Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/uQYIfakfPgR6quuvHFCiI31IG4k.roa
File: uQYIfakfPgR6quuvHFCiI31IG4k.roa (raw, json)
Hash identifier: tMtjMLdD4B/gXGHGWkr2cjquI67oBkXAE6wVzpBxLPg=
Subject key identifier: B9:06:08:7D:A9:1F:3E:04:7A:AA:EB:AF:1C:50:A2:23:7D:48:1B:89
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 018CC79433CEA43953C986134FC691A0B5ED
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/uQYIfakfPgR6quuvHFCiI31IG4k.roa
Signing time: Tue 02 Jan 2024 00:30:27 +0000
ROA not before: Tue 02 Jan 2024 00:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211225
IP address blocks: 37.205.4.0/24 maxlen: 24
37.205.2.0/24 maxlen: 24
37.205.3.0/24 maxlen: 24
37.205.1.0/24 maxlen: 24
37.205.0.0/24 maxlen: 24
37.205.5.0/24 maxlen: 24
37.205.6.0/24 maxlen: 24
37.205.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:33:ce:a4:39:53:c9:86:13:4f:c6:91:a0:b5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jan 2 00:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b906087da91f3e047aaaebaf1c50a2237d481b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:d4:da:04:8b:8c:fc:39:08:41:f7:6c:93:
c2:70:80:ee:47:7f:f7:ba:d6:a4:d5:70:ea:71:63:
52:e3:20:3d:39:13:e8:22:88:cd:d0:ee:c5:1b:b7:
5e:b0:48:d9:df:1f:0d:7c:38:e8:16:c0:a8:83:00:
b4:de:4f:92:83:9e:09:dd:2c:e1:63:64:5b:76:8f:
41:87:bb:7c:7a:b5:2f:23:70:da:ff:6e:65:43:43:
f7:15:14:1c:cd:c8:77:23:5e:ed:0c:83:d6:00:d4:
f4:6d:04:ea:b6:78:3e:98:27:7d:c2:59:d6:99:b6:
87:d9:2f:f7:b0:e8:93:4f:ba:3e:37:0b:3e:f7:9f:
b8:92:9a:67:b4:63:e7:2f:b7:68:bd:a3:ac:f6:25:
0e:56:2b:44:92:e1:dd:ce:66:07:23:92:bd:2c:d3:
c3:01:5b:54:83:04:a8:30:a9:41:3b:13:50:cd:b7:
4b:01:76:8b:07:65:1c:53:14:86:85:78:2e:61:7e:
97:92:e3:fc:89:36:8b:ce:a6:26:8a:1d:4e:1a:13:
a4:2f:00:23:2a:55:71:e1:30:8e:c9:8a:55:a9:53:
8b:4e:97:78:06:6a:ad:c4:07:eb:1d:74:32:78:d8:
9c:c8:16:b8:88:3c:07:5d:7b:1e:0e:40:e1:6d:11:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:06:08:7D:A9:1F:3E:04:7A:AA:EB:AF:1C:50:A2:23:7D:48:1B:89
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/uQYIfakfPgR6quuvHFCiI31IG4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:3f:3c:a3:a6:fe:ad:f1:8b:50:e1:04:54:3d:36:f9:35:fa:
89:78:5c:d1:53:83:7e:91:ca:0b:5e:c0:8c:4b:a5:53:32:bd:
3b:42:39:0f:3d:8d:7c:82:4a:94:59:7c:f2:69:af:3c:86:8d:
ea:13:8d:9a:c7:38:ea:b7:a2:d2:d7:a5:af:97:0a:e5:52:dc:
d6:19:7c:c7:ec:56:e7:24:5f:b4:91:31:d3:ee:d9:14:ee:ee:
d7:bc:12:e5:23:7e:b7:39:e2:d9:09:fd:31:85:bf:28:ee:67:
d4:50:66:2f:31:10:20:82:b0:a3:00:06:6d:4b:ac:98:66:96:
ca:12:c2:68:7d:1c:91:08:7b:ad:f9:23:d0:f5:19:3e:0f:51:
5b:3e:ab:ff:92:62:b1:1c:d5:d3:d9:76:ca:02:af:14:c8:b5:
ee:d2:af:d5:a7:ba:07:09:4c:80:13:ba:eb:56:06:b5:fe:fc:
5a:f4:cc:c9:2b:a3:a8:5a:34:e0:a4:3d:93:6f:7a:53:13:81:
ec:50:50:dc:b8:72:39:f4:13:5a:f7:db:a8:03:26:1f:33:5b:
e4:03:e5:b2:61:56:bf:0d:cc:17:32:b0:2b:ea:ba:ad:b4:81:
ee:9a:c1:32:57:d0:18:61:25:4e:13:08:e9:f8:5a:2d:59:d6:
bc:e2:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:17 2024 by rpki-client on console-fra.rpki-client.org