Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/UobijqsT01yksFX416B4aDAZYqg.roa
File: UobijqsT01yksFX416B4aDAZYqg.roa (raw, json)
Hash identifier: vGSG8S2JKQJckhUHJIWn6OfwCdZKR5PsPdLUkm44BXo=
Subject key identifier: 52:86:E2:8E:AB:13:D3:5C:A4:B0:55:F8:D7:A0:78:68:30:19:62:A8
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 018CC56E28CB5721AAD35627E3140BF63103
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/UobijqsT01yksFX416B4aDAZYqg.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 375
IP address blocks: 192.49.173.0/24 maxlen: 24
192.49.174.0/23 maxlen: 23
192.49.176.0/20 maxlen: 20
192.49.192.0/18 maxlen: 18
192.49.20.0/24 maxlen: 24
192.49.19.0/24 maxlen: 24
192.49.22.0/24 maxlen: 24
192.49.36.0/22 maxlen: 22
192.49.40.0/23 maxlen: 23
192.49.52.0/23 maxlen: 23
192.49.56.0/21 maxlen: 21
192.49.55.0/24 maxlen: 24
192.49.64.0/22 maxlen: 22
192.49.0.0/21 maxlen: 21
192.49.9.0/24 maxlen: 24
192.49.10.0/24 maxlen: 24
192.49.124.0/23 maxlen: 23
192.49.119.0/24 maxlen: 24
192.49.120.0/22 maxlen: 22
192.49.126.0/24 maxlen: 24
192.49.131.0/24 maxlen: 24
192.49.134.0/24 maxlen: 24
192.49.136.0/23 maxlen: 23
192.49.139.0/24 maxlen: 24
192.49.140.0/23 maxlen: 23
192.49.144.0/24 maxlen: 24
192.49.152.0/21 maxlen: 21
192.49.146.0/24 maxlen: 24
192.49.148.0/22 maxlen: 22
192.49.160.0/23 maxlen: 23
192.49.164.0/22 maxlen: 22
192.49.163.0/24 maxlen: 24
192.49.168.0/23 maxlen: 23
192.49.170.0/24 maxlen: 24
192.49.68.0/24 maxlen: 24
192.49.70.0/23 maxlen: 23
192.49.72.0/23 maxlen: 23
192.49.86.0/23 maxlen: 23
192.49.91.0/24 maxlen: 24
192.49.90.0/24 maxlen: 24
192.49.96.0/24 maxlen: 24
192.49.98.0/23 maxlen: 23
192.49.92.0/22 maxlen: 22
192.49.100.0/23 maxlen: 23
192.49.103.0/24 maxlen: 24
192.49.104.0/24 maxlen: 24
192.49.106.0/23 maxlen: 23
192.49.108.0/22 maxlen: 22
192.49.112.0/23 maxlen: 23
192.49.114.0/23 maxlen: 23
131.207.0.0/17 maxlen: 17
2a03:9b80::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:28:cb:57:21:aa:d3:56:27:e3:14:0b:f6:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5286e28eab13d35ca4b055f8d7a07868301962a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:40:6a:3e:b6:ad:96:c4:6b:4a:d5:ac:15:
f8:81:a9:c1:d0:48:d3:53:02:1f:de:66:df:7e:00:
28:c2:48:14:e8:26:56:35:fd:d2:e4:16:53:12:6a:
95:a3:ea:83:8f:a9:12:69:13:cf:16:4a:3e:de:f6:
03:f9:e7:4d:76:ce:58:37:23:34:f6:e7:6a:ca:fa:
8e:73:b6:b1:73:44:bf:4a:de:2a:b7:98:f8:b0:d5:
80:30:21:92:15:29:89:0f:d4:13:8b:c2:9d:48:a1:
2a:4d:f3:54:26:d6:4f:62:21:db:9b:b7:49:c1:dd:
a2:83:3f:70:7c:bf:77:3d:28:84:cf:1a:ec:6e:63:
89:ed:4f:88:c2:47:d4:61:f3:ca:55:84:02:ab:94:
58:59:45:95:60:37:ae:12:fd:c0:54:9d:c2:fa:76:
6b:d8:83:ed:72:93:21:b8:d3:66:65:cd:3b:9c:2b:
a0:b1:a2:3c:45:e5:a0:3d:25:68:90:52:68:1c:24:
a1:0d:db:81:a8:d8:13:a8:5a:d5:ab:e3:c5:a7:59:
6e:ef:6b:af:f1:9e:35:88:7e:d6:ca:c3:91:17:95:
85:a8:98:02:13:10:c9:86:8a:b6:23:26:9e:6b:ed:
7f:41:f2:3e:8b:9c:47:3f:55:c3:90:5c:f8:5b:53:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:E2:8E:AB:13:D3:5C:A4:B0:55:F8:D7:A0:78:68:30:19:62:A8
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/UobijqsT01yksFX416B4aDAZYqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.207.0.0/17
192.49.0.0/21
192.49.9.0-192.49.10.255
192.49.19.0-192.49.20.255
192.49.22.0/24
192.49.36.0-192.49.41.255
192.49.52.0/23
192.49.55.0-192.49.68.255
192.49.70.0-192.49.73.255
192.49.86.0/23
192.49.90.0-192.49.96.255
192.49.98.0-192.49.101.255
192.49.103.0-192.49.104.255
192.49.106.0-192.49.115.255
192.49.119.0-192.49.126.255
192.49.131.0/24
192.49.134.0/24
192.49.136.0/23
192.49.139.0-192.49.141.255
192.49.144.0/24
192.49.146.0/24
192.49.148.0-192.49.161.255
192.49.163.0-192.49.170.255
192.49.173.0-192.49.255.255
IPv6:
2a03:9b80::/34
Signature Algorithm: sha256WithRSAEncryption
07:c9:cb:13:fb:86:7e:15:07:f4:c7:2b:d8:29:1c:b2:09:0d:
7e:5f:22:15:8a:f2:ad:e3:37:4f:21:dc:40:22:b0:d3:17:f3:
7e:af:11:23:a0:5e:7b:f7:8d:c9:78:d5:bd:c8:66:63:11:96:
66:de:c7:75:f2:87:1e:a8:4f:67:12:14:c6:28:2c:3d:a6:16:
8e:63:47:6f:c4:64:bb:cd:81:98:1b:e2:f9:f4:3d:24:cf:db:
06:f5:0d:2f:90:eb:58:2f:1c:c6:d3:05:37:6a:56:df:9d:60:
9a:e7:37:5f:d0:2a:c8:24:08:f3:f6:89:49:c7:bf:bb:56:14:
06:1d:88:ac:26:ba:c4:a2:18:10:ac:25:2c:89:9a:c1:4a:5d:
9a:8b:61:84:46:4b:29:74:8b:96:c9:56:81:7c:d0:56:4f:b9:
27:ef:6b:12:95:19:3e:6d:60:99:cc:da:c9:b1:4a:7b:c5:76:
22:da:9f:8c:77:84:ce:5f:26:33:54:32:00:26:b0:55:12:17:
a3:b7:a6:91:eb:61:31:57:d1:a9:51:0b:43:bd:21:c4:a2:32:
38:eb:4d:d4:90:d8:c4:31:f2:8a:86:c6:8a:df:b1:e9:35:aa:
51:bb:50:50:01:56:68:e9:41:b1:bb:cc:dd:31:30:3b:33:68:
fa:93:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:48:03 2024 by rpki-client on console-ams.rpki-client.org