Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/uDc4i4p6eny-QgwgSB5iXl7VcQA.roa
File: uDc4i4p6eny-QgwgSB5iXl7VcQA.roa (raw, json)
Hash identifier: 8RF3yWbFEpAbWZte0UQcF45vt5SDpy2wS0uqESvqObA=
Subject key identifier: B8:37:38:8B:8A:7A:7A:7C:BE:42:0C:20:48:1E:62:5E:5E:D5:71:00
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 018E80FB6DBC55E7719D02CA63A6A7422E02
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/uDc4i4p6eny-QgwgSB5iXl7VcQA.roa
Signing time: Wed 27 Mar 2024 17:35:45 +0000
ROA not before: Wed 27 Mar 2024 17:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215404
IP address blocks: 87.236.248.0/21 maxlen: 24
185.218.227.0/24 maxlen: 24
2a14:dc0:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:fb:6d:bc:55:e7:71:9d:02:ca:63:a6:a7:42:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: Mar 27 17:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b837388b8a7a7a7cbe420c20481e625e5ed57100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:77:45:91:32:2a:f2:6e:21:90:93:29:17:
d9:9d:15:bd:ae:48:5a:a7:79:75:61:f1:3a:5f:cd:
70:07:d6:20:06:3c:54:e4:60:c3:02:27:7a:ac:21:
ab:3b:41:39:70:96:7d:76:8b:23:43:50:be:af:41:
6e:db:71:79:8a:70:c7:f7:8d:ec:0a:9e:33:73:30:
6b:41:1a:df:a6:5e:69:82:42:ae:dc:18:00:f0:d5:
c4:85:7f:bf:1b:32:ab:3b:d9:f2:3e:39:49:14:9c:
7b:41:bf:8d:ed:2c:e2:00:54:f6:13:a6:7a:99:37:
a3:84:c9:08:5f:63:88:83:7a:aa:46:e8:41:81:15:
8e:7a:53:86:6c:26:96:ce:86:a0:14:86:bc:c0:29:
96:91:86:95:9a:00:35:1f:68:1b:f8:3c:a0:e5:15:
67:6b:25:45:3d:a8:fc:b2:12:38:08:c1:1f:66:bd:
78:86:32:36:e4:36:2c:8c:44:d8:05:5a:a0:d3:b8:
40:28:0c:39:f0:8f:2d:da:ce:0f:21:d5:28:71:95:
c5:2b:a4:70:41:7d:b7:db:84:80:3e:4f:da:d1:21:
cb:a4:8d:83:1e:ae:41:0a:1e:38:91:fb:49:a9:66:
c5:36:5c:0c:bd:31:71:2a:20:c9:15:e3:ec:6c:1b:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:38:8B:8A:7A:7A:7C:BE:42:0C:20:48:1E:62:5E:5E:D5:71:00
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/uDc4i4p6eny-QgwgSB5iXl7VcQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.248.0/21
185.218.227.0/24
IPv6:
2a14:dc0:100::/40
Signature Algorithm: sha256WithRSAEncryption
3a:8b:f9:87:6a:70:35:db:9e:6e:0d:4f:e0:e4:e7:44:32:63:
06:b3:df:60:b5:f8:fb:48:5e:51:05:9d:c0:9d:f5:79:df:65:
1a:80:e9:55:57:e5:5b:bd:94:f5:51:92:66:1c:87:eb:f4:b1:
9f:19:53:d7:4f:c1:4e:50:d8:7f:95:9d:2e:72:68:74:f7:8d:
d5:8b:cd:79:9e:6d:c0:5f:f4:c4:c6:8d:9b:48:b1:bb:8c:d8:
af:3c:df:de:0f:d8:60:81:a0:7f:45:57:ba:a6:85:18:81:40:
40:a3:f5:b7:2d:7c:fc:f2:c0:54:89:e1:0d:82:8d:21:c7:e2:
01:e5:bd:4b:48:e0:9b:62:c7:ce:a4:18:ca:ad:a0:63:be:4e:
1a:a0:88:f9:c2:7c:bb:cf:e7:57:95:a9:bb:42:9c:b3:9d:d3:
62:18:97:cb:74:eb:3e:ce:10:ce:76:22:fe:c5:88:c3:c6:86:
ca:1a:80:22:f0:1b:81:ac:df:91:4d:30:bf:c1:c5:f8:c7:e7:
5b:45:d5:4a:53:dc:88:ec:76:c9:2d:a2:6e:e3:40:db:56:16:
17:0a:60:af:f9:c8:5b:0b:84:04:d3:f8:e6:6f:79:3c:4a:ec:
05:98:9d:80:0a:37:14:d4:ca:fc:ff:00:41:ab:15:86:f3:c8:
55:32:97:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:10:52 2024 by rpki-client on console-fra.rpki-client.org