Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Um1NhBhf46-hmbtlAartMB_Iz2Y.roa
File: Um1NhBhf46-hmbtlAartMB_Iz2Y.roa (raw, json)
Hash identifier: 3qxUlLw5Nb+gQwaZoZyz1jt33U6cgPncM2o4SZRo3+g=
Subject key identifier: 52:6D:4D:84:18:5F:E3:AF:A1:99:BB:65:01:AA:ED:30:1F:C8:CF:66
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 018CC72739D4A73FA3FE07637586A604C2E8
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Um1NhBhf46-hmbtlAartMB_Iz2Y.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 128.178.0.0/15 maxlen: 16
192.26.28.0/22 maxlen: 22
192.26.32.0/21 maxlen: 21
192.33.192.0/20 maxlen: 20
192.26.40.0/22 maxlen: 22
192.26.44.0/24 maxlen: 24
192.26.46.0/23 maxlen: 23
192.33.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:39:d4:a7:3f:a3:fe:07:63:75:86:a6:04:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=526d4d84185fe3afa199bb6501aaed301fc8cf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:52:14:48:31:08:dd:32:c5:71:ab:82:1e:
69:32:6c:4f:34:7e:e1:51:aa:cb:e0:b6:10:1c:e1:
6b:7a:98:f2:b9:26:d6:32:15:be:b9:6a:4f:24:b3:
af:22:87:2f:23:32:97:ef:5e:5c:6b:f3:01:84:34:
64:ec:ad:ec:61:f6:0d:f0:61:8c:99:3e:f7:fd:8e:
7c:14:32:27:b1:9c:66:0e:38:32:ab:8b:92:a4:9d:
1d:f3:ae:ff:61:cc:b1:c0:b8:fd:26:a3:93:76:1e:
2e:9b:ab:91:c7:b3:d5:f8:6e:df:7b:4b:2f:2c:4a:
4c:f3:29:27:9a:45:20:14:4f:ed:ac:44:3d:70:6a:
c2:43:cf:fc:fd:95:42:36:1e:71:1f:5b:ea:75:6d:
6b:51:c4:2d:cc:ef:1a:8a:a4:e3:e9:4a:64:e1:d6:
a8:f0:77:ac:55:dc:08:e7:47:53:29:d3:fe:e2:f6:
1b:e6:06:d3:dc:93:a9:8e:fb:a3:58:ab:0c:09:96:
a9:2f:f1:9d:05:8d:5e:19:ab:88:d1:79:57:44:1e:
44:c8:96:6e:8e:92:fe:5e:53:7a:8f:cf:7b:58:ff:
fb:ac:e9:9e:03:72:c0:fe:dd:d1:cf:83:dc:ae:c0:
d5:f1:46:69:1b:d8:98:dc:55:31:3a:f9:8b:01:6d:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6D:4D:84:18:5F:E3:AF:A1:99:BB:65:01:AA:ED:30:1F:C8:CF:66
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Um1NhBhf46-hmbtlAartMB_Iz2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.178.0.0/15
192.26.28.0-192.26.44.255
192.26.46.0/23
192.33.192.0-192.33.211.255
Signature Algorithm: sha256WithRSAEncryption
57:e9:eb:18:93:a4:d7:92:97:9d:54:a4:50:a1:86:e7:c1:e7:
53:62:72:f8:03:02:24:3c:14:fc:2c:4e:e9:7e:fc:c3:da:61:
49:96:ac:07:62:5b:4f:3a:25:ec:92:6d:e5:3d:6c:89:a9:42:
cb:52:ce:54:99:f3:ff:eb:54:58:ca:34:3c:19:9e:c7:72:b6:
a9:f3:42:70:d2:10:63:bd:99:66:80:4b:83:8a:cd:bf:8e:9a:
4d:c4:db:56:d3:12:b4:3a:41:4a:50:24:71:9d:66:c8:fe:f2:
eb:98:0b:b7:08:ac:14:ea:0d:57:32:07:a7:49:f1:17:cb:f3:
79:4c:ee:a3:96:ba:7e:30:24:1c:df:94:e0:cc:21:0f:bd:ec:
0d:f2:c4:07:73:cd:96:ab:f6:a9:88:ae:29:fd:08:87:52:73:
1a:28:5d:29:28:0c:95:93:4b:4c:93:4e:9d:a6:57:b9:5d:0e:
40:5f:6b:e9:de:e6:19:c5:35:da:94:c0:77:78:b3:f7:59:ad:
61:e0:d2:f2:70:c9:50:5a:d7:85:bc:0d:f9:6e:8c:b4:09:bc:
53:0c:35:a7:77:07:55:4e:2c:75:c6:2c:da:1c:a1:a5:d1:46:
c8:19:a9:44:f2:72:af:ce:df:fd:71:bf:dc:37:55:dc:96:7d:
dc:01:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:27:56 2024 by rpki-client on console-fra.rpki-client.org