Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/uFIagI19syrPUqf9PKja854Uqy8.roa
File: uFIagI19syrPUqf9PKja854Uqy8.roa (raw, json)
Hash identifier: U18tP5wQTr/tudJqWTKY0zWqceEjODjjxVhmv5Mdunk=
Subject key identifier: B8:52:1A:80:8D:7D:B3:2A:CF:52:A7:FD:3C:A8:DA:F3:9E:14:AB:2F
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 018CC8DEBD3441957917FEBC1F77B0DD9118
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/uFIagI19syrPUqf9PKja854Uqy8.roa
Signing time: Tue 02 Jan 2024 06:31:29 +0000
ROA not before: Tue 02 Jan 2024 06:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8391
IP address blocks: 195.253.96.0/19 maxlen: 24
185.119.138.0/23 maxlen: 24
195.253.0.0/16 maxlen: 24
195.253.6.0/24 maxlen: 24
195.138.32.0/19 maxlen: 24
194.77.54.0/23 maxlen: 23
2a01:5b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Oct 2024 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:bd:34:41:95:79:17:fe:bc:1f:77:b0:dd:91:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 2 06:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8521a808d7db32acf52a7fd3ca8daf39e14ab2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:1b:19:d3:0d:92:87:cb:cc:18:84:ae:5b:
0d:c7:dd:dd:03:1c:ed:a1:f3:1b:0f:59:86:fd:56:
db:0d:82:d7:45:ef:fa:68:68:51:5d:88:85:9a:ac:
78:0c:5b:03:4b:2a:e3:36:2c:16:10:dd:fb:a5:47:
1f:49:25:1d:e2:9b:ce:60:67:79:38:c5:3e:90:e8:
5f:25:bf:81:d7:cd:c4:30:99:71:37:5f:a6:6b:1b:
1b:90:45:70:f1:57:42:1a:a4:9d:b5:f0:fd:a6:c7:
88:60:19:a1:89:7a:8b:63:4b:a8:11:22:40:00:46:
e8:4a:48:74:11:be:3d:59:0a:35:79:83:94:29:a1:
80:37:e0:a8:51:22:90:1e:1c:4e:14:68:49:63:68:
6a:a9:db:cc:0e:e5:5b:35:51:e9:a4:17:a6:1b:f4:
ee:e2:6a:43:d8:02:72:a2:ad:08:c0:61:a0:7a:09:
85:60:52:4d:31:58:59:02:16:ef:86:65:ba:e9:ff:
15:27:79:00:8a:04:61:30:e3:5d:a4:39:2d:d9:13:
67:c3:78:a8:c9:d1:76:b4:11:60:3d:cb:1f:54:12:
32:d2:48:be:d7:ce:c5:39:b4:ee:93:2a:c9:c3:6d:
cb:52:52:04:0b:21:d4:de:1c:b4:17:13:19:b1:73:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:1A:80:8D:7D:B3:2A:CF:52:A7:FD:3C:A8:DA:F3:9E:14:AB:2F
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/uFIagI19syrPUqf9PKja854Uqy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.138.0/23
194.77.54.0/23
195.138.32.0/19
195.253.0.0/16
IPv6:
2a01:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:3c:7d:e3:f2:ca:53:d0:c9:1f:e8:99:d1:61:7d:26:03:59:
7c:11:ec:b9:b2:c9:b6:5c:fe:b4:f3:2d:fd:43:c9:c3:d9:48:
7c:37:3b:2c:b9:bb:ef:98:16:b3:85:90:b4:17:c4:45:c5:ed:
7c:2c:1d:9a:54:4d:ca:9e:8a:67:6e:9f:b2:fb:b9:31:a4:63:
79:88:68:67:2c:25:9f:87:8c:76:b1:bb:3c:10:40:6e:b0:e4:
e2:c2:84:a4:cb:74:e4:56:e4:b1:e4:f3:e6:ab:b5:ba:c2:b3:
1b:fd:44:8a:6a:83:d8:04:47:3c:a7:63:35:7b:bf:ea:8b:28:
61:28:78:c7:8f:64:4b:a4:19:f0:f8:74:05:ee:ec:d4:d4:52:
4e:34:f8:85:a4:53:41:4b:6f:99:a9:1b:3c:2a:29:6c:b9:4f:
96:56:cf:8e:96:89:9c:15:9f:07:eb:bc:b6:e2:fa:40:78:f4:
71:dd:95:0c:a6:52:bc:b2:33:37:ff:ee:de:4a:0c:00:b7:61:
be:cf:11:dc:70:38:09:49:8b:41:86:c3:66:cd:e0:65:56:6c:
13:66:0b:ed:ec:bf:40:59:fb:d2:34:c1:de:30:e2:81:cb:df:
9d:76:7c:04:8f:89:e1:a3:26:8e:1d:39:83:f9:d7:63:39:28:
5e:c2:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 07:56:19 2024 by rpki-client on console-fra.rpki-client.org