Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa
File: U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa (raw, json)
Hash identifier: 5Dh5I9/j3YNcyVSmsZ0m9ECaIGXYXbiI60TYaDDzlbQ=
Subject key identifier: 53:F1:AD:30:FD:B1:FF:41:B9:A1:91:89:40:11:84:75:50:C6:8E:C7
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018CC26D62D78D663896724B0D842C25DCC9
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49367
IP address blocks: 185.213.21.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
2a11:840:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:62:d7:8d:66:38:96:72:4b:0d:84:2c:25:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53f1ad30fdb1ff41b9a191894011847550c68ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:98:54:1d:d4:59:f5:69:2a:72:97:20:69:
23:22:09:8d:39:25:49:13:2d:c3:85:56:6b:48:b3:
39:13:7e:aa:e6:0b:6a:b4:e2:e6:e9:37:90:ac:5d:
76:38:b2:df:c2:09:cf:0b:f2:32:61:87:d0:35:89:
f8:0f:b4:33:6b:89:11:fb:15:b7:02:7d:b7:c0:a2:
b0:d6:1d:2f:28:d3:ea:5a:71:06:96:95:a5:78:9b:
89:e2:99:2e:25:b5:81:f0:a2:f0:65:17:38:d5:c7:
ea:6c:ea:48:ea:28:2b:cc:d8:27:bd:87:e3:64:91:
cb:a5:36:c0:fe:82:31:6c:ce:fa:a8:c4:bb:b4:23:
a8:f8:29:e1:9c:30:86:0a:61:a0:e8:58:43:dc:2f:
14:5f:bb:d1:11:0e:6f:e3:1e:cd:53:97:c5:dc:ba:
ea:67:bb:6d:9d:bf:ff:1a:70:cc:76:e1:c0:12:0c:
11:32:45:52:35:76:38:55:bb:67:c2:ff:70:8e:0b:
08:28:ac:1f:a8:9e:6e:fa:51:23:ec:6e:33:75:ec:
d8:31:41:4c:4f:4d:6c:54:03:ab:d6:02:f8:f4:c9:
09:d0:a9:5c:99:0b:33:2d:ff:cb:c4:a0:9b:97:f3:
9c:b2:1a:51:bf:86:1d:e8:ec:7a:9e:a4:19:69:24:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:AD:30:FD:B1:FF:41:B9:A1:91:89:40:11:84:75:50:C6:8E:C7
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.20.0/23
IPv6:
2a11:840:23::/48
Signature Algorithm: sha256WithRSAEncryption
4e:46:db:78:68:87:e2:1e:3f:a5:4e:f6:69:ab:a0:df:f0:1e:
46:b5:a9:8b:4d:1e:1f:3f:d0:fe:64:ed:73:2e:44:32:08:53:
5c:39:ed:47:af:11:d9:c5:d3:b2:ae:0d:d0:4a:71:46:8b:14:
27:a0:b3:bf:4f:78:8e:d5:e8:a0:0d:fa:6d:c8:a2:74:4f:81:
09:8c:2a:c0:96:e5:d4:95:4b:9e:c1:30:c8:f8:38:bb:94:98:
d3:56:df:c3:29:3d:c8:e6:d3:67:13:8c:85:ac:3e:e5:d1:38:
60:74:8d:59:b9:09:de:89:84:42:9d:94:21:12:4a:ee:26:17:
2e:a3:4e:cd:25:4f:cd:76:71:5c:4e:28:a5:cb:1d:3e:73:36:
62:2a:6f:a8:78:f4:42:a4:f1:53:8b:17:de:20:a2:e5:f1:b8:
31:34:5a:45:ba:ba:09:0f:1e:ed:7d:e0:77:c6:16:6c:12:a7:
c8:93:cf:43:cd:75:fd:ac:92:fe:a8:d6:c8:96:99:75:22:aa:
ae:cb:44:ec:bf:db:ef:12:8e:08:f8:08:78:36:d0:2e:3f:74:
23:17:4b:af:7e:27:61:47:75:46:63:28:be:06:d1:ed:f3:4f:
51:f5:28:8a:6b:73:7c:79:bd:bb:94:31:a1:b6:76:80:66:66:
72:cb:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:04:00 2024 by rpki-client on console-fra.rpki-client.org