Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/Uh0t8z5Lb3AfQy8DjyykAhj0tXs.roa
File: Uh0t8z5Lb3AfQy8DjyykAhj0tXs.roa (raw, json)
Hash identifier: jJi3LCsHCw+eywfK/RBjMFkegd5C3HhsUAthlcIltpY=
Subject key identifier: 52:1D:2D:F3:3E:4B:6F:70:1F:43:2F:03:8F:2C:A4:02:18:F4:B5:7B
Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial: 018CCA99280920262C717975EAB615C154BC
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/Uh0t8z5Lb3AfQy8DjyykAhj0tXs.roa
Signing time: Tue 02 Jan 2024 14:34:44 +0000
ROA not before: Tue 02 Jan 2024 14:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 185.221.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:28:09:20:26:2c:71:79:75:ea:b6:15:c1:54:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
Validity
Not Before: Jan 2 14:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=521d2df33e4b6f701f432f038f2ca40218f4b57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:f5:23:0d:0b:ad:ed:64:59:ef:f4:14:cc:
2f:5c:b9:e6:2c:37:9c:30:16:16:6a:72:b1:d2:e9:
f7:8f:d3:c4:97:19:c1:cc:bd:03:5d:8b:0b:c9:00:
14:5a:5f:4f:82:b7:2f:a0:ff:cc:03:49:a0:b0:54:
bd:11:98:67:67:21:ed:3e:bc:04:ed:0e:7f:e9:9c:
5f:47:ea:43:6b:3c:05:5c:5e:c0:e6:ae:24:be:43:
f9:77:73:40:a8:c9:ab:5b:1c:53:90:43:02:36:24:
3f:0d:8f:a1:f6:69:c5:f7:4b:19:15:71:71:f2:38:
bb:2e:65:af:f5:aa:5d:6e:f5:2e:2d:73:c6:1f:0b:
d8:96:e1:fd:f6:cd:75:41:16:e5:4f:15:83:90:bd:
84:be:36:76:27:3e:40:61:2f:f1:aa:17:cf:fd:35:
a1:2f:78:18:1f:08:9e:92:9d:02:ad:49:c8:59:86:
d5:76:1e:79:7a:f9:c1:ef:a0:40:9c:41:d9:d3:41:
b8:4b:b3:49:b4:ca:68:56:f9:1a:92:67:84:98:23:
54:2d:57:da:11:1b:0e:42:2c:c9:7a:d4:f1:1c:97:
d8:b2:c5:58:5b:55:23:68:9a:ea:04:ad:02:f5:99:
24:32:f7:fb:17:6f:62:34:9c:61:e9:1d:2c:5f:15:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:2D:F3:3E:4B:6F:70:1F:43:2F:03:8F:2C:A4:02:18:F4:B5:7B
X509v3 Authority Key Identifier:
keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/Uh0t8z5Lb3AfQy8DjyykAhj0tXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.217.0/24
Signature Algorithm: sha256WithRSAEncryption
65:04:26:ae:ef:cd:c6:2e:dd:86:54:e4:5e:7c:53:36:ac:e5:
78:d1:80:52:a6:65:b0:ea:21:19:1f:24:11:17:54:62:3f:a8:
c6:a4:60:94:ad:e0:e8:ae:0e:41:20:d7:7d:53:96:60:c0:d2:
6c:0c:1c:c3:9e:bd:fe:f5:07:3d:7b:d1:82:79:63:2e:b1:e1:
d9:0b:1f:49:dd:ab:ca:46:65:7b:83:8c:ab:ff:66:b9:14:31:
73:de:45:13:3f:bb:05:d8:04:78:c7:fa:a7:18:2d:52:f0:34:
80:03:1e:dd:02:bb:e3:79:c1:3e:b3:27:f3:37:05:fe:e9:81:
ff:ac:2d:95:4a:10:3e:81:47:2c:1b:13:18:fc:fe:4e:bc:4f:
f9:67:9f:ea:00:6c:1e:9f:96:c0:f3:94:f3:13:1e:52:e4:72:
c0:11:f1:eb:38:df:24:9e:29:54:01:13:ea:5c:e6:b4:b2:35:
de:de:d7:89:b4:b8:e5:1b:bc:03:ad:b1:e2:6d:29:bf:f9:70:
27:93:04:5e:0f:9d:41:5f:99:6d:ff:17:7e:bd:60:af:8b:b6:
ab:7b:bd:91:d9:22:df:12:5f:7e:a0:a6:e9:e8:39:0a:da:c1:
e7:48:0c:70:c6:d3:dc:19:fa:3a:0f:66:aa:b1:9c:50:eb:3a:
b4:45:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:25:29 2024 by rpki-client on console-ams.rpki-client.org