Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/UhOYA3GdVhgHP3mSeqShXm3RYfQ.roa
File: UhOYA3GdVhgHP3mSeqShXm3RYfQ.roa (raw, json)
Hash identifier: YXz9nPmINowxLZMRazxlF6BHgCYO2CYuza2YnlyO/b4=
Subject key identifier: 52:13:98:03:71:9D:56:18:07:3F:79:92:7A:A4:A1:5E:6D:D1:61:F4
Certificate issuer: /CN=88ff3ba6b60d39ad105ff85c269d626c8157655f
Certificate serial: 018CC348CB7111F70F834523222AECB05292
Authority key identifier: 88:FF:3B:A6:B6:0D:39:AD:10:5F:F8:5C:26:9D:62:6C:81:57:65:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP87prYNOa0QX_hcJp1ibIFXZV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/UhOYA3GdVhgHP3mSeqShXm3RYfQ.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202803
IP address blocks: 185.154.44.0/22 maxlen: 24
2a0b:5ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/iP87prYNOa0QX_hcJp1ibIFXZV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/iP87prYNOa0QX_hcJp1ibIFXZV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP87prYNOa0QX_hcJp1ibIFXZV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:cb:71:11:f7:0f:83:45:23:22:2a:ec:b0:52:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff3ba6b60d39ad105ff85c269d626c8157655f
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52139803719d5618073f79927aa4a15e6dd161f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:93:90:b1:04:80:f1:79:6d:18:d7:48:aa:
0b:0c:55:39:ee:6b:e1:df:51:dc:94:e0:a2:28:d4:
b9:c3:74:07:a8:36:71:b6:46:fa:7a:6e:8a:40:e2:
08:14:e8:9e:1b:32:ed:33:a3:f5:a9:0d:eb:3d:a4:
83:e8:9d:9b:b5:2a:0c:1f:6b:17:eb:9c:a0:b0:85:
c6:2f:c7:95:e9:bd:4c:6c:4f:33:3e:09:da:4e:63:
7e:70:9a:67:ec:db:67:2a:d6:e9:af:4b:63:c0:7f:
d3:89:c4:40:71:d5:14:da:42:49:49:e7:26:70:44:
a0:3d:a2:93:5a:52:47:b6:ba:93:4e:55:30:70:4e:
34:40:8f:4a:be:aa:cc:17:65:05:e0:5d:fa:3e:ba:
11:6b:e5:bc:18:49:00:53:38:2e:16:9f:3c:86:b1:
b8:45:e0:4a:17:2a:42:6d:13:b4:2d:6e:3b:d3:1b:
fb:83:0c:dc:71:0a:d4:1a:da:fb:b1:ca:b1:27:41:
d4:f0:74:b8:2a:80:39:2a:83:61:30:77:9d:96:b2:
99:69:5b:15:91:ba:95:c4:7e:21:00:c1:d5:9f:3a:
ea:7f:96:d6:a5:34:48:24:46:8a:b2:c3:e1:fc:3b:
ef:82:c4:c9:eb:18:4a:ad:0e:ff:a3:1d:a8:5d:3b:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:98:03:71:9D:56:18:07:3F:79:92:7A:A4:A1:5E:6D:D1:61:F4
X509v3 Authority Key Identifier:
keyid:88:FF:3B:A6:B6:0D:39:AD:10:5F:F8:5C:26:9D:62:6C:81:57:65:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP87prYNOa0QX_hcJp1ibIFXZV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/UhOYA3GdVhgHP3mSeqShXm3RYfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d2c9db-3615-466e-a34a-b109ed9ea8c0/1/iP87prYNOa0QX_hcJp1ibIFXZV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.44.0/22
IPv6:
2a0b:5ac0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:80:11:3f:b9:41:b9:62:15:b1:ae:06:6a:cb:4f:37:19:0f:
75:8b:3f:99:7e:7b:76:c9:c5:37:5e:55:89:18:54:1d:2b:fb:
67:81:c5:38:30:bb:31:fc:71:c8:e6:32:3c:c6:a2:8c:82:d7:
80:93:90:b6:ac:72:a4:14:da:80:0a:aa:59:20:87:3e:25:97:
f9:13:ba:f3:fc:74:2a:ca:fa:f3:c4:76:e2:48:20:0c:43:85:
84:00:04:c1:fb:91:f4:31:5f:10:25:d1:36:9b:28:89:a6:8a:
21:32:70:98:cd:65:2e:3b:f2:3d:25:25:4b:16:f0:e1:e7:57:
9a:cc:1e:ca:04:fa:c1:ba:fe:1d:9a:ef:79:24:a5:85:d9:ff:
c1:d3:c8:98:79:a4:c6:48:54:06:ca:60:8c:ab:af:de:35:a0:
b0:de:d4:3d:0d:fa:93:05:5e:14:c6:df:10:87:80:82:b1:dc:
22:08:34:21:10:2d:0f:0d:7a:74:6d:90:52:31:ab:0d:b7:01:
bb:06:cf:e7:e2:20:f7:85:30:e0:16:c6:6a:56:b1:cf:5c:72:
a9:f2:9f:24:1f:4f:16:fd:da:bb:46:b3:a2:01:25:14:e7:f4:
75:4f:1e:ee:5e:3d:5e:f9:7b:ab:34:9c:64:a2:ca:43:d6:3a:
0c:65:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 23:07:22 2024 by rpki-client on console-fra.rpki-client.org