Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/uBz70mBnLpXhfo7-QgJcIQY4hMQ.roa
File: uBz70mBnLpXhfo7-QgJcIQY4hMQ.roa (raw, json)
Hash identifier: JKqNUSs3WgodBEYOfjQd31MOk+n406+h6eXahyJzLRg=
Subject key identifier: B8:1C:FB:D2:60:67:2E:95:E1:7E:8E:FE:42:02:5C:21:06:38:84:C4
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 018CC26D5D7FA3AE368EDF868A8EE04523EC
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/uBz70mBnLpXhfo7-QgJcIQY4hMQ.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21101
IP address blocks: 94.143.96.0/21 maxlen: 24
185.5.95.0/24 maxlen: 24
185.5.94.0/24 maxlen: 24
91.240.230.0/23 maxlen: 23
193.109.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5d:7f:a3:ae:36:8e:df:86:8a:8e:e0:45:23:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81cfbd260672e95e17e8efe42025c21063884c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:f1:8b:34:5c:ed:35:f1:63:78:2d:40:79:
34:e6:33:dc:f7:4f:35:12:9f:a9:94:0e:3b:c9:43:
4d:6e:77:75:8c:bb:79:bf:f6:8b:84:6e:d5:59:7b:
cc:54:5d:35:50:d2:f8:99:a3:c8:bb:9d:7c:13:37:
e8:8f:38:b8:04:8b:f7:9c:dc:67:16:b3:b0:58:76:
f4:5b:d2:48:9a:80:39:b4:0e:9e:46:96:16:59:93:
f9:f6:89:80:34:60:7e:31:2d:f4:bb:a4:dd:55:fe:
5d:ec:87:7b:f3:e6:19:98:b8:a8:5e:fa:87:a2:92:
5f:22:c2:3e:9b:5e:49:84:58:c8:35:1b:98:6f:88:
11:21:3b:15:6f:a8:45:9d:5b:fb:b1:5e:de:7a:bf:
d0:0a:95:81:86:23:57:24:ad:1c:03:b5:4f:a2:6b:
8a:38:20:55:84:c6:a8:a3:27:05:14:99:99:fe:e3:
64:4b:2e:d4:e5:f9:ff:d7:bf:53:a4:ff:58:a9:a4:
f0:43:a4:26:22:31:c2:2a:88:15:99:97:d4:7d:90:
2a:bb:88:c5:a8:6f:55:09:46:53:22:21:81:af:5d:
5a:ba:9b:7c:eb:56:99:0c:13:22:36:a2:f6:6b:b3:
9b:03:b0:e1:a5:cb:4a:e4:c0:f3:29:03:92:a5:e0:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:FB:D2:60:67:2E:95:E1:7E:8E:FE:42:02:5C:21:06:38:84:C4
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/uBz70mBnLpXhfo7-QgJcIQY4hMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.230.0/23
94.143.96.0/21
185.5.94.0/23
193.109.32.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:c8:1b:c0:93:f0:d2:67:8f:4a:cf:1c:2a:3f:7a:2e:89:00:
44:1c:ec:90:80:a1:f2:9a:f4:ea:cf:e0:e7:cb:70:cb:fe:f2:
84:93:71:a1:c1:4c:7f:52:6f:2e:37:45:58:d0:ae:cc:9a:6b:
5b:1b:ac:f8:50:b7:7c:79:9d:25:ef:c3:9c:93:bf:0e:0a:a5:
f7:c5:2c:7e:fe:e8:47:47:44:6d:47:e9:a9:d9:aa:20:15:22:
1d:1a:bd:f3:2e:9f:c1:dd:26:b4:e0:6a:df:65:e1:87:ce:5a:
69:22:9e:15:52:68:da:5a:e4:b0:fe:b2:74:8b:d4:db:7a:bd:
af:8f:23:b0:d2:ca:b5:d2:34:2a:09:16:f3:9c:b4:2f:d9:28:
48:c4:30:56:2b:11:56:9f:68:fc:e8:f1:e7:62:f9:2d:0a:ea:
2e:4c:c1:83:cc:73:30:6d:b3:ad:07:3c:fb:01:88:ff:7b:e5:
b3:6e:8d:87:44:0c:e4:e6:f8:4e:4c:d3:fd:a2:87:a7:c2:43:
5b:ec:a9:e9:d0:96:b4:67:98:77:8e:40:db:57:ab:7c:23:6b:
22:b6:f6:7a:d2:5a:26:03:83:ef:8d:b5:b7:3b:64:3c:90:df:
e2:72:f9:5f:fc:89:b0:2e:68:16:fc:5f:4b:be:59:b6:d3:f3:
21:99:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:38:21 2024 by rpki-client on console-fra.rpki-client.org