Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UGK52Zyi_uwieY7p4e1yfq6ia14.roa
File: UGK52Zyi_uwieY7p4e1yfq6ia14.roa (raw, json)
Hash identifier: DecVLJecVU6BWjxbwz427ZnexO1S+IPIlzvZz3B+Vck=
Subject key identifier: 50:62:B9:D9:9C:A2:FE:EC:22:79:8E:E9:E1:ED:72:7E:AE:A2:6B:5E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E79B1975FC78AA8041DFA30A927440990
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UGK52Zyi_uwieY7p4e1yfq6ia14.roa
Signing time: Tue 26 Mar 2024 07:37:45 +0000
ROA not before: Tue 26 Mar 2024 07:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 918
IP address blocks: 80.240.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 08:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:b1:97:5f:c7:8a:a8:04:1d:fa:30:a9:27:44:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 26 07:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5062b9d99ca2feec22798ee9e1ed727eaea26b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:fd:0a:6a:3c:8b:c4:ab:8c:6b:03:65:05:
5c:a8:27:51:e4:ed:2e:ce:86:bf:03:4f:66:3b:25:
12:9e:c1:cc:cd:06:bc:54:7f:0e:7f:6b:b9:d3:37:
bf:af:12:c8:0f:46:e0:e9:b1:6f:b7:f7:8f:3a:2f:
0e:4a:c5:42:4d:0e:83:ed:5d:0a:4a:83:a0:d0:2c:
8f:6c:15:5c:1e:9e:6b:f2:df:9f:1b:eb:d7:90:c3:
a4:7b:4a:9b:f5:0a:2b:e6:62:f3:5d:a7:ac:cd:60:
8f:e9:59:31:c5:7a:6d:37:71:f0:23:0d:7b:f7:e9:
45:48:65:49:66:d8:5b:3f:ec:8b:ad:65:c4:3f:98:
df:04:d0:12:b2:ec:dc:96:6f:56:20:85:91:01:20:
08:23:91:4a:29:19:4e:ba:7c:e4:c0:70:e6:54:fc:
da:3c:c3:b5:23:31:fd:c6:48:4f:e1:06:73:a5:84:
56:a1:75:d8:5a:c5:e4:9c:14:f1:fb:80:32:1b:ab:
2a:61:e5:f1:95:b6:e5:c0:0c:a5:49:96:81:99:64:
a5:20:4e:cb:0d:92:64:25:0f:c4:3a:ca:6f:9a:d4:
f5:e1:7e:1b:8c:59:c3:a9:ef:89:ff:69:06:4a:4d:
cd:76:69:da:5b:8e:90:20:b3:e3:74:ba:38:75:ad:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:62:B9:D9:9C:A2:FE:EC:22:79:8E:E9:E1:ED:72:7E:AE:A2:6B:5E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UGK52Zyi_uwieY7p4e1yfq6ia14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:41:25:a4:8d:81:14:a2:4d:b4:dd:74:bb:aa:20:04:eb:63:
1d:a5:dc:8c:88:c8:8e:79:15:ac:7b:37:c2:61:e8:6e:0b:ee:
38:42:fa:e3:0c:d8:f3:f0:2c:1d:f1:f8:0c:59:28:a9:61:3d:
ec:32:de:5f:bf:38:5f:22:85:70:33:d1:55:b2:f0:c3:d7:b4:
9f:8b:c8:d6:dc:bc:9c:5c:78:0c:23:b5:96:f6:e6:16:81:14:
b6:95:a4:7b:26:98:8f:88:bf:3e:da:db:15:78:c6:49:ab:43:
6d:ac:25:db:b9:44:80:a6:8b:5b:b3:1a:a8:f9:6f:3b:23:06:
4b:06:01:d3:ae:ac:20:fd:a9:de:4e:7e:3a:23:57:0a:e5:76:
d9:74:24:12:29:59:89:21:6b:00:52:e0:10:af:d3:f4:4d:04:
f0:75:29:c9:29:03:69:5f:3f:1a:e0:d7:27:50:85:e4:4b:b7:
7f:26:0e:58:db:b6:25:97:49:b4:64:a2:62:bb:88:58:62:33:
47:47:cf:f0:9f:57:ce:a2:56:1b:8c:4d:ea:ea:ed:03:6c:d6:
da:4a:fe:3c:50:80:e1:e0:9c:83:f8:62:04:18:8f:5d:af:d5:
76:02:04:a1:48:45:1d:45:3a:01:2d:16:3b:6c:8f:78:43:37:
f8:dd:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 17:14:29 2024 by rpki-client on console-ams.rpki-client.org