Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/UqGPNXczV_yvIDwiNKwRS5OSiHA.roa
File: UqGPNXczV_yvIDwiNKwRS5OSiHA.roa (raw, json)
Hash identifier: SJ005CVFyWOF31C8DlQIlKrNejQeJXS6Gzy6N57Vf2I=
Subject key identifier: 52:A1:8F:35:77:33:57:FC:AF:20:3C:22:34:AC:11:4B:93:92:88:70
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 018CC424B78F55203B4B3316DBF0B18488E9
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/UqGPNXczV_yvIDwiNKwRS5OSiHA.roa
Signing time: Mon 01 Jan 2024 08:29:49 +0000
ROA not before: Mon 01 Jan 2024 08:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205157
IP address blocks: 185.70.162.0/24 maxlen: 24
185.228.171.0/24 maxlen: 24
185.228.170.0/24 maxlen: 24
185.228.169.0/24 maxlen: 24
185.228.168.0/24 maxlen: 24
2a0d:2a00:1::/48 maxlen: 48
2a0d:2a00:ab1::/48 maxlen: 48
2a0d:2a00:2::/48 maxlen: 48
2a0d:2a00:ab2::/48 maxlen: 48
2a0d:2a00:c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:b7:8f:55:20:3b:4b:33:16:db:f0:b1:84:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jan 1 08:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52a18f35773357fcaf203c2234ac114b93928870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:38:dc:f6:54:d9:7f:81:7e:89:b4:96:9f:
4b:1b:f2:85:2a:2f:ec:27:f7:b1:f5:17:c2:d8:13:
06:2a:ef:6c:d7:9e:79:d6:7d:3e:dc:a6:dc:1a:ae:
4c:aa:ad:67:81:08:27:90:51:df:fe:a7:9e:74:32:
d1:78:ca:3c:c0:d0:cf:12:0c:fa:79:bd:a9:b0:ac:
25:96:c2:2f:84:cc:51:db:ad:d2:3b:a7:3c:7f:f5:
ae:55:d9:99:cb:be:c2:fa:fb:a5:95:72:f2:0a:f8:
93:69:ae:91:60:a0:fa:4b:06:3a:60:38:df:7d:f8:
b9:60:46:f6:4e:22:3f:cf:40:3a:57:b8:3a:96:3c:
63:0c:04:08:16:c2:f1:ab:74:20:52:31:eb:2e:13:
90:9b:35:2d:ff:f2:08:df:d5:06:a5:1b:ba:d2:3d:
1f:1a:e8:50:c0:ee:18:6e:ed:9c:dd:78:fd:18:d1:
89:aa:f2:79:a8:8b:0f:4b:3f:b3:72:73:d2:f7:01:
3d:94:5a:86:51:e4:02:38:e5:23:27:65:d3:46:4e:
cb:34:00:87:7b:a2:ec:42:13:30:3c:e4:78:04:9e:
bb:fd:bc:87:17:1c:09:6f:65:2e:f7:49:be:b3:71:
7b:9e:03:f1:76:bb:ca:75:fc:3c:8b:42:b5:11:2d:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A1:8F:35:77:33:57:FC:AF:20:3C:22:34:AC:11:4B:93:92:88:70
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/UqGPNXczV_yvIDwiNKwRS5OSiHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.162.0/24
185.228.168.0/22
IPv6:
2a0d:2a00:1::-2a0d:2a00:2:ffff:ffff:ffff:ffff:ffff
2a0d:2a00:c0::/48
2a0d:2a00:ab1::-2a0d:2a00:ab2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:9d:7c:74:0d:15:ee:85:65:d5:93:9f:0e:a9:ca:98:13:5d:
6a:f9:7c:54:86:12:80:3c:ab:71:fc:40:12:1a:00:78:d6:c2:
08:47:bb:00:08:92:03:23:fe:88:21:d4:97:8b:4e:3d:5d:48:
2b:3a:87:1c:09:fe:00:00:70:7a:60:22:7d:84:ef:04:7b:d7:
62:62:57:36:1f:f0:a7:9d:83:87:e3:26:53:a5:fb:ff:12:a9:
92:0f:69:59:54:22:10:bd:36:1d:ed:cf:6f:9a:c9:3a:20:0a:
a9:43:a9:0a:56:f2:2d:25:26:03:3e:57:df:39:e5:2d:9b:f8:
5e:a6:f3:19:92:0d:52:53:4d:f2:df:dd:21:fb:38:3c:c9:d3:
40:1c:25:e1:96:88:81:90:9d:b1:25:33:ea:fb:47:f1:e6:c8:
13:3a:14:7c:7d:4a:7d:e6:77:72:8f:aa:62:26:01:a1:2d:53:
ba:33:9f:73:38:68:49:6e:b8:4c:df:c1:b0:a2:80:99:8f:0d:
0e:e8:d0:ad:47:bb:25:a5:13:fb:55:2c:4a:d8:42:d8:22:cd:
4d:1b:11:ee:fa:62:a4:37:ca:c8:1d:44:ad:cd:65:7a:43:85:
8b:7c:24:e5:53:66:9b:8e:77:44:2e:5e:32:d5:2d:be:bc:85:
c8:c8:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:10 2024 by rpki-client on console-ams.rpki-client.org