Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/UhALU5G1019Iwm1CunvF5Nu8S44.roa
File: UhALU5G1019Iwm1CunvF5Nu8S44.roa (raw, json)
Hash identifier: 1NmtWhtV7LmcSgYQgmJNQMezGXmI78F3UzHhQ7IVKao=
Subject key identifier: 52:10:0B:53:91:B5:D3:5F:48:C2:6D:42:BA:7B:C5:E4:DB:BC:4B:8E
Certificate issuer: /CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Certificate serial: 018CC5DC46B01D3BE2AAE4DD413E21D6F373
Authority key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/UhALU5G1019Iwm1CunvF5Nu8S44.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200069
IP address blocks: 185.211.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:46:b0:1d:3b:e2:aa:e4:dd:41:3e:21:d6:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52100b5391b5d35f48c26d42ba7bc5e4dbbc4b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:21:4d:76:8f:46:2a:86:e7:a5:6e:db:5a:
b4:4d:3c:91:4c:61:44:dc:60:97:a4:81:88:91:7d:
0b:2c:bc:97:30:b8:10:f2:2b:0e:7e:e6:35:ae:fc:
57:9b:aa:cf:97:c0:f5:fc:b7:ea:a3:4c:6c:4a:ff:
84:8e:55:26:99:5a:b7:d5:3e:ca:b2:af:a0:49:1a:
a5:1a:57:d2:3c:38:e0:25:ce:c5:ec:a2:73:6b:32:
dd:ef:69:2a:9f:37:d8:0f:dc:fd:cf:3c:5f:79:55:
45:41:6a:3f:22:dd:0b:2a:68:26:19:da:62:c7:6f:
4b:af:56:c5:3c:57:83:3f:b4:1e:c4:95:9c:da:7e:
79:09:4c:5a:b9:95:ae:67:e9:34:f9:68:9e:7f:52:
a2:7e:b5:35:29:df:3b:90:69:55:bf:0d:c4:4a:1a:
9b:5a:b5:20:b5:b3:35:4c:49:2a:66:6c:86:2f:5a:
bb:5d:a1:3a:fa:b8:94:de:d3:c6:0d:f6:e4:ab:a0:
c1:e3:2f:57:f5:20:df:6f:58:7a:be:51:01:1f:76:
e3:c3:73:ee:ac:c3:b8:f0:97:3a:16:36:0e:7c:f1:
bf:53:4d:bf:a7:f1:32:9b:68:bc:36:f0:03:fa:36:
d4:ac:37:db:a8:58:cb:eb:e4:de:67:bb:42:17:cf:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:10:0B:53:91:B5:D3:5F:48:C2:6D:42:BA:7B:C5:E4:DB:BC:4B:8E
X509v3 Authority Key Identifier:
keyid:76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/UhALU5G1019Iwm1CunvF5Nu8S44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.120.0/22
Signature Algorithm: sha256WithRSAEncryption
01:b1:5a:ae:02:3e:88:1e:78:a5:08:78:73:c2:70:c1:e1:a0:
6a:9f:99:34:a9:f8:41:97:4b:db:f3:a3:88:18:78:6b:26:fe:
f2:88:04:69:69:d5:66:a5:a2:3a:79:87:ad:07:a5:80:0c:09:
19:a1:fc:2a:06:c0:87:c1:c5:44:77:6f:ee:5d:49:2f:9b:9d:
56:67:c9:c3:f5:7d:8b:1c:69:5f:45:59:91:9f:c3:d4:6b:d7:
7d:89:f0:c6:e8:c8:0d:da:1d:f8:cc:a1:f1:ee:c5:ba:4e:0e:
c2:f1:8f:15:50:49:87:50:5b:96:32:98:a1:b8:07:2d:0b:bf:
d8:4d:4e:83:63:60:52:38:ad:a3:6b:4c:d7:71:7b:de:e2:13:
b4:17:29:75:c4:1b:96:1c:fb:1d:75:ea:a5:8b:67:67:8a:c3:
75:90:fd:83:14:dc:d3:db:dc:08:3e:02:58:5b:1a:57:8b:8e:
62:d3:bc:02:ba:0d:0e:df:4c:dd:93:64:9f:fa:6f:54:a2:cd:
c1:13:bf:77:25:32:00:1e:cf:9e:c8:bf:a8:25:57:76:8b:97:
36:6e:11:c6:8d:ad:56:61:1f:54:b2:4c:69:d3:40:a9:6b:a6:
ba:4e:af:ed:cb:0b:d6:fb:9d:cb:b1:7b:c1:43:00:a6:62:6f:
7c:01:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:32:29 2024 by rpki-client on console-ams.rpki-client.org