Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/uIgTXIFCj8SfgpuwLB0ZBho-Lg0.roa
File: uIgTXIFCj8SfgpuwLB0ZBho-Lg0.roa (raw, json)
Hash identifier: ZiueVwNVaqkciLRNbZtAz43czqBB3DuGlidT2cuUQeA=
Subject key identifier: B8:88:13:5C:81:42:8F:C4:9F:82:9B:B0:2C:1D:19:06:1A:3E:2E:0D
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 018CC6B797438546425E854D55BD3CD82B63
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/uIgTXIFCj8SfgpuwLB0ZBho-Lg0.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28917
IP address blocks: 46.44.0.0/18 maxlen: 18
46.44.0.0/20 maxlen: 20
62.140.224.0/19 maxlen: 19
62.140.233.0/24 maxlen: 24
62.140.234.0/23 maxlen: 23
62.140.250.0/24 maxlen: 24
62.140.252.0/23 maxlen: 23
46.44.32.0/19 maxlen: 19
62.140.255.0/24 maxlen: 24
80.77.160.0/20 maxlen: 24
80.77.162.0/23 maxlen: 23
80.77.169.0/24 maxlen: 24
80.77.172.0/22 maxlen: 22
93.191.11.0/24 maxlen: 24
93.191.8.0/21 maxlen: 21
93.191.12.0/23 maxlen: 23
93.191.14.0/24 maxlen: 24
185.221.44.0/22 maxlen: 22
2a02:2518:11::/48 maxlen: 48
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:97:43:85:46:42:5e:85:4d:55:bd:3c:d8:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b888135c81428fc49f829bb02c1d19061a3e2e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:22:36:2e:33:e5:45:3a:bd:2d:da:7c:10:
e6:e5:eb:33:62:9a:c5:b7:18:62:64:4f:0f:6a:39:
94:de:0b:8a:3c:03:8a:15:4f:46:4f:a4:d3:e6:e5:
17:6c:a0:4e:08:f5:f3:87:24:95:d7:23:2c:f6:3a:
d9:d9:47:5e:15:52:49:ae:c9:01:81:18:41:a1:c8:
29:fb:0d:85:74:8e:7d:57:ea:85:f4:43:fe:9c:1c:
0c:b9:c0:75:b8:2c:f2:e4:33:03:ad:a7:44:8e:d1:
f2:0e:09:4c:6f:0d:ed:4f:0a:b5:e1:f1:55:36:7f:
9f:b3:fe:cf:ef:ab:3f:92:fc:59:73:aa:e6:3c:20:
f4:6b:55:2b:15:1e:76:c2:b4:fe:cf:d6:7d:19:21:
86:23:ad:99:4a:ab:40:e3:33:3c:fc:23:f6:6b:38:
49:c0:67:a5:57:66:ff:8a:33:f1:15:1e:1e:c1:dc:
38:b6:c0:14:8e:e9:f3:28:b5:b3:34:58:63:8e:59:
f7:70:c7:15:d2:f7:9d:fe:34:7d:50:ce:0a:87:f6:
94:d1:51:87:23:69:41:07:a1:bd:76:ee:79:99:c3:
df:bc:2c:a6:e5:4c:89:d2:eb:86:8c:21:c9:2a:08:
8c:5e:bf:ad:b1:93:94:03:50:de:f2:61:6d:26:2c:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:13:5C:81:42:8F:C4:9F:82:9B:B0:2C:1D:19:06:1A:3E:2E:0D
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/uIgTXIFCj8SfgpuwLB0ZBho-Lg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.44.0.0/18
62.140.224.0/19
80.77.160.0/20
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
af:09:3f:65:41:9a:b4:8b:84:4a:b6:3b:a0:02:7c:f5:b8:79:
ab:58:12:8d:6f:21:36:96:8d:b4:f7:e0:fe:b0:08:77:ae:b7:
ca:aa:eb:b4:2c:3e:31:b7:8c:b7:f9:8a:04:9a:bd:12:73:e9:
b5:f5:de:49:60:b7:1b:b7:6e:11:5f:76:d2:ad:cb:10:70:71:
25:b7:14:91:ba:19:1d:75:28:4b:7d:32:48:79:06:76:ec:dd:
86:28:48:07:c3:6f:f6:00:73:17:2a:8d:27:7a:9d:27:12:7a:
d2:2c:09:fe:4d:fa:af:39:b9:b0:66:4f:41:95:6a:83:22:c4:
f0:53:ba:67:7e:ab:e3:db:7a:f6:1d:f3:5a:76:2b:38:1e:1c:
0d:31:ac:eb:9d:9d:b0:d3:6c:d5:38:79:51:a3:a7:5b:fe:03:
30:d2:db:a3:2d:5c:16:e3:b3:17:c7:65:4d:3a:58:ac:17:fa:
9e:ed:61:82:7c:e3:d8:71:97:a5:fc:d7:4c:4e:ee:40:7d:d5:
c3:ad:0f:8f:8a:22:dd:ef:59:ef:9a:3d:d1:ab:8b:1c:95:0a:
3c:27:c9:df:bb:77:08:d8:37:f9:a8:e7:30:74:3a:bc:da:5b:
eb:97:da:55:66:88:9f:fe:40:59:99:9f:4e:18:70:75:5a:61:
4d:6a:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:57:10 2024 by rpki-client on console-fra.rpki-client.org