by rpki-client on console-ams.rpki-client.org