Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/UtdYA4fSVUJhiytFf3kl4UTKBt4.roa
File: UtdYA4fSVUJhiytFf3kl4UTKBt4.roa (raw, json)
Hash identifier: NvZm07/uSBAiKEwlNKUiE0shg8444Zcy8o7ZDwFJqBU=
Subject key identifier: 52:D7:58:03:87:D2:55:42:61:8B:2B:45:7F:79:25:E1:44:CA:06:DE
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 018CC26D68A691A73E79F8637C7229FB1CFA
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/UtdYA4fSVUJhiytFf3kl4UTKBt4.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 178.219.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:68:a6:91:a7:3e:79:f8:63:7c:72:29:fb:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52d7580387d25542618b2b457f7925e144ca06de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:b1:45:17:48:d2:de:dd:de:f5:80:ff:73:
4d:ae:bb:26:dd:37:91:9d:2e:a8:d1:43:ad:f9:18:
fc:c4:ea:15:f3:fb:8f:97:c0:4c:97:8a:ef:88:7c:
fe:ef:07:86:6c:8e:54:24:4d:4a:d5:b1:e9:fc:51:
c2:7d:47:67:eb:62:19:47:f8:72:fe:c9:97:56:f4:
c0:15:9b:13:c2:8e:47:12:1b:04:6a:61:8a:d2:d6:
83:aa:ce:20:f1:da:4a:7d:ba:5e:ec:e2:b1:27:1b:
3c:99:fd:34:87:16:9d:86:fa:50:a1:cf:75:f3:d0:
53:66:61:ce:de:1d:21:be:2a:7c:9c:8f:5f:4f:75:
0a:c7:52:62:50:c6:a5:dc:a7:aa:4d:eb:cb:6f:55:
f6:1d:e0:e4:59:15:d6:e5:a1:38:0f:31:cb:83:83:
e9:3a:68:c7:7a:42:13:7a:38:b7:48:9b:9f:d9:46:
87:79:48:7d:00:8f:90:f0:59:30:84:25:fc:ca:f1:
53:ba:5b:10:14:64:02:60:be:58:02:4e:5e:13:d0:
70:79:19:37:a3:1c:57:dc:af:3a:58:f7:d2:c1:77:
dd:a3:43:80:18:6d:d2:59:09:d3:5f:1d:c1:73:e8:
af:42:01:2a:5f:bc:ff:b2:22:12:7f:29:14:30:60:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:58:03:87:D2:55:42:61:8B:2B:45:7F:79:25:E1:44:CA:06:DE
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/UtdYA4fSVUJhiytFf3kl4UTKBt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.67.0/24
Signature Algorithm: sha256WithRSAEncryption
54:48:a8:b9:24:f8:44:0e:2c:64:e7:40:90:46:f7:25:b4:d7:
c2:61:85:a7:99:07:5a:ea:44:b1:5b:6a:46:08:da:8c:3c:ce:
2d:fe:02:a5:a3:82:44:0d:1b:f9:f4:a5:16:eb:8c:84:99:8b:
94:9b:ee:e4:02:a2:e8:6d:f0:00:b7:1b:bd:6b:2a:ba:7c:18:
f0:2b:b0:7e:eb:a4:90:18:9e:e6:d2:fe:db:e8:ec:c9:b6:8d:
01:2f:14:25:ff:27:69:6b:83:91:2e:a8:83:1c:66:0e:c2:71:
8d:dc:e9:74:b2:06:11:5b:48:c0:f2:3e:15:9f:b5:be:34:11:
37:27:e7:66:81:7b:ae:09:64:c7:37:9a:fc:2c:16:f6:d8:5f:
8d:df:b2:77:25:49:c1:53:f7:ec:f9:04:8f:ae:6c:5e:87:79:
03:00:d3:89:1f:56:0e:8a:d7:a8:c7:bc:13:99:ea:e5:0c:43:
3c:ce:c6:86:e8:ee:52:73:57:81:6d:69:70:64:37:d8:3f:c0:
87:e1:70:17:d8:06:94:4a:90:a5:44:f7:83:c2:0b:83:a3:8e:
92:3c:b3:bf:65:46:f3:69:63:d4:ec:c1:cc:68:92:b4:de:93:
d3:17:e2:21:15:41:73:66:54:e9:d0:fe:9e:d6:9f:2b:08:d7:
b3:41:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:40:27 2024 by rpki-client on console-ams.rpki-client.org