Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/U-r6NiUcxOsfE-4goSYM1HYz9tI.roa
File: U-r6NiUcxOsfE-4goSYM1HYz9tI.roa (raw, json)
Hash identifier: ev/z2RUdIk0c1IQG469Zd3Eb0VJTfOmBH8av8WKsEBA=
Subject key identifier: 53:EA:FA:36:25:1C:C4:EB:1F:13:EE:20:A1:26:0C:D4:76:33:F6:D2
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 018CC6B8E2295A033915258AAD7E393FC41F
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/U-r6NiUcxOsfE-4goSYM1HYz9tI.roa
Signing time: Mon 01 Jan 2024 20:30:54 +0000
ROA not before: Mon 01 Jan 2024 20:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52155
IP address blocks: 178.21.44.0/24 maxlen: 24
178.21.45.0/24 maxlen: 24
178.21.46.0/24 maxlen: 24
178.21.47.0/24 maxlen: 24
2a01:9800:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e2:29:5a:03:39:15:25:8a:ad:7e:39:3f:c4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Jan 1 20:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53eafa36251cc4eb1f13ee20a1260cd47633f6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:d5:6b:a0:e3:4c:b3:ae:ec:d7:fb:03:db:
b7:8e:30:3c:a0:8f:e2:4b:4b:80:83:d2:5a:36:dd:
2b:b6:08:1f:1f:2a:a0:31:25:bf:00:06:bb:1d:77:
50:8f:c3:7a:90:8c:1a:6d:72:ad:28:a2:d5:09:f8:
06:8a:60:ff:2e:47:cb:93:20:77:69:5e:ee:5f:1c:
62:61:da:c4:35:71:a0:29:59:62:85:49:f7:54:93:
b4:e4:5e:64:cd:e0:dc:70:b7:90:30:ea:56:77:e2:
da:f7:15:fe:99:1f:4e:81:71:9e:02:48:d4:dd:81:
d6:65:ac:c7:b8:cc:b9:3a:fd:ce:96:e2:87:2d:89:
f2:73:a0:21:6b:07:d1:c6:a1:04:eb:d3:50:a2:87:
aa:aa:ec:4b:d1:55:f8:c2:42:23:55:9b:0d:d1:4e:
71:38:43:47:27:a5:60:01:2e:a5:8b:62:c3:1a:f1:
cf:19:71:09:ec:01:19:0f:ac:b8:30:4c:70:4e:e2:
1c:9f:97:8f:7b:eb:f9:28:46:e6:cf:06:60:b3:42:
52:15:7e:52:66:b3:12:0b:d1:b7:39:c1:6d:39:a6:
5b:2e:e1:fc:7f:82:0e:56:3f:a1:da:71:92:99:02:
4c:f9:4b:c2:b4:fa:82:bb:09:6a:57:b0:78:46:8e:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:FA:36:25:1C:C4:EB:1F:13:EE:20:A1:26:0C:D4:76:33:F6:D2
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/U-r6NiUcxOsfE-4goSYM1HYz9tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.44.0/22
IPv6:
2a01:9800:8000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:7c:a4:29:d3:f2:3f:73:30:df:69:30:dc:b2:b2:32:a1:26:
ff:90:82:43:9c:12:cb:50:f7:2e:af:d1:3b:68:85:37:f0:44:
14:ea:19:ed:2c:80:65:d6:63:74:e9:a8:32:c1:43:81:e9:9d:
f0:c6:77:06:1d:50:71:f6:9a:e3:18:fd:9b:7b:a5:a3:cb:db:
26:3c:ae:3f:da:ac:14:16:c0:f6:07:ea:be:76:04:33:f1:33:
7a:6f:fe:58:06:f5:b3:14:71:29:b7:9e:d8:ae:9c:e7:76:d6:
96:88:18:02:01:c8:e0:50:0b:a5:22:7c:ee:06:b5:80:0c:d2:
75:1f:b0:3b:a3:82:41:9d:f7:60:2f:3e:ed:c4:8f:29:cf:2b:
17:05:d9:9b:fe:60:b3:4e:60:a8:86:94:7a:f2:99:f0:f7:5c:
9d:9a:bc:75:10:bd:d0:99:90:48:9c:38:78:01:3d:b4:f0:76:
dd:ff:2a:94:ba:a2:cb:a7:c5:03:5f:ad:e9:01:be:bb:67:f0:
c2:ad:a6:35:e3:f5:8c:49:0f:30:1b:15:37:31:b4:1e:c8:80:
d3:af:47:6c:93:eb:e7:08:ba:29:82:d9:74:02:af:0d:ca:fc:
15:f5:73:b7:04:1f:75:8c:03:e9:6a:48:6b:b7:b1:ab:75:46:
48:a7:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:08:56 2024 by rpki-client on console-fra.rpki-client.org