Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/UYoJB-Rk3kc8dgej9JjyXgsCyfg.roa
File: UYoJB-Rk3kc8dgej9JjyXgsCyfg.roa (raw, json)
Hash identifier: tu82cgNS9X3LlXfqCse7vnz4Zxz6ydu4dMt8nUX8dZk=
Subject key identifier: 51:8A:09:07:E4:64:DE:47:3C:76:07:A3:F4:98:F2:5E:0B:02:C9:F8
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 0190E9CA8FBE30FD14D447219D93289D82FD
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/UYoJB-Rk3kc8dgej9JjyXgsCyfg.roa
Signing time: Thu 25 Jul 2024 12:08:04 +0000
ROA not before: Thu 25 Jul 2024 12:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.131.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:ca:8f:be:30:fd:14:d4:47:21:9d:93:28:9d:82:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Jul 25 12:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=518a0907e464de473c7607a3f498f25e0b02c9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:da:ac:57:b1:e3:1d:9c:13:be:5a:c4:09:
61:a9:98:d6:23:60:21:43:29:b6:e8:eb:81:48:74:
e4:52:6e:d1:3e:cd:20:9a:97:74:e2:c7:a8:f3:e2:
72:a5:34:12:7e:56:42:06:0f:cb:70:36:56:8b:07:
42:91:78:d8:22:7e:46:2b:33:d7:0b:00:33:8d:bf:
0c:a9:9b:54:f6:63:e3:c2:80:d7:ac:6c:18:b4:2c:
6e:ac:43:29:e1:d4:e7:0f:26:6b:95:d9:7e:c0:b5:
f2:46:7c:d6:a2:61:92:76:9f:bf:47:59:b4:09:d8:
83:06:48:95:be:cb:b1:75:54:fa:5e:ff:52:34:06:
a5:d6:64:23:96:49:f7:ab:30:51:12:21:e8:a4:11:
2b:41:7e:77:67:29:55:34:91:84:1b:01:fa:b4:31:
7d:70:1d:1e:3d:54:f4:89:0f:01:d3:f5:4a:bb:90:
97:52:b0:56:fc:b0:a5:51:97:b8:68:52:07:4f:77:
63:9b:4f:81:4f:3f:d7:4b:cc:49:f4:e0:d7:24:d6:
8b:c9:a3:56:3f:5f:82:36:f7:91:42:27:8e:a8:9b:
da:b5:32:aa:22:0e:bc:07:e6:a8:d5:00:a0:f1:7d:
1e:f5:3b:8b:50:ac:83:24:b2:42:e4:c6:0c:35:08:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:09:07:E4:64:DE:47:3C:76:07:A3:F4:98:F2:5E:0B:02:C9:F8
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/UYoJB-Rk3kc8dgej9JjyXgsCyfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e0:2b:61:e6:f0:f2:76:b7:07:70:f8:d5:01:a0:66:4c:e8:
a5:ae:97:b5:1e:95:0f:8f:d0:95:94:0d:9f:af:65:a1:c4:f2:
3e:32:84:0f:8e:71:f4:89:fc:d3:22:a1:a3:c9:31:1b:18:e6:
3f:3c:e0:a3:e8:4c:16:12:64:18:3f:d1:ab:f5:38:6f:04:a1:
2b:6c:5f:da:61:02:6b:9d:f6:6c:7c:61:69:5c:90:49:55:93:
99:15:a7:06:86:97:f2:6d:82:78:7c:9b:17:a7:b9:0e:9e:e1:
4b:10:cf:02:0b:e1:e0:e9:af:cb:09:3b:8f:27:a9:05:00:17:
c8:52:fa:3c:4b:72:cb:09:f2:60:38:26:7c:32:b1:cd:1c:a2:
98:a6:0a:eb:93:70:40:68:6a:22:76:18:3e:a6:c2:dd:90:15:
9c:fa:20:c4:91:79:95:60:9e:6e:dd:c6:bf:0a:58:8c:73:a8:
77:3d:d1:ea:3d:fb:4e:37:b0:44:3b:c9:7c:3a:da:39:4f:e0:
df:94:60:28:27:30:f8:07:54:e3:b0:83:ea:1c:5d:dc:be:32:
0f:5a:bc:e8:19:aa:3d:46:57:12:fb:17:0a:58:38:97:31:b7:
8a:8d:5d:20:1c:e0:7a:1d:4b:d1:67:e0:bf:ff:16:69:18:77:
f9:17:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:55:00 2024 by rpki-client on console-fra.rpki-client.org