Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/UgPTvrIPmPb6GdeEYBVSbUk8Yoc.roa
File: UgPTvrIPmPb6GdeEYBVSbUk8Yoc.roa (raw, json)
Hash identifier: WjuIzaRakIN9EUDSoR0Pf+MXRGAb+2MgdGnIiFajZMI=
Subject key identifier: 52:03:D3:BE:B2:0F:98:F6:FA:19:D7:84:60:15:52:6D:49:3C:62:87
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 018CC34917A6E734F77235DE5D95EEA8827B
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/UgPTvrIPmPb6GdeEYBVSbUk8Yoc.roa
Signing time: Mon 01 Jan 2024 04:29:56 +0000
ROA not before: Mon 01 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.67.4.0/22 maxlen: 22
185.67.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:17:a6:e7:34:f7:72:35:de:5d:95:ee:a8:82:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5203d3beb20f98f6fa19d7846015526d493c6287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:a8:b4:4c:2a:49:0e:65:0e:08:f8:2b:63:
ea:27:83:f4:3c:92:1c:bc:83:5b:48:1e:dc:dc:c7:
f0:9c:5d:e5:2f:cf:ff:06:dd:02:b6:ac:d8:0a:3f:
bb:b4:3a:19:c6:f4:bd:ec:65:4c:05:84:f7:e4:39:
84:5a:ab:be:d0:8b:fb:9a:f3:23:50:24:e5:7a:d1:
d7:10:cf:9e:05:72:19:ce:cf:bc:8e:fe:e0:c6:71:
81:90:6d:50:c8:d1:95:c1:bb:4e:38:fb:a8:66:74:
5e:77:bd:2d:68:9c:f6:64:08:52:f4:ec:5e:e1:ea:
a2:fb:b3:88:b3:44:e7:6f:ca:07:4c:ba:4f:d6:46:
22:98:2c:29:f2:bb:53:b8:42:28:bc:ef:2a:c3:ea:
6b:94:3a:03:b1:5d:6a:7d:97:05:98:b5:8a:ce:d6:
27:16:cb:45:b7:5f:8d:31:83:5e:35:0f:e9:f9:57:
78:d9:fa:56:fe:27:c9:b2:03:3f:43:2e:b4:19:ce:
0c:16:fd:5c:6f:5b:a7:9e:d4:1c:d4:c0:c8:6d:43:
88:54:0b:6c:09:d9:8f:aa:b6:4e:63:03:58:7b:12:
84:26:24:20:b5:38:84:68:37:2d:fc:db:34:cb:00:
28:5f:e6:f8:f1:c5:67:12:47:25:ef:db:01:55:1f:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:03:D3:BE:B2:0F:98:F6:FA:19:D7:84:60:15:52:6D:49:3C:62:87
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/UgPTvrIPmPb6GdeEYBVSbUk8Yoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:46:8e:d9:fa:47:26:53:9d:08:7e:4e:28:ee:2b:6d:20:03:
a0:8b:a4:33:6b:5f:da:02:f0:64:83:32:6e:b1:ce:d2:df:55:
dd:b9:a5:9b:84:eb:8e:64:2f:e6:e8:fe:6c:47:3e:06:54:b5:
9b:88:37:f5:6e:12:9c:70:6a:56:c4:3b:15:29:cc:23:15:58:
44:87:91:39:d0:f2:49:9c:45:60:0c:8b:75:9c:de:4a:3c:f1:
e5:80:1c:49:c7:54:b8:3f:65:c6:8f:11:7d:49:2f:3b:40:d5:
0f:6c:ab:cd:91:57:24:15:a1:e6:24:7f:fc:9e:89:00:d5:9f:
e6:f9:ff:58:00:91:9b:5b:7e:e8:07:5c:1d:d7:1e:c6:28:5c:
50:26:46:df:4f:5a:03:a3:d4:29:9c:da:01:13:99:df:bd:13:
e3:63:5c:42:37:59:eb:e2:82:f0:65:99:fd:17:56:54:4d:dd:
c2:99:ce:fb:65:1d:e0:56:ec:7c:39:2b:b0:78:8a:66:9d:a4:
99:f3:c6:e2:f2:96:e9:57:53:b3:90:05:4e:c4:a8:de:09:4e:
e8:a6:d7:ce:ee:d8:94:b5:05:95:d9:75:de:e3:59:30:20:d9:
55:0a:2c:63:d9:a7:88:81:b2:5f:a7:b4:cf:e5:3b:c7:42:ba:
4c:81:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:02:36 2024 by rpki-client on console-fra.rpki-client.org