Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/UIq74dcRsOekPCbTk-tjAPBmx10.roa
File: UIq74dcRsOekPCbTk-tjAPBmx10.roa (raw, json)
Hash identifier: CFWiwvBwfrH45l8VpleQ505hDfFOKzfibjsdiS63jnI=
Subject key identifier: 50:8A:BB:E1:D7:11:B0:E7:A4:3C:26:D3:93:EB:63:00:F0:66:C7:5D
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 018CC4247BEF90093559439C71AF2A45EFCC
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/UIq74dcRsOekPCbTk-tjAPBmx10.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52122
IP address blocks: 185.4.185.0/24 maxlen: 24
185.4.186.0/24 maxlen: 24
185.4.184.0/24 maxlen: 24
185.4.187.0/24 maxlen: 24
46.255.185.0/24 maxlen: 24
46.255.186.0/24 maxlen: 24
46.255.184.0/24 maxlen: 24
46.255.187.0/24 maxlen: 24
46.255.188.0/24 maxlen: 24
46.255.190.0/24 maxlen: 24
46.255.191.0/24 maxlen: 24
46.255.189.0/24 maxlen: 24
2a01:9140:cccc::/48 maxlen: 48
2a01:9140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7b:ef:90:09:35:59:43:9c:71:af:2a:45:ef:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=508abbe1d711b0e7a43c26d393eb6300f066c75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:59:cb:6d:a3:be:f5:ec:ad:7d:12:e9:93:
b8:73:3c:a7:89:46:d0:33:b5:52:2e:42:ae:3c:de:
b1:a9:97:ec:78:9a:a2:b9:c5:41:c4:51:91:65:4c:
18:80:87:4a:63:16:7c:21:09:a0:a2:ce:4d:b4:93:
70:9c:10:e1:d8:e7:99:84:9c:75:84:18:31:ce:73:
d8:c6:b8:8b:1b:81:3d:94:27:cf:4d:a3:1a:41:c8:
b2:6c:cb:e0:09:72:e3:31:ba:cd:3a:49:30:a0:04:
c6:54:04:eb:21:14:32:43:31:50:6b:40:3a:5d:ff:
4e:3b:20:ad:bc:f7:36:13:21:e3:e9:f7:a0:47:8f:
46:6a:f2:ae:cb:05:05:5a:14:c1:38:2b:37:9f:92:
98:c8:e9:68:41:de:d5:5d:27:74:1e:ec:01:10:92:
9e:a6:1f:61:2c:41:ee:87:23:e2:0d:46:53:44:ed:
1a:6d:f2:ab:c2:25:35:08:a1:3d:e6:f3:12:15:09:
39:e2:c2:03:65:91:16:96:b7:f1:3c:fb:77:b3:e9:
02:d1:73:5b:a5:88:e0:96:1f:b5:7f:a4:50:d2:af:
6e:78:e9:cf:de:1a:ca:d3:6a:5e:12:69:c4:c7:9c:
c9:55:6a:00:d9:b5:71:43:c6:aa:74:24:ee:61:47:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8A:BB:E1:D7:11:B0:E7:A4:3C:26:D3:93:EB:63:00:F0:66:C7:5D
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/UIq74dcRsOekPCbTk-tjAPBmx10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.184.0/21
185.4.184.0/22
IPv6:
2a01:9140::/32
Signature Algorithm: sha256WithRSAEncryption
39:cf:99:91:8c:f0:47:a2:27:b4:18:ae:29:9c:60:81:08:c9:
27:c5:fc:5c:f9:db:f0:52:7f:62:13:7f:a3:19:73:f1:91:c4:
95:91:32:56:ad:f4:75:64:4e:69:25:5a:57:9b:42:13:e5:b9:
41:01:6f:a9:af:83:06:31:f8:08:5d:54:33:f5:e8:96:85:b3:
31:6d:30:f5:b3:95:95:d5:9a:d4:a4:9b:23:ef:43:28:91:95:
f7:94:a2:60:32:73:4f:e8:a2:a4:ce:9a:77:f0:30:55:15:09:
b5:78:e9:98:d3:09:16:83:06:d9:02:32:45:6e:5f:9e:44:c0:
ae:5b:58:65:0d:2a:d6:31:6f:d5:8b:ce:e4:9e:87:a2:bc:32:
13:52:f2:b6:30:e1:c8:4e:74:8c:a6:86:01:fa:a2:b3:f7:26:
a7:ee:1d:b4:35:13:6b:c3:2a:f9:5f:00:33:a4:92:ed:e2:10:
fe:51:17:70:e9:ec:08:dc:59:c1:94:c1:f6:e5:b6:fe:30:0a:
6a:70:06:ae:16:e3:3a:14:5d:52:4c:a6:fa:fe:46:41:79:52:
45:40:6f:ed:11:90:c4:c0:44:c1:b0:0d:0c:1e:16:a8:e0:b3:
bd:aa:82:2a:a2:fb:a1:10:59:7f:23:29:3e:66:26:73:83:b6:
e8:d4:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:05 2024 by rpki-client on console-ams.rpki-client.org