Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/UlM26jJgAIOkg7XWHBlDa9wEvLc.roa
File: UlM26jJgAIOkg7XWHBlDa9wEvLc.roa (raw, json)
Hash identifier: QXvZ2ltulISDde05uFsxY0sVB3SoNy0qmWMzOpYRTc4=
Subject key identifier: 52:53:36:EA:32:60:00:83:A4:83:B5:D6:1C:19:43:6B:DC:04:BC:B7
Certificate issuer: /CN=5de613682552010298f3a694a00d7c5906060b95
Certificate serial: 018CC5DBE60544A31D4A32BA2C4B68CE344F
Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/UlM26jJgAIOkg7XWHBlDa9wEvLc.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202414
IP address blocks: 194.54.138.0/23 maxlen: 24
194.54.136.0/23 maxlen: 24
185.1.129.0/24 maxlen: 24
2a0c:c9c0::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e6:05:44:a3:1d:4a:32:ba:2c:4b:68:ce:34:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de613682552010298f3a694a00d7c5906060b95
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=525336ea32600083a483b5d61c19436bdc04bcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:c5:ea:81:1c:14:e3:00:d6:02:d8:71:24:
a8:19:80:8a:2b:d0:f0:56:2e:f2:39:f5:7c:f8:69:
c4:7c:d0:05:07:53:93:64:18:22:9d:41:46:1c:8c:
7d:8b:aa:07:03:c0:66:a6:4f:8f:3b:4f:40:15:a3:
5b:3f:07:c8:72:70:b4:b8:35:f4:1d:4b:63:24:27:
55:aa:3a:96:07:43:90:fb:38:ae:ee:17:cb:17:dd:
3f:05:e1:7a:0e:c3:d8:b8:d9:93:67:71:ae:16:7e:
01:21:05:77:3a:9b:d9:d1:dc:46:0b:07:b6:27:45:
28:b4:ae:39:5e:7e:56:99:16:62:64:fa:77:d2:81:
13:b0:7c:27:47:cc:f0:1e:86:6c:24:17:45:d2:51:
aa:5b:20:03:12:95:c2:29:40:09:83:47:71:90:54:
8c:e7:d5:65:a5:d7:42:1b:04:0d:83:44:b3:ab:33:
97:5b:c2:0e:f5:f8:1e:f7:03:c5:d2:79:13:7a:9c:
48:e0:36:a3:0e:54:d5:bf:09:c9:f0:89:3f:8d:1a:
45:18:11:f7:ef:f6:00:46:13:48:7a:db:c4:63:de:
9c:df:e6:2e:23:fb:ed:8b:8a:35:48:29:20:d2:29:
c7:20:05:99:b8:1a:4e:d0:7d:1f:d8:0d:46:9e:04:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:36:EA:32:60:00:83:A4:83:B5:D6:1C:19:43:6B:DC:04:BC:B7
X509v3 Authority Key Identifier:
keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/UlM26jJgAIOkg7XWHBlDa9wEvLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.129.0/24
194.54.136.0/22
IPv6:
2a0c:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:23:06:14:cc:02:a4:fa:9b:92:15:1b:b8:8d:b8:ba:ff:87:
bf:26:c5:f4:37:7c:21:d4:58:7f:15:cc:63:c0:c1:c6:b8:1e:
71:df:38:32:8f:c6:80:c6:72:42:69:50:a7:db:97:e7:aa:86:
ff:e2:e5:a4:a6:37:a1:6b:8c:04:89:51:a0:03:5a:cc:7c:6d:
99:ac:70:e4:e5:75:55:74:c1:bd:0f:d7:aa:9d:d6:ce:fd:f8:
e2:94:fa:95:c7:9d:69:1b:f2:3a:dc:8f:d3:42:83:c1:6e:9a:
92:55:bd:b9:a8:c5:90:32:40:98:88:cd:83:49:6e:2d:6d:3e:
e2:65:33:0c:bc:24:43:3a:05:5f:6f:40:14:42:08:fe:ef:81:
f2:8b:96:7c:58:fb:88:fa:ba:1f:86:b5:06:f8:a5:fc:13:51:
aa:a7:fb:60:bf:b5:44:bb:5c:c4:42:7b:69:0f:de:2d:e4:3f:
4c:35:b2:e2:4f:be:27:aa:0f:9a:41:24:b8:53:6d:46:f4:2d:
8f:02:3a:a9:a4:3a:06:25:31:c6:07:b4:ed:be:e7:5f:4d:8c:
36:00:70:55:b8:9a:f6:43:8a:1b:4f:32:a7:13:29:20:fb:39:
5c:0c:2f:65:28:19:b0:63:4f:71:c4:6d:9c:27:81:76:f7:25:
7f:c3:63:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:25 2024 by rpki-client on console-fra.rpki-client.org