Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/UrAqkOP1mWBpPMBYKQ89rcVREko.roa
File: UrAqkOP1mWBpPMBYKQ89rcVREko.roa (raw, json)
Hash identifier: oIroz6ri2DFZSsoJTWOkjzWf8hpb037CMMiPRj617hA=
Subject key identifier: 52:B0:2A:90:E3:F5:99:60:69:3C:C0:58:29:0F:3D:AD:C5:51:12:4A
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 018CC3B716964A855CFD96070CFD1F97BE19
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/UrAqkOP1mWBpPMBYKQ89rcVREko.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47655
IP address blocks: 176.111.72.0/24 maxlen: 24
194.152.35.0/24 maxlen: 24
176.111.74.0/24 maxlen: 24
194.152.34.0/23 maxlen: 23
176.111.73.0/24 maxlen: 24
176.111.72.0/21 maxlen: 21
2001:67c:2760::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:16:96:4a:85:5c:fd:96:07:0c:fd:1f:97:be:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52b02a90e3f59960693cc058290f3dadc551124a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:cd:6a:20:08:7f:1e:55:89:12:3f:ea:7b:
26:fb:6e:91:ce:fb:5c:a6:e2:90:cb:c3:b5:50:11:
d6:1c:03:0a:a2:04:d5:6d:0b:7d:8d:d6:3e:b3:e2:
a2:56:b9:ce:c9:af:2c:61:e4:26:3c:aa:3f:50:8c:
6c:84:05:fc:1f:2d:7e:8c:56:9f:9e:9a:ec:bc:d6:
7d:3b:74:83:4f:03:ea:fa:8f:49:6d:55:55:f0:7c:
53:8a:21:ba:dd:8b:b3:f9:da:35:ef:a1:de:72:0a:
a3:cf:7c:f2:e2:4c:c5:a2:de:ee:5d:98:a6:68:d9:
ed:13:3e:c9:65:9a:15:9e:96:28:d7:a7:5f:8c:dc:
b3:b0:7e:17:98:47:f3:3b:16:23:96:a8:ee:51:2e:
61:0e:7b:b6:41:2c:b2:f5:d9:ce:b9:ef:5c:e8:43:
5e:b4:9b:e5:e7:c9:d8:fc:ad:e9:68:c1:91:70:87:
22:15:5b:2b:b0:52:f0:3a:35:82:8d:c8:24:69:bd:
58:83:8c:fd:7d:59:21:fe:97:70:56:36:73:18:84:
3c:fc:26:ae:8e:20:ab:46:da:51:5f:bc:76:78:1a:
e9:61:b0:fe:5a:f7:cc:7c:18:8b:a7:4a:4c:df:7c:
93:89:7f:e7:b6:c5:41:e2:35:56:38:59:cf:52:f4:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:2A:90:E3:F5:99:60:69:3C:C0:58:29:0F:3D:AD:C5:51:12:4A
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/UrAqkOP1mWBpPMBYKQ89rcVREko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.72.0/21
194.152.34.0/23
IPv6:
2001:67c:2760::/48
Signature Algorithm: sha256WithRSAEncryption
0b:76:ea:b7:10:4b:82:23:6d:cc:40:bc:b0:82:9e:dc:77:03:
87:22:c9:d7:69:89:b5:d0:95:6b:09:0f:a3:54:25:9e:7d:99:
27:9c:07:31:62:ea:e4:4c:a4:a2:96:52:2f:31:84:19:af:5c:
ed:5a:30:e2:44:9c:f2:e6:ee:1e:86:e9:15:34:72:f1:b1:e2:
dc:9d:27:6e:d8:19:32:31:96:b4:dd:c8:aa:72:04:64:07:df:
0f:fc:f6:97:da:c6:fc:46:77:2d:a9:44:f3:9d:ed:88:b3:15:
3f:b2:2b:94:e0:f2:c8:42:7f:af:25:9e:ab:b3:19:90:80:01:
61:ad:94:ad:69:f9:c5:a3:8d:07:5e:01:ad:a0:45:ed:1c:a9:
91:77:eb:29:2c:9d:9b:f0:db:3f:9f:e6:90:c5:cc:57:bc:dd:
70:6c:49:5d:67:0c:da:9e:6e:9b:b8:03:d4:f3:98:eb:e5:10:
d2:b5:8b:fe:49:67:13:3d:bf:0a:65:dc:d5:5e:2d:98:61:e1:
65:26:d0:96:28:1c:bf:e5:8a:33:7f:50:2b:6e:de:ae:a4:a0:
13:5f:27:08:d4:e1:39:c6:34:08:d9:0e:11:5e:f3:b8:0e:ed:
a6:ea:17:33:f6:f4:3f:e7:c2:21:b6:f8:d6:64:19:6d:23:d1:
06:d5:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:35 2024 by rpki-client on console-fra.rpki-client.org