Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/_uYb97Ym5iWxwnoMK1EuvoNPVSY.roa
File: _uYb97Ym5iWxwnoMK1EuvoNPVSY.roa (raw, json)
Hash identifier: r4oozxhdQfOQ0GWiRiW2ExzYOa/eY1Va7J2NgUghHM0=
Subject key identifier: FE:E6:1B:F7:B6:26:E6:25:B1:C2:7A:0C:2B:51:2E:BE:83:4F:55:26
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018CCA2BCDF9F710136D25B9932741F8911D
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/_uYb97Ym5iWxwnoMK1EuvoNPVSY.roa
Signing time: Tue 02 Jan 2024 12:35:17 +0000
ROA not before: Tue 02 Jan 2024 12:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56899
IP address blocks: 185.126.252.0/24 maxlen: 24
194.4.69.0/24 maxlen: 24
194.4.70.0/23 maxlen: 23
194.4.70.0/24 maxlen: 24
194.4.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:cd:f9:f7:10:13:6d:25:b9:93:27:41:f8:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 12:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fee61bf7b626e625b1c27a0c2b512ebe834f5526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:e8:05:1e:bb:a7:6a:ef:c5:76:98:b5:7b:
fd:3b:2f:69:95:87:69:aa:cc:6a:0e:08:34:ca:2e:
fa:a7:01:d1:d5:15:0a:4f:50:4e:67:07:66:e5:ee:
27:52:cc:98:92:00:c4:de:51:17:c4:7e:15:15:13:
be:82:5c:2e:e8:63:b9:3c:00:19:5d:91:68:9e:8a:
cf:9f:de:3b:dc:a4:21:07:96:d2:d9:4f:26:36:b9:
dc:be:94:43:df:3f:3c:df:be:2e:27:e9:14:b2:20:
cc:8a:09:35:14:d9:93:37:6a:ff:30:4d:38:cc:df:
4c:b8:66:a2:27:45:96:fc:53:5a:c8:65:fe:d6:d2:
99:93:60:47:2a:f2:0a:05:84:35:f8:28:6e:c5:37:
22:9c:33:7c:01:a6:f0:02:80:d2:36:62:25:04:4b:
18:c5:08:96:61:df:28:59:f8:b7:d0:9f:05:06:db:
cd:f2:4c:78:04:76:c9:d4:20:75:f2:62:2b:71:44:
d1:5c:ed:92:6c:d6:fb:b8:4a:ac:9b:b8:e1:10:23:
78:64:74:0f:f6:90:3e:ec:15:ea:9a:2d:08:23:9b:
e8:a1:78:6e:85:bc:c2:46:1b:77:1b:ce:e8:a7:9a:
ea:75:fd:75:e3:bd:60:79:ed:06:73:af:80:1f:04:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:1B:F7:B6:26:E6:25:B1:C2:7A:0C:2B:51:2E:BE:83:4F:55:26
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/_uYb97Ym5iWxwnoMK1EuvoNPVSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.252.0/24
194.4.68.0/22
Signature Algorithm: sha256WithRSAEncryption
24:c4:47:37:8b:3c:d9:c3:e7:d3:27:8c:84:d7:94:a0:e1:98:
ee:d9:c4:cd:8c:93:57:f8:88:4a:08:a8:ac:1d:e6:0d:8c:57:
78:b3:b0:83:db:85:ee:5f:49:13:c6:73:cd:97:c1:c1:d8:5d:
af:34:b9:a7:98:3a:1a:6b:ad:28:6b:12:bf:eb:9c:4a:70:1f:
58:9a:e5:75:0b:88:b4:47:e5:06:d7:51:65:97:04:9b:ea:44:
d7:0c:fb:1e:4a:88:bb:09:e7:dd:a8:14:1e:25:b2:b5:54:65:
aa:75:2b:5d:91:b8:9d:c2:89:68:8c:c5:7e:07:bf:78:24:53:
12:e9:21:87:51:15:0d:e9:92:03:48:05:3c:af:ec:51:47:f4:
e1:30:07:7b:7c:4d:a2:89:d5:de:39:cd:92:9e:a9:1e:60:ea:
cc:85:32:1d:88:a7:f8:a4:84:ed:7b:28:54:57:5a:a6:a8:23:
8b:53:d8:be:ad:90:81:e0:39:68:51:05:8a:57:e5:ba:51:b4:
01:f9:b1:e5:3a:34:85:30:31:c6:7e:3b:6a:14:d0:75:68:3d:
ed:9d:92:30:fa:5e:4b:68:d0:b9:74:a8:b3:9d:76:ae:46:8c:
47:93:5f:42:6a:4d:08:54:8b:38:e4:6b:13:83:a7:6d:b2:e9:
24:1b:4a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:06 2024 by rpki-client on console-ams.rpki-client.org