Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uLyVfkbZEtv0Wtdk6yy_ea7UQJU.roa
File: uLyVfkbZEtv0Wtdk6yy_ea7UQJU.roa (raw, json)
Hash identifier: s+P4H8f8rNx6ryCTBsleOcyKZy2N93vDGOZN4be1c94=
Subject key identifier: B8:BC:95:7E:46:D9:12:DB:F4:5A:D7:64:EB:2C:BF:79:AE:D4:40:95
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0191316456BAA72258AB5A0F4826D198F1D2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uLyVfkbZEtv0Wtdk6yy_ea7UQJU.roa
Signing time: Thu 08 Aug 2024 09:49:04 +0000
ROA not before: Thu 08 Aug 2024 09:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52008
IP address blocks: 185.58.206.0/24 maxlen: 24
185.172.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:64:56:ba:a7:22:58:ab:5a:0f:48:26:d1:98:f1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 8 09:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8bc957e46d912dbf45ad764eb2cbf79aed44095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:27:cc:15:82:06:3a:8f:68:03:b9:38:75:
30:4e:75:45:15:23:fb:98:39:99:49:ed:87:51:d0:
bd:a4:49:cc:67:47:17:50:b3:65:da:98:99:f2:0b:
37:c4:a5:bc:ae:6e:44:4e:30:9c:df:98:4d:26:5a:
ea:bc:34:84:28:84:12:55:5e:61:81:aa:2b:ca:2b:
15:7a:3f:50:b2:f8:17:39:07:a9:ce:b6:2d:a4:9c:
a9:16:16:71:b2:ea:c1:71:0b:88:af:5e:86:78:b6:
72:89:8a:d9:c8:d1:63:be:8b:ca:7b:65:ca:08:09:
81:d3:71:3c:e0:a5:16:4c:a1:93:db:64:3b:74:7d:
5d:cd:a2:60:17:a0:97:1f:d7:10:ee:1a:1a:3e:aa:
4d:1d:8f:24:88:6b:b0:72:d2:4f:31:9f:6e:2d:cd:
b9:0c:cf:59:f8:f2:46:f1:0e:35:97:bf:c5:16:09:
12:64:30:21:0f:7d:a1:2f:34:49:8f:66:cb:15:93:
ca:97:cf:1b:73:fe:9d:00:29:37:8a:76:2c:28:1e:
eb:69:79:4e:46:dd:f6:18:82:04:f4:06:0c:4f:74:
02:a5:6c:4a:ba:4f:ed:ce:74:fb:19:ca:eb:45:38:
ca:92:54:62:39:09:c6:5a:28:91:e8:ae:90:a4:cb:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BC:95:7E:46:D9:12:DB:F4:5A:D7:64:EB:2C:BF:79:AE:D4:40:95
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uLyVfkbZEtv0Wtdk6yy_ea7UQJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.206.0/24
185.172.128.0/24
Signature Algorithm: sha256WithRSAEncryption
85:de:71:fe:e9:c0:a2:99:6c:28:14:14:d3:bf:09:47:80:85:
c5:62:92:50:73:45:a4:1d:37:df:cd:3b:7f:f9:68:dc:f6:fa:
96:78:d9:bc:45:4e:cd:a8:36:17:09:d1:e5:79:8d:b3:49:05:
27:85:f7:d7:d4:49:ac:0c:82:19:c7:88:3e:af:a0:c4:76:9b:
77:03:72:78:7a:49:46:c9:9f:08:cc:68:26:7d:c8:b0:22:8a:
46:f2:c2:09:e5:90:e6:59:29:ea:32:bf:d2:f1:89:fc:90:8d:
7c:58:c3:34:7a:80:b8:4e:56:b7:b4:82:d8:70:aa:83:ff:02:
d3:35:5b:4e:f7:35:5f:e4:22:e7:2d:8b:73:6c:8f:e8:4b:16:
fc:3e:57:e4:72:ef:3b:9e:af:5b:e4:85:b0:1e:f9:c4:76:77:
a5:ab:4e:40:81:eb:c9:6d:bd:0b:1a:70:05:93:32:f7:f1:55:
b3:8c:4d:7b:a2:dd:7a:80:ae:4a:6e:77:a9:a0:e0:e4:a9:0f:
90:cb:e2:ab:38:16:11:18:90:22:0f:34:7a:8a:d9:c4:81:9e:
48:8f:0c:bf:18:20:b7:2d:a5:6c:43:c7:c7:0f:17:c0:ca:90:
c4:1d:20:d1:f2:03:87:dd:58:63:12:bc:51:ba:5e:6e:ee:e7:
2e:5b:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:48:57 2024 by rpki-client on console-ams.rpki-client.org