Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/UHljQ6ka3fPQ3bX_6eMvjpylVUc.roa
File: UHljQ6ka3fPQ3bX_6eMvjpylVUc.roa (raw, json)
Hash identifier: erMRfunXFKICoglJXUJcSnujs4DkNTDvT3wNozfY/ws=
Subject key identifier: 50:79:63:43:A9:1A:DD:F3:D0:DD:B5:FF:E9:E3:2F:8E:9C:A5:55:47
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 018CC64B3F635B2E63693E0CD9A18F03EA68
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/UHljQ6ka3fPQ3bX_6eMvjpylVUc.roa
Signing time: Mon 01 Jan 2024 18:31:09 +0000
ROA not before: Mon 01 Jan 2024 18:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41887
IP address blocks: 94.228.128.0/20 maxlen: 24
94.228.133.226/32 maxlen: 32
195.144.2.0/24 maxlen: 24
94.228.129.181/32 maxlen: 32
178.22.80.0/21 maxlen: 24
62.204.64.0/19 maxlen: 24
62.204.64.0/20 maxlen: 24
62.204.64.0/24 maxlen: 24
185.63.164.0/22 maxlen: 24
62.204.67.0/24 maxlen: 24
62.204.66.0/24 maxlen: 24
62.204.65.0/24 maxlen: 24
62.204.80.0/20 maxlen: 20
62.204.94.0/23 maxlen: 24
62.204.92.0/22 maxlen: 22
62.204.92.0/23 maxlen: 24
2a00:d00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3f:63:5b:2e:63:69:3e:0c:d9:a1:8f:03:ea:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50796343a91addf3d0ddb5ffe9e32f8e9ca55547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:a3:ce:52:f3:f2:a3:b9:56:80:6a:b9:89:
00:b2:bb:f6:5b:f3:96:47:80:5d:0a:10:41:cb:ac:
5f:8e:c8:65:c1:de:e1:21:07:72:fa:5e:8e:f4:20:
2f:5b:46:7f:de:b8:d0:d8:ca:db:cd:73:db:87:d0:
0c:9b:8a:04:73:89:f6:d6:9e:b6:12:30:cd:8f:37:
b5:4d:15:c6:57:83:52:96:ab:cb:92:d1:fe:ed:7a:
14:f2:45:12:d9:03:cc:a1:fe:b3:3b:85:30:c3:9d:
b1:4a:ad:13:eb:5d:f9:bb:c2:bc:1a:65:49:c5:a9:
d0:e0:e7:46:a0:b8:f6:85:e4:20:d9:21:17:4e:6e:
3c:29:1b:25:91:e6:37:e7:15:b9:79:bc:36:de:89:
b5:61:3d:3a:0e:8e:da:08:61:57:f5:be:1b:c0:45:
0a:46:22:3d:07:02:f7:79:93:62:86:5c:fe:21:fd:
6c:63:31:61:70:a0:38:9d:c0:cf:dc:bf:b1:9e:c4:
48:1f:e3:81:18:75:2e:3d:16:9d:6a:32:44:fa:69:
f7:2a:38:f6:69:f1:f0:f9:7f:19:2b:11:86:e6:ec:
e5:c4:1a:88:b1:3c:dc:68:93:72:ea:f0:91:1d:81:
d7:2b:ad:1a:f8:b7:b4:8f:62:c4:cd:bf:19:2d:47:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:63:43:A9:1A:DD:F3:D0:DD:B5:FF:E9:E3:2F:8E:9C:A5:55:47
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/UHljQ6ka3fPQ3bX_6eMvjpylVUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.64.0/19
94.228.128.0/20
178.22.80.0/21
185.63.164.0/22
195.144.2.0/24
IPv6:
2a00:d00::/29
Signature Algorithm: sha256WithRSAEncryption
40:9b:fd:9e:31:9b:63:88:c0:9a:35:99:5f:7d:5f:67:0b:40:
02:7f:e9:81:94:80:c7:7f:41:df:4e:ee:bf:d8:99:07:9d:bf:
bb:38:0a:ad:c5:8e:34:3d:9a:48:ad:12:ed:2b:e1:00:37:72:
31:0e:10:47:c2:47:0c:82:10:09:be:1a:f8:d8:30:1a:3d:51:
72:e1:8f:1b:e3:ac:c6:3d:65:43:1b:ea:5a:92:71:29:24:45:
8a:dd:da:52:f3:16:17:4e:23:d8:0b:02:95:e6:6b:f6:95:39:
3c:fd:e5:3c:02:d9:8a:0a:4c:b2:ff:7c:9c:d7:f1:f4:0f:35:
25:e8:49:97:f6:aa:fa:d9:f2:fa:77:34:a1:7f:2b:1c:23:7a:
c2:97:af:75:7d:50:c1:dd:c4:3a:29:c1:c5:f1:03:f1:8b:de:
39:45:b5:d0:54:d3:8f:76:b0:16:f8:6b:1f:eb:36:8c:8e:d4:
2a:b0:62:a0:c0:02:7c:87:d1:68:fe:ed:84:a1:0f:cc:c2:6e:
23:08:6f:0a:aa:c9:8c:71:3e:e0:0d:79:9e:ef:96:3d:e2:f9:
cd:6e:a0:5e:3d:4c:bd:e4:fa:4b:36:64:f5:48:ac:a6:b5:51:
a4:1b:1b:b8:5d:ce:48:23:33:a3:9c:a9:2d:44:e5:cc:f8:80:
60:40:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:10:53 2024 by rpki-client on console-fra.rpki-client.org