Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uQFz4D-dYiuqkqeYn481NG-XxYw.roa
File: uQFz4D-dYiuqkqeYn481NG-XxYw.roa (raw, json)
Hash identifier: VqTOOTNAbJbOS6q5TT9lj472jLkNk6IKjuzPeDKmxW8=
Subject key identifier: B9:01:73:E0:3F:9D:62:2B:AA:92:A7:98:9F:8F:35:34:6F:97:C5:8C
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 018D466A7A5846688326EF6DA2F0BC273F8C
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uQFz4D-dYiuqkqeYn481NG-XxYw.roa
Signing time: Fri 26 Jan 2024 15:36:39 +0000
ROA not before: Fri 26 Jan 2024 15:36:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207992
IP address blocks: 45.145.164.0/24 maxlen: 24
45.145.165.0/24 maxlen: 24
45.145.166.0/24 maxlen: 24
45.145.167.0/24 maxlen: 24
146.19.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:46:6a:7a:58:46:68:83:26:ef:6d:a2:f0:bc:27:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 26 15:36:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b90173e03f9d622baa92a7989f8f35346f97c58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:e0:c3:90:97:b5:1c:3a:29:95:70:1f:60:
c8:69:ed:91:0d:5f:be:be:4f:9b:2a:2c:b1:33:b8:
d6:af:07:b9:10:8f:d3:5b:29:8c:62:c6:34:9b:51:
43:79:45:16:a5:34:ba:51:77:8a:b0:c1:25:62:b2:
54:f7:f6:b9:19:59:44:18:85:b2:b7:67:d6:1c:4b:
1c:cf:2d:8d:23:e6:2f:b1:a4:ec:72:8d:e0:b5:8d:
c4:c6:31:fe:86:27:f8:46:e7:f2:58:b8:f8:73:f5:
32:3d:8b:37:25:10:65:87:24:a6:b2:c6:7b:fd:88:
2d:dd:d3:90:52:a9:d2:18:31:9b:2f:d2:91:98:51:
b4:4c:65:6e:79:f6:a2:7b:8a:b2:47:2b:c5:93:a9:
71:ab:3e:67:40:cf:34:ae:d5:a5:67:79:59:a4:35:
98:72:b5:d5:a1:91:18:64:00:9e:02:0e:a4:80:1c:
bf:42:ff:47:f6:0a:69:e2:c7:13:e0:ad:e5:b3:71:
79:63:ad:be:14:6b:4e:dc:05:ff:c4:21:41:14:f1:
ad:ec:da:bf:06:90:9e:af:16:4d:87:3c:ad:0f:b1:
73:88:b9:6b:88:cb:b7:25:8e:f0:03:1a:d2:a9:16:
4c:5d:90:b0:d5:1c:1e:7c:33:9e:89:6e:1b:95:1b:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:01:73:E0:3F:9D:62:2B:AA:92:A7:98:9F:8F:35:34:6F:97:C5:8C
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uQFz4D-dYiuqkqeYn481NG-XxYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.164.0/22
146.19.168.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b8:62:00:fc:70:04:99:40:7e:f4:8f:ae:90:49:94:13:67:
f4:59:27:02:90:d8:74:a6:2f:6d:6d:fa:ec:eb:ae:e4:ad:b7:
b9:5b:98:00:66:0e:0b:52:e6:ea:eb:f8:a8:83:23:8a:fa:55:
aa:8b:d9:93:f1:86:af:8a:95:b5:3f:81:2d:e5:ed:6b:15:35:
7a:07:e1:97:ae:ed:df:a7:8a:2b:a7:a0:a4:b1:1d:88:09:1f:
85:12:e6:88:3a:23:ce:f5:51:59:0d:15:68:b5:47:02:e0:18:
cd:5b:a6:53:a9:5c:b5:0f:c0:0b:a8:8c:77:c5:3d:47:82:dc:
95:47:58:75:cb:be:74:d0:5a:70:12:d0:55:0f:91:3f:55:45:
ab:f7:93:b4:58:69:f1:90:c0:03:94:62:2c:9d:10:ac:85:08:
2e:ec:4c:a7:0c:d5:8f:61:02:d4:ab:8b:0c:34:c3:84:9f:9d:
af:6c:d6:2a:95:aa:9d:db:98:28:a6:08:93:d8:7e:64:e5:09:
27:e1:9a:6b:e3:2f:78:8f:b1:1d:95:d2:88:30:c4:d1:07:d5:
2b:ba:1f:93:73:d8:24:b0:81:bd:f9:4a:ed:45:0d:1e:23:47:
db:a5:87:34:bb:7d:c9:28:67:c9:43:95:97:ec:28:ad:2b:0f:
60:9d:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:11:57 2024 by rpki-client on console-ams.rpki-client.org