Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uPW5nX_fRQlXG4AVJl4K6-BKYZk.roa
File: uPW5nX_fRQlXG4AVJl4K6-BKYZk.roa (raw, json)
Hash identifier: +1BivVtLeGeBKW3iPUMtmgcuAXP7DDu3hHVVMkveVLo=
Subject key identifier: B8:F5:B9:9D:7F:DF:45:09:57:1B:80:15:26:5E:0A:EB:E0:4A:61:99
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 018CC26CF53633DE43AD719437121F9B9216
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uPW5nX_fRQlXG4AVJl4K6-BKYZk.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200574
IP address blocks: 88.199.101.0/24 maxlen: 24
88.199.103.0/24 maxlen: 24
88.199.102.0/24 maxlen: 24
94.40.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f5:36:33:de:43:ad:71:94:37:12:1f:9b:92:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8f5b99d7fdf4509571b8015265e0aebe04a6199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:07:a2:0c:26:b3:a2:3a:47:f2:59:c8:9c:
48:55:9f:c9:1f:4b:a4:26:59:df:93:17:12:1c:e6:
e3:8b:69:12:10:e7:88:2a:49:bf:96:d6:45:f3:0b:
48:5b:45:b1:44:6a:7d:9b:e3:e7:a8:58:47:65:9e:
1a:62:ec:1e:b6:a3:32:11:ca:da:07:d7:07:9d:b6:
ac:ed:16:47:95:e0:36:5f:b6:f6:2b:e6:67:7f:c0:
65:df:6a:dd:e4:52:fe:a5:81:bb:27:4a:39:0f:14:
4b:39:4e:60:91:92:68:89:cc:94:5c:4d:ca:75:b5:
e3:e0:4f:02:da:30:78:5a:cc:70:33:4c:ba:14:ba:
b8:7f:81:ac:46:cb:26:de:ac:77:dc:c3:ca:d6:ce:
a1:10:f7:29:23:5e:e1:93:32:cb:01:54:0c:b2:f0:
b3:45:c8:1c:61:46:cb:8a:41:5e:1b:f9:87:fc:a3:
a5:d3:81:dd:b0:00:0d:a9:90:d5:29:47:7c:9b:30:
ac:2e:6f:96:5b:cf:3a:b3:e2:99:e8:2d:b7:5c:ff:
8a:cf:8b:2c:0c:1c:01:5f:d3:db:64:d1:01:13:ad:
5b:c6:c6:cd:93:d1:b8:91:fd:2e:06:25:ae:64:8a:
3b:ad:2d:b8:d2:2c:bd:bd:80:52:fd:78:ec:01:f0:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:B9:9D:7F:DF:45:09:57:1B:80:15:26:5E:0A:EB:E0:4A:61:99
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/uPW5nX_fRQlXG4AVJl4K6-BKYZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.199.101.0-88.199.103.255
94.40.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8f:a0:45:e8:d9:c5:a7:29:c7:ee:e9:fd:b9:c0:7f:7c:fa:
d1:3b:05:d7:6a:ac:5e:2f:c9:a3:3f:ac:36:54:27:01:9d:50:
c5:f9:65:b3:6d:42:ef:1e:9c:d3:86:41:b1:77:8d:aa:38:18:
11:37:ec:e1:0c:50:21:7b:79:0e:b2:15:af:ab:32:8b:1c:98:
72:af:41:ee:c3:bd:01:a2:87:c1:59:08:64:74:3b:93:df:ad:
b7:c9:7b:a0:3b:1f:c6:3e:d2:2d:c5:6e:72:14:7b:60:af:66:
56:84:1c:ea:55:68:ae:55:5c:d5:b9:c7:0e:be:29:d0:d8:e6:
9d:d8:15:20:00:7e:bd:b6:24:b4:0a:2d:a1:d3:c4:a0:74:d1:
cf:d9:57:ee:2a:62:44:79:ef:61:15:11:52:65:6c:db:aa:ea:
bf:df:6f:0c:83:c5:a3:74:ae:45:15:6d:f0:7a:52:22:0c:ce:
93:d5:9f:c1:fa:99:d3:8d:95:d1:25:7b:16:30:b7:2d:03:95:
72:b7:7e:55:88:fe:34:a1:ef:67:1c:11:14:bd:4d:77:1c:82:
4a:07:3f:b8:44:10:95:4f:be:26:55:70:c8:a6:22:90:7b:72:
ec:4d:e3:49:28:54:ba:05:84:68:7e:75:8c:fa:36:0f:2c:ac:
1b:ac:c3:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 06:35:01 2024 by rpki-client on console-ams.rpki-client.org