Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/UPOSqSZP-jXijJtBDvLlqsoaF54.roa
File: UPOSqSZP-jXijJtBDvLlqsoaF54.roa (raw, json)
Hash identifier: EZH/KhvZol1jGlejQB3ga10+eCKY8xwE3iHctH5zuRc=
Subject key identifier: 50:F3:92:A9:26:4F:FA:35:E2:8C:9B:41:0E:F2:E5:AA:CA:1A:17:9E
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 018CC8018B7265A1F4EF075F07DEE239E6BF
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/UPOSqSZP-jXijJtBDvLlqsoaF54.roa
Signing time: Tue 02 Jan 2024 02:29:53 +0000
ROA not before: Tue 02 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 185.153.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8b:72:65:a1:f4:ef:07:5f:07:de:e2:39:e6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50f392a9264ffa35e28c9b410ef2e5aaca1a179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:e2:cc:26:33:cc:93:8e:13:29:4c:e2:f0:
a6:9e:cf:c4:7f:22:54:bd:90:68:dd:bb:52:a5:6c:
40:48:de:4e:ae:1b:42:c8:64:0f:bb:94:2a:2e:b0:
03:e2:24:a9:de:0b:4d:12:9e:f7:2d:c6:4a:56:0f:
7e:5c:f1:5a:92:79:8d:b1:d1:40:50:44:cf:53:ed:
9c:a0:4c:42:61:b8:6c:9b:60:de:cc:db:57:58:42:
92:3f:f2:92:50:31:98:e6:06:c1:34:32:19:9b:a6:
0a:0a:cd:2a:42:d7:f3:ed:a4:7e:15:97:e2:90:9e:
bc:c8:d4:88:67:12:a6:b0:8c:49:fd:29:18:2a:fe:
9f:7d:76:d1:d1:c7:1a:a3:97:5f:ae:aa:16:bf:80:
26:b9:ad:d2:c9:ca:8d:d0:ae:9d:50:17:a9:68:dc:
62:a2:c9:f2:da:73:6c:05:e5:94:10:ea:d0:29:56:
98:68:da:36:4f:d1:03:fc:8a:e8:1c:b4:ea:d5:05:
35:67:84:3c:90:93:9c:65:e9:93:75:37:ce:ac:39:
53:48:7a:45:51:46:3f:1d:1e:bc:81:e5:58:9e:a9:
e3:83:fd:e6:69:ff:b0:9e:a0:8a:54:4a:fe:40:02:
26:e5:eb:17:97:7c:3f:f3:65:f7:f7:90:66:1f:5a:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:92:A9:26:4F:FA:35:E2:8C:9B:41:0E:F2:E5:AA:CA:1A:17:9E
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/UPOSqSZP-jXijJtBDvLlqsoaF54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.208.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b2:7e:92:4c:91:29:5a:b1:df:d0:56:e1:84:c4:a5:29:eb:
c8:63:b0:89:18:c3:10:12:90:69:0a:db:d6:ec:83:28:7f:77:
d0:aa:40:9e:22:e2:8e:d7:9a:72:9a:ce:0c:37:14:6d:35:5b:
b0:e8:e2:30:9d:ca:64:fe:00:cc:b3:62:de:4e:b8:03:a1:98:
1b:1e:41:3e:1c:dd:4e:19:87:26:c7:83:e9:3c:f1:e7:5d:89:
de:d1:e5:9f:bf:b6:07:90:50:cf:72:50:e0:c6:14:56:db:24:
7f:e1:57:72:61:8f:cd:2f:ec:37:5d:65:9f:96:59:c2:d7:a5:
f8:ef:8b:c2:35:ee:13:ff:d8:35:15:a5:36:87:4c:78:d0:58:
e6:e9:5c:e9:5a:aa:0e:f2:29:5a:ee:0a:75:55:96:3b:70:fc:
25:8a:de:ab:f9:7c:e2:0c:01:c8:2d:04:43:7c:f8:2e:32:8a:
94:95:ff:cc:2f:06:dc:19:d1:03:67:26:c0:2c:6e:ef:67:9e:
3f:71:43:52:73:7c:cb:44:36:d0:7d:9c:57:79:e9:b1:bc:93:
b9:28:96:69:a7:af:be:41:e5:a3:fd:23:fa:87:af:da:6d:4f:
9b:dd:ff:60:27:9a:30:d5:5f:e0:9b:ef:5e:97:b4:75:c6:1e:
9d:6a:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:16:50 2024 by rpki-client on console-ams.rpki-client.org